top of page

Privacy Policy

Last Updated: 24/12/2025 

 

  1. Introduction 

SAPLO Training Services (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and share your personal data in compliance with UK GDPR and the Data Protection Act 2018. 

  1. Company Details 

Company Name: SAPLO Training Services Ltd 

Company Number: 16601361 

Registered Address: Office 5, Old Ferry Inn Business Centre, Beachley, Chepstow, Gloucestershire, United Kingdom, NP16 7HH 

Email Address: [insert email address] 

Personal Data We May Collect 

We may collect the following information: 

  • Full name 

  • Contact details 

  • Address 

  • Employment details 

  • Course details and progress 

  • Payment information (via a secure and independent provider) 

  • With consent, any reasonable adjustments required 

 

How Personal Data Will be Collected 

Personal data will be securely collected where you make a booking with us on our website.  

This data will be securely stored on Microsoft Bookings and Microsoft SharePoint.  

Personal data will be collected if you complete the photography consent form.  

We may also collect personal data when you communicate with us via our website, or by email, phone, or in person.  

How We Use Your Data 

We may use your personal data to: 

  • Manage course bookings and attendance 

  • Communicate important course information 

  • Issue invoices and process payments 

  • Provide certificates for accredited courses 

  • Confirm the achievement of a certificate 

  • Where applicable, communicate with the appropriate awarding organisation for the purposes of quality assurance and obtaining certificates 

 

Sharing of Data and International Transfers of Data 

If you undertake an accredited training course, we will share necessary personal data with the appropriate awarding organisation for: 

  • Quality assurance purposes 

  • Issuing your certificate 

If the sharing of personal data with an awarding organisation involves an international transfer of data, we will ensure that the safeguards required under the UK GDPR are followed. This may include the following of adequacy decisions, or the use of standard contractual clauses or, in limited situations, explicit consent.  

We do not sell or share your data with third parties for marketing purposes.  

Legal Basis for Processing 

Personal data will be processed under: 

  • Contractual necessity to deliver training services and provide certification 

  • Legitimate interests in the provision of training services 

  • Consent, for the processing of reasonable adjustments 

 

Cookies 

To respect the privacy of our website users, we do not use any cookies on our website. We do not collect, store, or process any information through any similar tracking technologies for analytics, advertising, or personalization purposes. 

If this changes in the future, we will update this policy and provide clear information about the types of cookies used and how you can manage them. 

Data Retention 

We will only retain your personal data as long as necessary for the purposes of providing training, awarding certificates, and confirming your certification. We will be required to retain data for an extended period so that we can verify confirm your achievement of a training certificate 

 Third-Party Links 

Our website may contain links to third-party websites or resources. These links are provided for your convenience and informational purposes only. We do not control, endorse, or assume responsibility for the content, privacy practices, or accuracy of any external websites. Accessing third-party content is at your own risk; we encourage you to review the privacy policies and terms of any external sites you visit. 

 Your Rights 

Under the UK GDPR, you have the right to:  

  • Withdraw consent, where it has been given previously 

  • Request the rectification or erasure of personal data 

  • Request the restriction of data processing 

  • Request access to your personal data 

  • Lodge a complaint with the Information Commissioner’s Office if the processing of personal data has breached the UK GDPR 

  • Make a complaint to SAPLO Training Services 

  • We will acknowledge receipt of the complaint within 30 days and will take appropriate steps to respond to the complaint without undue delay 

 Our Data Commitment  

We will ensure that any personal data we collect will be processed lawfully, fairly and in a transparent manner. This data will only be used for the purposes for which it was collected and will be stored for no longer than is necessary. Furthermore, we will process personal data in a manner that ensures appropriate security, including protection from accidental loss. 

Changes to the Privacy Policy 

The Privacy Policy may be updated from time to time. Please regularly check our website for updates to our Privacy Policy. 

bottom of page