LONDON WORK AT HEIGHT SEMINAR LIMITED (herein known as “LWAHS”) takes your privacy seriously. This Privacy Notice is intended to set out your rights and answer any queries you may have about your personal data. If you require more information, please contact us at firstname.lastname@example.org.
Our personal data handling policy and procedures have been developed in line with the requirements of the General Data Protection Regulation (in force from 25 May 2018) and applicable laws of the United Kingdom. Where you use services provided by LWAHS, the controller of your personal data will be LWAHS.
2. What information do we collect?
We collect and process personal data about you when you interact with us.
We collect personal data about you (or your business) from the personal data you provide to us:
- When you apply for a ticket;
- When you talk to us on the phone;
- When you request a certificate of attendance;
- In feedback and surveys;
- In a complaint;
- When you use our website;
- In emails, letter or other documents;
The personal data we process may include:
- your name;
- your home or work address, email address and/or phone number;
- your payment and delivery details, including billing and delivery addresses, where you make payments to us;
- information related to the browser or device you use to access our website;
- internet browser and operating system;
- information you provide to us within an application;
- details of your employer.
3. How do we use this information and what is the legal basis for this use?
3.1 General Service Users
LWAHS processes personal data, listed in Section 2, for the following purposes:
- as required to establish and fulfil a contract with you. This may include verifying your identity, taking payments, communicating with you, and arranging provision of products or services. We require this information in order to enter into a contract with you and may be unable to do so without it;
- to comply with applicable law and regulation;
- in accordance with our legitimate interests in protecting LWAHS’ legitimate business interests and legal rights, including but not limited to, use in connection with legal claims, compliance, regulatory and investigative purposes (including disclosure of such information in connection with legal process or litigation);
- to respond to any comments or complaints we may receive from you;
- we may use information you provide to personalise (i) our communications to you; (ii) our website; and (iii) products or services for you, in accordance with our legitimate interests;
- to monitor use of our websites and online services. We may use your information to help us check, improve and protect our content, services and websites, both online and offline, in accordance with our legitimate interests;
- we may also use third parties (such as POS payment providers) to check the validity of payment information you submit in order to prevent fraud, in accordance with our legitimate interests and those of third parties;
- we may use your information to invite you to take part in research, invite feedback or collect personal data in accordance with our legitimate interests; and
- we may also send you direct marketing in relation to relevant LWAHS, events or meetings in accordance with our legitimate interests. However, LWAHS does not use your personal data to engage in direct marketing by 3rd parties.
3.2 Job Applicants
Unless we inform you otherwise during the recruitment process, LWAHS will be your data controller and will be the company to which you provide your consent for the processing of your personal data.
3.2.1 We collect and process personal data about you when you apply for a job with us in order to comply with applicable law and regulation, to fulfil our legitimate interests and in order to fulfil a contract with you. The personal data we may hold includes:
- your name, home address, email address and/or phone numbers;
- your date of birth, marital status, nationality, National Insurance number and banking details (where you provide this to us);
- your educational and employment history;
- other information contained within your CV or other documents or information you submit to us;
- information from the selection process, if any;
- references and assessments relating to your work for previous employers;
- information to confirm your identity and right to work, such as a copy of your passport;
- details of any unspent criminal convictions; and
- with your specific consent, information relating to your gender, nationality, disability and other diversity-related information.
3.2.2 What is the source of this information?
We obtain this information directly from you, our personnel, through our systems and equipment, as well as from third parties such as recruitment agencies, background checking companies or former employers. We may also obtain it from your public profiles available online.
3.2.3 How do we use this information and what is the legal basis for this use?
We process the personal data above for the following purposes only in accordance with our legitimate interests:
- to enable us to comply with our legal and regulatory obligations;
- to make recruitment decisions;
- to prevent and detect fraud and other wrongdoing;
- to establish, exercise or defend our legal rights; and
- to manage risk.
4. With whom and where will we share your personal data?
We may also share your personal data with the below third parties:
- our staff;
- credit reference and fraud prevention agencies;
- payroll service providers;
- public information sources such as Companies House; and
- agents working on our behalf;
5. How long will you keep my personal data?
We are required to retain certain information as required by law, or for as long as is reasonably necessary, to meet regulatory requirements resolve disputes, prevent fraud and abuse, or enforce our terms and conditions.
Where you are a service user and you have expressly consented to us contacting you, we will only retain your personal data until you unsubscribe from our communications. However, if you unsubscribe from our communications, it may mean that we cannot perform services needed to provide our services. It could mean that we cancel a product or service you have with us.
In the case of any contact you may have with our administrative team, we will retain these details for as long as is necessary to resolve your query and they may be kept on file to provide an audit trail.
We will keep the personal data connected to an unsuccessful job application (including any interview records) for 6 months from the date of their creation by LWAHS or receipt from you.
In some instances, laws may require IRATA to hold certain information for specific periods other than those listed above.
6. Where is my data stored and where is it sent?
The personal data that we collect from you may be transferred to and stored outside the European Economic Area (“EEA”) for activities related to your certification or for compliance with legal duties.
It may also be processed by our member companies outside the EEA who work with us in relation to our certification activities, in which case these third parties will have applicable safeguards in place. For example, we may transfer information to a non-EEA country with privacy laws that provide the same protection as the EEA or put in place a contract with the third party that protects personal data to the same standards in the EEA.
7. What are my rights in relation to my personal data?
You have the right to ask us not to process your personal data for direct marketing purposes, for example to let you know about events or changes to significant documents or processes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your personal data, contacting us on email@example.com, or clicking the unsubscribe button on any communication we have sent to you.
Where you have consented to us using your personal data, you can withdraw that consent at any time. If the information we hold about you is inaccurate or incomplete, you can notify us and ask us to correct or supplement it.
You also have the right, with some exceptions and qualifications, to ask us to provide a copy of any personal data we hold about you.
Where you have provided your personal data to us and it is processed by automated means, you may be able to request that we provide it to you in a structured, machine readable format.
If you have a complaint about how we have handled your personal data, you are able to ask us to restrict how we use your personal data while your complaint is resolved. In some circumstances you can ask us to erase your personal data by: (a) withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) if you object to the use of your personal data and we don’t have a good reason to continue to use it; or (d) if we haven’t handled your personal data in accordance with our obligations.
8. What should you do if your personal information changes?
You should tell us immediately by writing to: firstname.lastname@example.org.
9. What if you choose to withdraw use of your data from us?
If you want to object to how we use your personal data, or ask us to restrict its use or delete it, please contact us.
We may need to collect personal data by law, to fulfil our legitimate interests or under the terms of a contract we have with you.
If you choose not to allow us to continue using this personal data or to withdraw it, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform the activities needed to provide our services. It could mean that we have no alternative but to cancel your certification, a product or service we provide to you.
LWAHS will not sell your personal data or share it with other parties for marketing purposes.
11. Where can I find more information about this?
Should you have any queries regarding this Privacy Notice, about LWAHS’ processing of your personal data or wish to exercise your rights you can contact LWAHS using this email address: email@example.com.