Privacy Policy

At Business Specialist Training Ltd, we are dedicated to safeguarding your privacy and maintaining the security of your personal information. This privacy notice explains how we handle your data in accordance with the UK General Data Protection Regulation (UK GDPR).

Business Specialist Training Ltd delivers specialist training and certification services to individuals and businesses. We act as the data controller for any personal information we manage, unless stated otherwise.

Contact Information: If you have any questions regarding this privacy notice or your personal data, please get in touch at sales@businessspecialisttraining.co.uk.

Information We Collect We may gather and use the following types of personal data:

Identification details (e.g. full name, date of birth)
Contact information (e.g. postal address, email, phone number)
Employment data (e.g. job role, employer’s name)
Training history and certifications
Payment and invoicing details
Identification documents or evidence of eligibility, where necessary

How We Obtain Your Data Your personal data may be collected in the following ways:

Directly from you, such as when you sign up for training or fill out a form
Via your employer or funding sponsor
Through awarding bodies and training affiliates
Through communications or interactions via our website or email

Purpose of Processing We use your personal data for various legitimate purposes, including:

Delivering and managing training and certification programmes
Registering learners with awarding organisations
Issuing certification and maintaining training records
Fulfilling legal or regulatory obligations
Providing customer service and responding to queries
Processing payments and account management

Lawful Grounds for Processing Our data processing activities are supported by one or more of the following legal bases:

Consent: when you explicitly permit us to process your data
Contract: where data is required to fulfil an agreement with you
Legal obligation: to comply with statutory or regulatory duties
Legitimate interest: for purposes such as business operations that do not infringe your rights

Sharing Your Data We may need to share your personal information with trusted third parties, such as:

Awarding bodies (e.g. CITB, NOCN, Pearson)
Employers or sponsors (if relevant)
Our internal team, including trainers and assessors
Service providers including payment processors
Regulatory bodies or law enforcement where legally required

We never sell your information or share it for advertising purposes without your consent.

Data Retention Periods We only retain your information for as long as necessary, for example:

Course records and certification details (typically 6 to 10 years)
Financial information (minimum of 6 years, in line with HMRC rules)
Some awarding organisations may require longer retention

Your Rights Under Data Protection Law You are entitled to exercise your rights under the UK GDPR, which include:

Access – to see what personal data we hold about you
Correction – to amend inaccurate or incomplete information
Deletion – to request removal of your data where applicable
Restriction – to limit how we use your data
Objection – to challenge the way your data is processed
Portability – to receive your data in a structured format for use elsewhere

Please contact us using the details provided to make a request regarding your rights.

Keeping Your Data Safe We put appropriate technical and organisational safeguards in place to protect your data. These include:

Use of secure servers and encrypted transmissions
Controlled access to information and regular staff training
Data minimisation and systematic deletion procedures

Privacy of Children: Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal data from anyone in this age group. If you are under 18, please do not provide any personal information through our website or services.

If you believe that a child under the age of 18 has submitted personal data to us, please contact us immediately so we can take appropriate steps to delete the information.

We encourage parents and guardians to monitor their children’s online activity and to help ensure that personal data is not shared without permission. Please speak with your children about online privacy and guide them not to provide personal information on websites without adult supervision.

Transfers Outside the UK: Most data we process is stored within the UK. If data is transferred internationally, we implement appropriate safeguards such as Standard Contractual Clauses.

Use of Cookies and Website Data: Our website may use cookies for essential functionality, performance tracking, and improving user experience. You will be asked for your consent before non-essential cookies are placed on your device.

Policy Updates: We may occasionally revise this privacy policy. Where substantial changes occur, we will communicate them via our website or direct contact, where appropriate.

Acceptance of This Policy: You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Website and Services and submitting your information, you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorised to access or use the Website and Services.

If you have any questions, concerns, or complaints regarding this Policy, the information we hold about you, or if you wish to exercise your rights, we encourage you to contact us.

We will attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws.

This document was last updated on 07/05/2025