Privacy policy

1. Who we are

H2H Training Ltd provides first aid, mental health and related training courses to individuals, businesses and organisations. We are committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book a course or attend one of our training courses.

H2H Training Ltd is the controller of your personal information. This means we decide how and why it is used and are responsible for looking after it.

H2H Training Ltd
Registered in England and Wales, company number 17453766

ICO registration number: ZC266462
Registered address: Courtyard Business Centre, Southwold Drive, Nottingham, NG8 1PA
Email: info@h2htraining.co.uk
Telephone: 07753 127777
Website: www.h2htraining.co.uk

2. Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address and telephone number
• Your business or organisation name, job title or role
• Your address or postcode
• Course booking information
• Course attendance and completion information
• Assessment results and certificate details
• Information needed to arrange reasonable adjustments
• Payment and invoicing information
• Information you give us when you contact us or complete a form on our website
• Feedback and course evaluation information

We only collect information that is reasonably necessary for the purposes described in this Privacy Policy.

3. How we collect your information

We collect information:

• Directly from you, when you contact us by email, telephone or through our website
• When you complete an enquiry or booking form
• When you attend a course, including through assessments and feedback forms
• From your employer or another organisation that books training on your behalf
• Through cookies and similar technologies on our website (see our Cookie Policy)

4. How we use your information and our lawful basis

We only use your personal information where the law allows us to. The list below explains what we use it for and the lawful basis we rely on:

• Responding to enquiries and sending quotes: our legitimate interests in responding to people who contact us, or steps you have asked us to take before entering into a contract. When you send an enquiry, we also send you an automatic confirmation email and record your details so we can reply.
• Processing bookings and payments, and organising and delivering training: performance of our contract with you (or with your employer, relying on our legitimate interests where your employer has booked for you).
• Assessing learners, issuing certificates and keeping training records: our legitimate interests in meeting our obligations as a FAIB Registered Training Provider and being able to verify certificates.
• Keeping accounting, tax and business records: legal obligation.
• Arranging reasonable adjustments: your explicit consent (see section 6).
• Improving our courses and services, using feedback and managing our business: our legitimate interests.
• Handling complaints and legal claims: our legitimate interests and, where applicable, legal obligation.
• Sending marketing emails about our courses: your consent, or for existing customers our legitimate interests in telling you about similar courses (you can opt out at any time).

Where we rely on consent, you can withdraw it at any time by contacting us. This does not affect anything we did before you withdrew it.

5. First aid training and FAIB

We are a FAIB Registered Training Provider. FAIB requires training providers to keep course, learner, assessment, certification and quality-assurance records. We therefore keep information about your training, including your name, the course you attended, the course date, your attendance, your assessment and completion information and your certificate details.

Where necessary to meet our obligations as a FAIB Registered Training Provider, we may share relevant information with FAIB for quality assurance, monitoring, inspection or certificate verification. We will only share what is reasonably necessary.

6. Health information and mental health courses

You do not need to give us details of your health or mental health to attend a course. If you choose to tell us about a medical condition, injury or disability so that we can arrange reasonable adjustments, this is special category personal data. We will only use it with your explicit consent, only for that purpose, and we will keep it confidential.

Some of our courses involve discussion of mental health and wellbeing. Anything you choose to share during a course is not recorded by us, unless we need to act to keep someone safe or are legally required to.

7. Who we share your information with

We may share personal information, where necessary, with:

• Wix.com, which hosts our website, stores the enquiries sent through our forms, keeps a contact record for each person who sends an enquiry, and sends our automatic notification and confirmation emails.
• Microsoft 365, which we use for email and document storage.
• FAIB, where required for our training provider and quality-assurance obligations.
• Your employer or the organisation that booked your training, which we will tell whether you attended, completed the course and were issued a certificate.
• Our accountants, professional advisers and insurers, where necessary.
• Government, regulatory or law-enforcement bodies, where we are legally required to.

These organisations may only use your information as we instruct or as the law allows. We do not sell your personal information.

8. Transfers outside the UK

Some of our service providers, such as Wix and Microsoft, may store or process information outside the UK, including in the European Economic Area and the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. You can contact us for more information about these safeguards.

9. How long we keep your information

We only keep personal information for as long as we need it:

• Training, assessment and certificate records: 6 years from the course date, in line with FAIB requirements and so that certificates can be verified.
• Booking, payment and invoicing records: 6 years from the end of the financial year they relate to, as required for tax and accounting purposes.
• Enquiries that do not lead to a booking: 12 months from our last contact.
• Health information for reasonable adjustments: deleted within 3 months of the course, unless we need it to deal with an incident or claim.
• Marketing preferences: until you unsubscribe. We keep a record of your opt-out so that we do not contact you again.
• Complaints: 6 years from when the complaint is closed.

When information is no longer needed, we securely delete or anonymise it.

10. Keeping your information secure

We take appropriate steps to protect your personal information from unauthorised access, loss, misuse, disclosure, alteration and destruction. Access is limited to people who need it for legitimate business purposes. However, no electronic storage or transmission system can be guaranteed to be completely secure.

11. Cookies

Our website uses only strictly necessary cookies to work properly and stay secure. We do not currently use analytics, advertising or marketing cookies. For full details, please see our Cookie Policy.

12. Marketing

We will only send you marketing emails about our courses where you have agreed to receive them or, if you are an existing customer, about similar courses we think may interest you. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by contacting us.

13. Your rights

Under data protection law, you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information in certain circumstances
• Ask us to restrict how we use your information in certain circumstances
• Object to how we use your information where we rely on legitimate interests, and to direct marketing at any time
• Ask us to transfer your information to you or another organisation in certain circumstances
• Withdraw your consent where we rely on consent

To use any of these rights, please contact us using the details below. You will not usually need to pay a fee. We will respond within one month, or tell you within that time if we need longer.

We do not make decisions about you based solely on automated processing.

14. Information from your employer

If your employer or another organisation gives us your information to arrange training, we will use it to provide and administer that training, as described in this Privacy Policy. Your employer is responsible for telling you that they have shared your information with us.

15. Links to other websites

Our website contains links to other websites, such as LinkedIn. We are not responsible for the privacy practices or content of other websites, so please read their privacy policies.

16. Complaints

If you are unhappy with how we have used your personal information, please tell us first so that we can try to put it right. You can complain by email to info@h2htraining.co.uk, through the contact form on our website, or by post to the address below. We will acknowledge your complaint within 30 days and keep you updated until it is resolved.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or the law. The latest version will always be on our website, and the date at the top of this page shows when it was last updated.

18. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

H2H Training Ltd
Courtyard Business Centre
Southwold Drive
Nottingham
NG8 1PA
Email: info@h2htraining.co.uk
Telephone: 07753 127777