Privacy Policy

Effective Date: 12 May 2025

1. Introduction

IDENTITIUK TRAINING LTD (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Contact Information

Organisation Name: IDENTITIUK TRAINING LTD
Contact Number: 07967 726237
Data Protection Officer (DPO): Sue Johnston

3. Data Collection

Types of Personal Data Collected:

Full Name
Email Address
Phone Number

Collection Methods:

We collect personal data directly from you through forms on our website or other communication channels.

Sensitive Data:

We do not collect sensitive personal data (e.g., health information, financial details, biometric data).

Children’s Data:

We do not knowingly collect data from individuals under the age of 18.

4. Purpose and Legal Basis for Processing

Purposes:

To create and manage user accounts
To send marketing communications

Legal Bases:

Consent: We obtain explicit consent for marketing communications.
Contractual Necessity: Processing is necessary for account creation and management

5. Data Sharing and Transfers

Third-Party Sharing:

We do not share your personal data with third parties.

International Transfers:

We do not transfer your personal data outside the United Kingdom.

6. Data Security and Retention

Security Measures:

We implement appropriate technical and organisational measures, including access controls, to protect your personal data.

Data Retention:

We retain personal data only as long as necessary for the purposes for which it was collected. Specifically, we review and delete or anonymise data that has been inactive for over three years, unless there is a legal obligation to retain it longer.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to be Informed: You have the right to be informed about the collection and use of your personal data.
Right of Access: You have the right to access your personal data and supplementary information.
Right to Rectification: You have the right to have inaccurate personal data rectified or completed if it is incomplete.
Right to Erasure: Also known as the ‘right to be forgotten’, you have the right to have personal data erased.
Right to Restrict Processing: You have the right to request the restriction or suppression of your personal data.
Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
Rights Related to Automated Decision-Making and Profiling: You have rights related to automated decision-making, including profiling.

Exercising Your Rights:

To exercise any of these rights, please contact our Data Protection Officer, Sue Johnston, at 07967 726237. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113

8. Data Breach Notification

In the event of a personal data breach likely to result in a high risk to individuals’ rights and freedoms, we will notify affected individuals without undue delay and report the breach to the ICO within 72 hours of becoming aware of it.

9. Cookies and Tracking Technologies

Use of Cookies:

We use session cookies to enhance user experience on our website.

Types of Cookies:

Only essential session cookies are used; we do not implement analytics or advertising cookies.

Managing Cookies:

Users can manage or opt-out of cookies by adjusting their browser settings or accepting our cookie policy upon visiting our website.

10. Data Minimisation

We adhere to the principle of data minimisation, ensuring that we collect and process only the personal data that is necessary for the specified purposes.

11. Data Protection by Design and Default

We implement appropriate technical and organisational measures to integrate data protection principles into our processing activities, including:

Restricting access to personal data to authorised personnel only
Providing staff with training on data protection responsibilities
Regularly reviewing and updating our data protection policies and procedures

12. Data Protection Impact Assessments (DPIAs)

For any new processing activities that are likely to result in a high risk to individuals’ rights and freedoms, we conduct Data Protection Impact Assessments to identify and mitigate potential risks.

13. Record of Processing Activities

We maintain detailed records of our data processing activities, including:

The purposes of processing
Categories of data subjects and personal data
Data retention periods
Security measures in place

14. Complaints and Contact Information

If you have any concerns about how we handle your personal data, please contact our Data Protection Officer:

Name: Sue Johnston
Phone: 07967 726237

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113

15. Legal and Compliance

Regulatory Compliance: Our privacy practices comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Policy Updates: This Privacy Policy is reviewed regularly and updated as required. All changes will be reflected on this page, with a revised “Effective Date”.