Privacy Statement

Privacy Statement

We, GEM Compliance Training Ltd (GCT). are committed to respecting and protecting the privacy of anyone using our site and the confidentiality of any information that you provide us with. The purpose of this statement is to set out how we use any personal information that we may obtain from you.

Data Controller and Owner

GEM Compliance Training Ltd, 27-29 Chapel Street, Bradford, West Yorkshire, BD1 5DT | Email: info@gemcompliancetraining.co.uk

Types of Data collected

Among the types of Personal Data that this our applications collects, by itself or through third parties, there are: Cookies, Usage data and email address.

Other Personal Data collected may be described in other sections of this privacy policy or by dedicated explanation text contextually with the data collection.

The Personal Data may be freely provided by the User, or collected automatically when using our applications.

Any use of Cookies – or of other tracking tools – by our applications or by the owners of third party services used by our applications, unless stated otherwise, serves to identify Users and remember their preferences, for the sole purpose of providing the service required by the User.

Failure to provide certain Personal Data may make it impossible for our applications to provide its services.

Users are responsible for any Personal Data of third parties obtained, published or shared through our applications and confirm that they have the third party’s consent to provide the Data to the Owner.

Data collected on the Candidate Details Form

When a service user attends a GCT training course the service user will be requested to complete a Candidate Details Form which will request some of their personal data. Personal Data collected on the Candidate Details Form will be: first name, last name, date of birth, gender, email address and phone number.

The information provided on this form will be used by GCT to manage bookings, including contacting service users if we have any queries, when we need to let service users know about any changes to the schedule and to fully process completed qualifications with our external awarding bodies. As part of GCT training course packages service users will have exclusive access to GCT Annual Training where available when it is due. Each year GCT will use the information provided on this form to email service users to remind them to complete their complimentary Annual Training until they need to requalify. When renewal of a qualifications is due, GCT will also use the information provided on this form to email service users to remind them when their regulated certificate is due to expire.

The information service users provide on this form will only be used to offer information and advice tailored to them, and to ensure that we do not provide them with any services which may be unsuitable. We take service user's privacy very seriously and will not pass your information to any other third parties (i.e. for marketing purposes).

Mode and place of processing the Data

Methods of processing

The Data Controller processes the data of service users in a proper manner and shall take appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the data.

The data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration or external parties such as our awarding bodies and third party, technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the owner. The updated list of these parties may be requested from the Data Controller at any time.

Place

The data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located. Service user's completed training course paperwork, GCT employee and associate documents that contains personal data are returned securely and kept at the Data Controller's operating offices. All completed training course paperwork, GCT employees and associate documents are locked away in secure cabinets that can be only be accessed by GCT operational staff. The operating offices are also locked outside of working business hours. For further information, please contact the Data Controller.

Retention time

The data is kept for the time necessary to provide the service requested by the user, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

The use of the collected Data

The data concerning the user is collected to allow the owner to provide its services, as well as for the following purposes: Analytics and contacting the user.

The personal data used for each purpose is outlined in the specific sections of this document.

Analytics

The services contained in this section enable the Owner to monitor and analyse web traffic and can be used to keep track of user behaviour.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilises the Data collected to track and examine the use of our applications, to prepare reports on its activities and share them with other Google services.

Google may use the data collected to contextualise and personalise the ads of its own advertising network.

Contact form (This Application)

By filling in the website contact form with their data, the User authorises this application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal data collected: email address, first name, last name, phone number and company name if applicable.

Additional information about Data collection and processing

Legal action

The user’s personal data may be used for legal purposes by the Data Controller, in court or in the stages leading to possible legal action arising from improper use of our applications or the related services. The user declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.

Additional information about User’s Personal Data

In addition to the information contained in this privacy policy, our applications may provide the user with additional and contextual information concerning particular services or the collection and processing of personal ata upon request.

System logs and maintenance

For operation and maintenance purposes, our applications and any third party services may collect files that record interaction with our applications (System logs) or use for this purpose other personal data (such as IP Address).

Information not contained in this policy

More details concerning the collection or processing of personal data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.

The rights of Users

Users have the right, at any time, to know whether their personal data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.

This application does not support “Do Not Track” requests.

To determine whether any of the third party services it uses honour the “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to its users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a user objects to any of the changes to the policy, the user must cease using our applications and can request that the Data Controller remove the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all personal data the Data Controller has about users.

Cookies

We collect information directly from you in a number of ways. One way is through our use of ‘cookies’. Most websites use cookies in order to make them work, or to work more efficiently, as well as to provide information to the owners of the website. They help us to understand how our customers and potential customers use our website so we can develop and improve the design, layout, content and function of the site. Cookies are small text files that are placed on your computer’s hard drive by websites that you visit. They save and retrieve pieces of information about your visit to the website – for example, how you entered the site, how you navigated through the site and what information and documentation was of interest to you. This means that when you go back to a website, it can give you tailored options based on the information it has stored about you on your last visit.

Some of our cookies are used to simply collect information about how visitors use our website and these types of cookies collect the information in an anonymous form.

Where there is a login process relating to buying products or services from us we also use cookies to store personal registration information so that you do not have to provide it to us again on subsequent visits.

The rules about cookies on websites have recently changed. If you are uncomfortable with the use of cookies, you can disable cookies on your computer by changing the settings in the preferences or options menu in your browser. You can set your browser to reject or block cookies or to tell you when a website tries to put a cookie on your computer. You can also delete any cookies that are already stored on your computer’s hard drive. However, please be aware that if you do delete and block all cookies from our website, parts of the site will not then work. This is because some of the cookies we use are essential for parts of our website to operate. Likewise, you may not be able to use some products and services on other websites without cookies.

To find out more about cookies, including seeing what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

If you do not wish to accept cookies from our website, please leave this site immediately and then delete and block all cookies from this site. Alternatively, you may opt out of receiving information from us by e-mail, telephone, fax or post. Our phone number is 01274 752777, or you can e-mail us on info@gemcompliancetraining.co.uk

Security

We endeavour to take all reasonable steps to protect your personal information. However, we cannot guarantee the security of any data that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or wilful default.

Your rights

You have the right to ask us not to process your personal data for marketing purposes. We will aim to inform you before collecting your data if we intend to use your data for such purposes or we intend to disclose your information to any third party for such purpose. You can exercise your right to prevent this happening by checking certain boxes on the forms we use to collect your data.

General

You have the right to see personal data (as defined under the Data Protection Act) that we keep about you upon receipt of a written request and payment of a fee of £10. Any request should be sent to: info@gemcompliancetraining.co.uk