Privacy Policy
Last Updated: 15 January 2026
Information We Collect
Personal Information You Provide
When you interact with our services, you might share certain details with us directly. This happens when you enquire about programmes, register for our courses, or get in touch through our contact forms.
- Your name and contact details (email address, phone number, postal address)
- Professional background and current employment status
- Educational qualifications and career objectives
- Payment information when you enrol in paid programmes
- Communication preferences and correspondence history
Information Collected Automatically
Our website gathers some technical data automatically when you visit. This helps us understand how people use our site and where we can make improvements.
- IP address and approximate geographic location
- Browser type, device information, and operating system
- Pages visited, time spent, and navigation patterns
- Referring website and search terms used to find us
How We Use Your Information
We don't collect data just for the sake of it. Everything we gather serves a specific purpose related to providing you with quality career development services.
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Processing programme enquiries and applications | Contract performance | Contact details, professional background, qualifications |
| Delivering educational content and materials | Contract performance | Contact information, enrolment data, progress records |
| Processing payments and maintaining financial records | Contract performance and legal obligation | Payment details, billing address, transaction history |
| Communicating programme updates and relevant opportunities | Legitimate interest | Email address, communication preferences |
| Improving website functionality and user experience | Legitimate interest | Technical data, usage patterns, feedback |
| Complying with regulatory requirements in education sector | Legal obligation | Student records, attendance, completion certificates |
Data Sharing and Third Parties
We don't sell your personal information to anyone. That's not what we're about. However, we do work with carefully selected partners who help us deliver our services effectively.
Service Providers We Work With
- Payment processors who handle secure transaction processing (they only access what's needed for payments)
- Email service providers for sending programme updates and educational content
- Cloud storage providers who host our learning materials and student records securely
- Analytics services that help us understand website usage patterns (anonymised data only)
- Industry certification bodies when you're pursuing recognised qualifications
Important: All third-party providers we engage are required to maintain appropriate security measures and can only use your data for the specific purposes we've authorised. We have data processing agreements in place with each of them.
Legal Requirements
Occasionally, we might need to disclose information if required by law, court order, or regulatory authority. We'll only share what's legally necessary and will notify you when possible.
Your Data Protection Rights
Under UK data protection law, you have several rights regarding your personal information. These aren't just theoretical—they're practical rights you can actually exercise.
- Right of access: You can request a copy of the personal data we hold about you. We'll provide this within one month, free of charge.
- Right to rectification: If any information we hold is inaccurate or incomplete, you can ask us to correct it.
- Right to erasure: In certain circumstances, you can request deletion of your personal data (though we may need to retain some records for legal purposes).
- Right to restrict processing: You can ask us to limit how we use your data while we resolve any concerns you have.
- Right to data portability: You can request your data in a commonly used format to transfer to another service provider.
- Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
How to Exercise Your Rights
Getting in touch about your data rights is straightforward. Send an email to [email protected] with your request, or write to us at our Derby address. We'll need to verify your identity before processing requests, which protects your data from unauthorised access.
Most requests are handled within one month. If something's particularly complex, we might need an extra two months, but we'll always let you know and explain why.
Data Security Measures
Protecting your information isn't something we take lightly. We've implemented multiple layers of security to safeguard your personal data from unauthorised access, alteration, or disclosure.
Technical Safeguards
- SSL/TLS encryption for all data transmitted through our website
- Encrypted storage of sensitive information in secure UK-based data centres
- Regular security audits and vulnerability assessments
- Firewall protection and intrusion detection systems
- Secure backup systems with encrypted off-site storage
Organisational Measures
- Access controls limiting who can view personal data based on job role
- Staff training on data protection principles and secure handling practices
- Confidentiality agreements with all team members and contractors
- Regular review and updating of security policies
- Incident response procedures for any potential data breaches
While we implement robust security measures, no system is completely impenetrable. If we ever experience a data breach that poses a risk to your rights, we'll notify you and the Information Commissioner's Office within 72 hours as required by law.
Data Retention
We don't keep your information indefinitely. How long we retain data depends on why we collected it and whether we have legal obligations to maintain certain records.
| Data Type | Retention Period | Reason |
|---|---|---|
| Student enrolment records | 6 years after course completion | Educational regulations and certification requirements |
| Financial transaction records | 7 years | Tax and accounting legal obligations |
| Marketing enquiry data | 2 years of inactivity | Legitimate interest in maintaining prospect relationships |
| Website analytics data | 26 months | Understanding user behaviour patterns |
| Email communications | 3 years or until request for deletion | Service delivery and communication history |
| Unsuccessful application records | 1 year | Potential future opportunities and fair recruitment |
After retention periods expire, we securely delete or anonymise your data. Some anonymised information might be kept for statistical purposes, but it can't be linked back to you personally.
Cookies and Tracking
Our website uses cookies—small text files stored on your device. Some are essential for the site to function, while others help us improve your experience or understand how people use our services.
Types of Cookies We Use
- Essential cookies: These make the website work properly and can't be disabled (they remember your session when you log in, for example)
- Performance cookies: Help us understand which pages are popular and how visitors navigate the site
- Functional cookies: Remember your preferences like language settings or accessibility options
You can control cookies through your browser settings. Blocking certain cookies might affect how well the website works for you, but essential functions will still operate.
International Data Transfers
We primarily store and process your data within the United Kingdom. However, some of our service providers operate servers in other countries. When data moves outside the UK or European Economic Area, we ensure appropriate safeguards are in place.
- We only transfer data to countries with adequate data protection standards recognised by the UK
- Standard contractual clauses approved by UK authorities govern transfers to other locations
- All international transfers are assessed for risk and necessity before implementation
Children's Privacy
Our services are designed for adults pursuing career development in the gas industry. We don't knowingly collect personal information from anyone under 16 years of age. If you're under 16, please don't provide any personal data through our website or services.
If we discover we've inadvertently collected information from someone under 16, we'll delete it promptly. Parents or guardians who believe we might have such information should contact us immediately.
Changes to This Policy
Privacy regulations and our business practices evolve over time. We review this policy regularly and update it when necessary. Any significant changes will be communicated through email to enrolled students and prominently displayed on our website.
The date at the top of this policy shows when it was last updated. We encourage you to review it periodically, especially before sharing new information with us.
Complaints and Concerns
If you're unhappy with how we've handled your personal data, please contact us first so we can try to resolve the issue. We take complaints seriously and will investigate thoroughly.
You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection authority:
Information Commissioner's
Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Contact Our Data Protection Team
Questions about this privacy policy or how we handle your data? We're here to help and happy to discuss any concerns you might have.
We aim to respond to all privacy enquiries within 48 hours during business days. For urgent data protection matters, please mark your communication as "URGENT: Data Protection" in the subject line.