Getting Started

Overview

Terms

Policies

Privacy Notice (Archived)

Effective: January 9th 2023

Welcome to High Speed Training Limited’s (HST) Privacy Notice.

HST is an online learning provider. We provide training courses via our website and Learning Management System (LMS) at www.highspeedtraining.co.uk along with a wide range of supporting resources and articles via our Hub at www.highspeedtraining.co.uk/hub.

In everything we do HST respects your privacy and is committed to protecting your personal data. HST complies with all UK GDPR requirements and for citizens of the EU we comply with EU GDPR.

HST is a data controller for all the data that it processes.

We do not process any special category data nor do we not knowingly collect data from children.

This privacy notice supplements the other notices and is not intended to override them.

PURPOSE OF THIS PRIVACY NOTICE

This privacy notice explains how and why we process (collect, use, retain and share) the personal data of everyone who HST interacts with:

our customers – whether buying for yourself or others;
our learners - including those who purchase the courses themselves or who have been provided access to it by another e.g. their employer or organisation;
those who interact with us through our websites;
our suppliers and contractors;
visitors to our premises.

It also explains all of your rights in relation to your personal data including how to contact us or the supervisory authorities in the event you have a complaint.

If you have any concerns about this notice or any questions about HSTs processing of data please contact ourselves or our Data Protection Officer on the details at the bottom of this document.

THE DATA WE COLLECT ABOUT YOU

We collect a variety of information about people who interact with us.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

For our learners we need to collect your name, email address and if you require us to send a paper copy of your certificate we will need a postal address. Optionally, you can provide your phone number.

Learners will be asked to create an account with HST and this requires you to provide a username and secure password.

For people who purchase a course from us (including those who purchase for others) we need to process your name; email address; telephone number and data that allows us to process your order such as courses and quantities required, billing/invoice address and payment details.

For people who supply us with goods and services we need to collect and process your name, contact information and bank details or payment methods.

For people who visit our offices: we may collect your name and contact details. Our office operates CCTV for the prevention of crime so when visiting us your image will be stored in our CCTV system and held for a rolling 30 days.

For those who sign up to our marketing information or who enter a competition we will need to collect and process your email address. Competitions vary and entry requirements will be communicated separately. Should you win a competition we might need your postal address and proof of identity.

Those who interact with us through our website(s) which use limited technologies and cookies to help us to deliver an effective, personalised and tailored user experience.

For further information on cookies please see our separate Cookie Policy at www.highspeedtraining.co.uk/cookie-policy/. It sets out in detail which cookies we use and why they are important not only for HST but also to ensure that all of our learners, and other visitors get an optimised experience and that the content you see is of interest to you personally.

Those who interact with us on social media HST do not take any data outside of social media platforms on which you make contact with us unless you have asked us to do so – for example when answering learner queries raised through Facebook or you have indicated through Linkedin that you would like to receive communications from us. We do use your social media username or profile to re-tweet you for example but this remains within the social media platform itself.

For more information about our use of social media see section below.

WHEN IS YOUR PERSONAL DATA COLLECTED?

There are various points of contact when HST needs to process personal data. When you:

purchase and/or take our training courses;
contact us for help;
create an account on our website;
subscribe to our service or publications;
request marketing to be sent to you;
contact us through social media platforms or request subscriptions through these services;
enter a competition, promotion or survey;
are involved in one of our customer surveys or focus groups;
give us some feedback;

When we enter into a contract with our suppliers, contractors and advisers (including steps at your request before entering into a contract).

We also collect data through automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV, access control and communications systems.

We use instant messaging systems where customers or learners ask us to do so or where we re-tweet or re-post information within social media platforms.

In very limited circumstances and only where required, we may also collect personal data from third parties such as that which is available publicly e.g. Companies House.

We collect limited data at the time of payment:

If you pay us by BACS or Cheque we will securely record your account name, payment reference and amount against your order in our accounting systems.
If we pay you by BACS (in the event of a refund or payment to a supplier) we will need to receive your account name, sort code, account number and payment amount.
All payments by credit/debit card are handled securely by third party providers to ensure HST does not receive any sensitive payment data.

HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when there is a lawful and legitimate reason for doing so.

We use your personal data for the following reasons:

Where we need to perform the contract (including pre contract negotiations) for example when you buy or take one of our training courses or where we buy services or supplies to enable us to run our business.
Where we need to comply with a legal or regulatory obligation for example where we retain data for HMRC reporting purposes.
When you give us your consent for example when you subscribe to our newsletters, updates or marketing. As a learning provider HST is always looking to learn from our customers so where a customer has consented to be involved in market research or customer focus groups we will engage with them so that our range of courses is up to date including the views from the perspective of those who use them.
Legitimate interest: In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
- For example, we may use your purchase history to send you or make available personalised offers or send reminder emails to our learners when their courses are due for renewal or when we launch a new course that may be of interest to the individual learner.
- We may ask you for further voluntary information to provide you with the most appropriate customer service e.g size of your organisation or the sector it is in.
- Where you choose to leave us a review, we may do so through an independent third party and we may contact you regarding any issues you raise in the interests of improving our service.
- We may also send direct marketing emails to our customers and learners when you purchase or take a course with us and do not choose to opt out - this is often called a 'soft opt in'. This marketing is always tailored to the recipient and we do not undertake blanket marketing of any kind at any time.
- In very limited circumstances, we may combine the data of customers to identify trends and ensure we keep up with demand to develop new products and courses specific to them.

MARKETING AND PROMOTIONAL COMMUNICATIONS

As described above we do undertake marketing to subscribers; customers and those who have opted in. You have the right to opt out of receiving promotional communications at any time by:

contacting us at support@highspeedtraining.co.uk;
using the ‘unsubscribe’ link in our emails;
update your marketing preferences by logging in to your account.

Where you have unsubscribed from our email updates or where you ask us to stop sending promotional or other offers this will not affect any other interaction you have with HST – for example we will continue to send course renewal reminders at the appropriate time.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further courses or content in the future, or if there are changes in the law, regulations, or the structure of our business.

We do not process data for any other party nor do we sell data to any third parties for direct marketing purposes.

WEBSITE AND THIRD-PARTY LINKS

Our website includes links to third-party websites, plug-ins and applications. If you access other websites using the links provided, the operators of these websites may collect information from you which will be used by them in accordance with their own privacy policies, which may differ from ours. Therefore, if you use these links to leave our Site and visit websites operated by third parties, we cannot be responsible for the protection and privacy of any information that you provide to them. Please check these policies before you submit any personal data to these websites.

HST websites use Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our websites.

SOCIAL MEDIA

Information or comments you post or disclose on HST’s social media platforms (for example, Facebook, Linkedin, Twitter, or other social media applications) is public and will be treated as such for the purposes of this notice and HST’s use of that data. HST cannot control the use of information disclosed in such platforms. You should always take care and exercise caution when posting or disclosing information in public spaces, this includes personal information or data. Content posted in HST’s social media pages and interactive parts of the Hub, including advice and opinions, represents the views of the individuals who post that content and such individuals bear sole and exclusive responsibility for the posting of that content. HST does not necessarily endorse, support, verify, or agree with any content posted on our social media pages and forums.

SOCIAL MEDIA WIDGETS

HST websites include social media widgets, such as the Facebook, LinkedIn, Twitter buttons and widgets, such as the “Share” button (embedded in specific articles on our Hub). Social Media widgets are either hosted by a third party or hosted directly on HST’s website. Your interactions with these widgets are governed by the privacy policy of the company providing it. These widgets may collect (a) your IP address, (b) which HST webpage you are visiting, and (c) may set a cookie to enable the feature to function properly. HST advises anyone using these widgets to be aware of the privacy notices related to each widget.

WHO WE SHARE YOUR DATA WITH

It may be necessary to share your information with our contractors and sub-contractors so they can provide a service to you or to enable us to deliver our courses and other learning resources. The contractors and sub-contractors are contractually required to ensure that they adhere to the security requirements imposed by the Data Protection Act and/or the General Data Protection Regulation; or any other applicable laws and regulations following the end of the transition period for the UK leaving the EU (as applicable).

Our contractors and sub-contractors will not share your information with any other parties (except where expressly agreed in writing with HST) and will only be able to use the information when completing work on behalf of HST whether as joint controller of data for example our accountants or a processor of data for example those who we engage to supply data storage of our Learning Management System.

Whilst there are no plans for any change to HSTs business or ownership if our business was sold we will transfer your personal data to a third party as follows:

in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets (at all times in accordance with all applicable data protection laws); or
if HST or substantially all of its assets are acquired by a third party, in which case personal data held by HST about its customers will be one of the assets transferred to the purchaser.

In each case, the legal basis on which we process data in these circumstances is our legitimate interest to ensure our business can be continued by a purchaser. If you object to our use of personal data in this way, the relevant seller or buyer of our business may not be able to provide products or services to you.

In certain circumstances we may also need to share your personal data if we are under a duty to disclose or share personal data in order to comply with any legal obligation.

SECURITY AND YOUR PERSONAL INFORMATION

We know how much data security matters to all our customers and everyone we interact with. With this in mind, we will treat your data with the utmost care and take all appropriate steps to protect it. The information that you provide is stored securely whether it be digital or physical.

Across all of our business we have appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We secure access to all transactional areas of our websites and apps using ‘https’ technology and all payment transactions are encrypted (using SSL technology) – payments are handled securely under contract by external providers such as PayPal/SagePay/Stripe.

We use Stripe for payment, analytics, and other business services. Stripe collects and processes personal data, including identify information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including fraud detection and prevention. You can learn more about Stripe and its processing activities via their privacy policy here.

The account information associated with HST is password protected for your privacy and security. You choose your password for your HST account so the strength of that password is determined by you. We recommend that you choose a unique password and not share your password with anyone else.

Access to your personal data is password-protected, and any sensitive data is protected through appropriate use of encryption technologies.
All systems are password protected which expect strong passwords and require regular changes.
We continually maintain firewalls, malware and anti-virus software.
We maintain and monitor systems which alert HST to any potential data attack.
Any data which is accessed off site or on a mobile device is kept on devices which require secure password access and are kept locked when not in use and never left unattended.
We monitor our systems for possible vulnerabilities and attacks, and we carry out random penetration testing to identify ways to further strengthen security.
Any documentation retained in paper form is kept in our offices which are access controlled and secure at all times. All paper documents are access protected.
Only relevant members of staff will have access to the information you provide to us.
All members of staff receive appropriate data protection training at induction and it is refreshed annually to ensure each is aware of their data responsibilities. Further each is aware that any breach of our data protection policy could result in a breach of their contract of employment and could result in disciplinary action and potentially dismissal.
Our offices are protected by security and CCTV in order to prevent any criminal offence or threat to data security.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
These measures and procedures are audited and reviewed regularly.

INTERNATIONAL DATA TRANSFERS

HSTs LMS (Learning Management System) stores and backs up your data to servers based in the UK.

However, to deliver our learning in the most effective way we sometimes need to share your personal data with third parties and suppliers outside the UK or the European Economic Area (EEA). This is for example if you are based outside the UK and place an order with us, we will transfer the personal data that we collect from you to HST in the UK. Other examples are (1) where services are used to support the smooth running of our business. (2) where you contact us by email there is always a risk that a third party processor may transfer the communication outside of the UK or EEA including the USA.

PROTECTING YOUR DATA OUTSIDE THE EEA

If your data is transferred outside of the UK or EEA, we have procedures in place to ensure your data receives the same protection as if it were being processed inside the UK or EEA. For example, our contracts with third parties stipulate the standards they must follow at all times. If you wish for more information about these contracts please contact our Data Protection Officer.

Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.

HOW LONG WILL YOU USE MY PERSONAL DATA FOR

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, this includes our obligation as a learning provider, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We currently:

retain the learners’ data for the lifetime of the learner so that the training records or certificates are available to them at any time in the future or if we are required to provide evidence of training in the event of a legal request.
we retain limited financial information which includes personal data for 7 years to satisfy HMRC regulations.

YOUR RIGHTS

Access	The right to be provided with a copy of your personal information (the right of access).
Rectification	The right to require us to correct any mistakes in your personal information.
To be forgotten	The right to require us to delete your personal information—in certain situations.
Restriction of processing	The right to require us to restrict processing of your personal information—in certain circumstances, eg if you contest the accuracy of the data.
Data Portability	The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations.
To object	The right to object: --at any time to your personal information being processed for direct marketing (including profiling); --in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.
Not to be subject to automated individual decision making	The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

For further information on each of those rights, including the circumstances in which they apply, please contact us or see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the UK General Data Protection Regulation. For citizens of the European Union HST applies the same standards through compliance with EU GDPR - more information can be found through individual countries local data protection authorities for example CNIL in France https://www.cnil.fr/en/home

If you would like to exercise any of those rights, please:

email, call or write to us or our Data Protection Officer—see below: ‘How to contact us’; and
let us have enough information to identify you (e.g. your full name, address, email and customer or matter reference number);
let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and
let us know what right you want to exercise and the information to which your request relates.

Your right to withdraw consent

Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent. You can do this by contacting us or our Data Protection Officer on the details below.

Where we rely on our legitimate interest

In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation.
We will then stop processing your information unless we believe we have a legitimate overriding reason to continue processing.

HOW TO COMPLAIN

We hope that we can resolve any query or concern you may raise about our use of your information in the first instance.

The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113. If you are an EU Citizen please refer to your individual Data Protection Authority: https://edpb.europa.eu/about-edpb/board/members_en

CHANGES TO THIS PRIVACY POLICY

This privacy notice was published and last updated on 09/01/2023.

We may change this privacy notice from time to time—when we do we will inform you via our website.

HOW TO CONTACT US

Please contact us or our Data Protection Officer by post, email or telephone if you have any questions about this privacy notice or the information we hold about you.

High Speed Training Limited	Our Data Protection Officer
Peter Towell – Legal and Compliance Manager Riverside Business Park, Dansk Way, Ilkley, West Yorkshire, LS29 8JZ T: 0333 006 7000 E: compliance@highspeedtraining.co.uk	Antonia Noble (Counsel) T: 07824665908 E: antonia.noble@icloud.com

Do you need extra help?

If you would like this notice in another format (for example audio, large print, braille) please contact us (see ‘How to contact us’ above).