Security and performance
We are First Touch Training Ltd , company registration number 03366459, located at 7 Paynes Park, Hitchin Hertfordshire, SG5 1EJ.
We take protection of information, both personal and otherwise, very seriously. We maintain the security and performance of our data storage and handling systems through network access and management controls implemented and maintained by our team under the instruction of our Managing Director.
In regards to personal professional information, we have carried out assessments of the legal basis for processing this data.
Website Security
Our website is maintained on our behalf by Easykey, Harlow. easykey.uk Please note that Easykey uses a secure server to deliver this website. Only skilled website development staff have access to the server to control the configuration and resource of the website. The website uses an *“SSL Certificate” meaning that any data visitors provide is encrypted.
*SSL stands for Secure Sockets Layer. An SSL Certificate creates a secure connection between visitors and the website. The specific details a visitor completes via an enquiry form is encrypted and kept secure from hackers.
Despite these features, you should be aware that unfortunately, the transmission of information via the internet is not completely secure. Although we do our very best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once your information has been transmitted, please be assured that we use the strict procedures and security features above to try to prevent unauthorised access.
How we use your information
This Privacy Policy tells you what to expect when we collect and process your personal information. For professional personal information (e.g. business-related) the legal basis for this is our legitimate interests, namely the control and maintenance of our website and/or normal business administration activities and/or the creation and performance of a contract between you and us.
We will not store any of your information outside of the European Economic Area [EEA]
Should we need to process any personal information for a purpose other than that for which it was originally collected, we will provide you with information on that other purpose prior to that further processing, allowing you time to consider our request and consent to it, or ask for more information.
Examples of how we use your data include
- To identify you
- To carry out our obligations arising from any contracts entered into between you and us
- To provide you with information, products or services that you request from us or which we feel may interest you
- To allow you to participate in interactive features of our service when you choose to
- To notify you of changes to our website and policies/terms and conditions and services
Retention of Data
We only retain personal data for as long as necessary to satisfy the following requirements:
Legal: We are required to meet our legal obligations regarding the retention periods for some data, such as financial records and information (7 years for data relating to financial transactions)
Contractual: Your data will be retained for the duration of your contract term, to enable us fulfil our contractual obligations. We may retain this data for a further period of 18 months for marketing and business analysis purposes.
Marketing: Where we hold data for marketing purposes, then it is retained for a period of 18 months of inactivity.
Third Party Use of Data
It is not our policy or practice to share any personal data with any other organisations but if this ever was to change it would only do so with your specific and freely given consent.
Security of Financial Details
We do not hold any sensitive or financial details about companies or individuals on our website. Financial transactions, in the form of payments for bookings made and paid for either on our website or by telephone using debit or credit cards, are dealt with by WorldPay who as a respected and trusted online payment provider are responsible for their own security and data protection.
Their privacy policy is available at worldpay.com/uk/privacy-policy
Visitors to our website
When someone visits our website we collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way which does not identify anyone. We do not attempt to discover the identities of those visiting our website.
Information you enter onto the contact form on the website is sent by email to our Directors to enable your query to be answered. Your information may be passed to other company managers or staff in order to provide you with the information you have requested. The information you provide is not shared with or processed by any other person or company.
By continued use of our website, you consent to the Company collecting analytical and professional information about you and your organisation in accordance with the terms set out in this Policy. You also consent to the Company using the analytical and professional information for market research, marketing, sales, customer relationship management, operational, financial and legal purposes in accordance with the terms set out in this Policy
Cookies
Cookies are small pieces of information, stored in simple text files, placed on your computer by a website. Some cookies can be read by the website on your subsequent visits. The information stored in a cookie may relate to your browsing habits on the webpage, or a unique identification number so that the website can 'remember' you on your return visit. Other cookies are deleted when you close your browser and only relate to the working of the website. Cookies help us to provide you with a good experience when you browse our website and also allow us to improve our site
Please be aware that we use a number of Google Analytics cookies on our site. These cookies are used to collect information about where visitors to our website come from (using your IP address, this is known as IP geolocation) and which pages on the website visitors go to. Although the Google Analytics cookies store your IP address and send this to Google where we can access this information, we have no way to identify you, or anything about you, from this data.
Cookies will be retained on your computer in accordance with the expiry times shown on the Google Analytics Cookie Usage page linked below.
Google Analytics Privacy Policy and Google Analytics Cookie Usage on Websites
If you are not happy for these cookies to be created, then you should not use this website. Alternatively, you can use your web browser’s privacy controls to delete the cookies after your visit.
In addition most browsers allow you to turn off or customise your settings for cookies. To find out how to do this, see the 'Help' menu on your browser. Please note that if you turn off cookies or change your settings some features on our website may not work correctly.
If you do not know what cookies are, or how to control or delete them, then we recommend you visit aboutcookies.org for detailed information.
Services
We offer training and associated services to commercial organisations. To provide our services we need to obtain and hold certain data. However, we only use these data to provide the requested service and for other closely-related purposes. For example, we might use information about people who have requested a service to carry out a survey to find out if they are happy with the level of service they received.
We will collect professional information (e.g. business related data) about the contact and their company either submitted to our website, passed on during telephone conversations, included in emails and mobile messaging and any other form of written or verbal communication. For example, we might keep a record of your name, work address, work email address and work telephone number/s.
Email that you send to us, including attachments, will be used for the purposes it was sent, and may also be monitored and used by us for reasons of security and for ensuring compliance with office policy. Email monitoring or blocking software may be used.
Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.
E-Newsletters
E-Newsletters are only provided to business users. No e-newsletters are delivered to personal users or sole traders. If you are a private individual or sole trader and receive electronic information from us please contact us immediately to be removed from our database.
All e-newsletters in any format always contain the reason why you are receiving the e-mail plus at least one link to unsubscribe which is clear, easy to use and on every e-newsletter. People who choose to unsubscribe are immediately removed and steps taken to ensure they cannot be re-included later without their freely given and specific consent.
Social Media
We only keep private or direct messages sent to us by social media for as long as it is relevant to provide the service or information requested in the message content. Private information will not be shared with any other organisations.
Complaints About Our Service
In the very unlikely event that we receive a complaint this will contain the identity of your company and the complainant, the nature of the issue and any team members involved.
We will only use the personal information internally to process and investigate the complaint and to check on the level of service we provide.
We will need to disclose the complainant’s identity internally to whoever is involved in the complaint. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis.
We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for two years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.
Your rights
Under the Data Protection Act and EU GDPR, you have rights as an individual which you can exercise in relation to the information we hold about you, namely;
- The right to be informed; why we process the personal data, who we share the data with and how long we will store the data for (see above)
- The right of access to your data
- The right to rectification of errors in the data we hold about you
- The right to erasure of the data - please note that for employment purposes we have to hold certain personal data
- The right to restrict processing
- The right to data portability
- The right to object
- The right not to be subject to an automated decision
You can read more about these rights at
ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Access to personal information and the excising of rights
We try to be as open as we can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘Subject Access Request’. If we do hold information about you we will:
- give you confirmation as to whether or not we are holding any personal information about you and if we are, a description of it;
- tell you why we are holding the information and how long we will hold it for
- tell you your rights in respect of personal data held by us
- tell you who it could be disclosed to
- let you have a copy of the information in an intelligible form
Please note however that your right to obtain a copy of your information must not adversely affect the rights and freedoms of others.
To make an enquiry about any personal information we may hold, you need to put the request in writing to our Managing Director, at the address below.
If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone. If we do hold information about you, you can ask us at any time to correct any mistakes or exercise any of your other rights by, once again, contacting the Managing Director.
Disclosure of personal information
Generally we will not disclose personal data to third parties not listed in this Policy without your consent. However there may be circumstances where we can pass on personal data without consent for example, to prevent and detect crime and to produce anonymised statistics.
Complaints or queries about data protection
We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This Privacy Policy was drafted with clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.</>
If you want to make a formal complaint about the way we have processed your personal information, you can contact the ICO (the statutory body that oversees data protection law in the UK) at ico.org.uk/global/contact-us/
Links to other Websites
This Privacy Policy does not cover the websites accessed via the links provided above. We encourage you to read the privacy statements on the other websites you visit.
Changes to this privacy Policy
We keep our Privacy Policy under regular review. Please ensure you look at it regularly to be aware of any updates.
How to contact us
Managing Director
First Touch Training Ltd
Eastway Enterprise Centre
Hitchin
Hertfordshire
SG5 1EH
Or call on 01462 700 432
First Touch Training Ltd
Updated 25 November 2020
