Who we are
This policy explains how we use personal information when you visit pattestingcourse.org.uk or send us an enquiry through it. The data controller is Training Developments Scotland Limited, trading as Skills Training Group, company number SC397255. Our registered office is Units 1–3, 5 Murray Street, Paisley, United Kingdom, PA3 1QG.
You can contact us about your information at info@skillstg.co.uk or at the postal address above. We handle personal information under the UK GDPR and the Data Protection Act 2018, as amended. Our cookie policy explains browser storage and optional services on this website.
Course bookings and participation also involve information outside this website. Our customer and student privacy notice covers those activities.
Information we collect
- Enquiries: your name, email address, enquiry type and message. You may also provide a telephone number, booking reference, organisation, training postcode, number of learners and preferred dates. The form marks the fields needed to send an enquiry; other fields are optional. Without your contact details and message, we cannot reply to that enquiry.
- Correspondence: the information you send in follow-up emails or provide when speaking to our team.
- Website and security information: your IP address, browser and device information, requested page, request time, and security or delivery results. This information allows our hosting and form-protection services to deliver the website, detect abuse and diagnose failures.
- Privacy choices: the choices you make about optional services and when you made them. These are saved in your browser.
The enquiry form does not ask for card details, passwords, identity documents or medical information. Please do not include them in your message. If you need support or an adjustment to attend training, contact our team to discuss what information is needed.
How and why we use it
We use the following lawful bases for the processing described here:
- Taking steps towards a contract, or performing a contract: answering your request about a course you may book for yourself and helping with your existing booking.
- Legitimate interests: answering general enquiries or enquiries made on behalf of an employer, organising business communications, keeping appropriate correspondence records, and protecting our website and enquiry service from spam, fraud and misuse. Our interests are providing a useful training service, responding to people who contact us and operating secure systems.
- Consent: loading optional Google Maps or Trustpilot content after you choose to allow that provider. You can change these choices at any time.
- Legal obligations: retaining or disclosing information where a legal requirement applies, including responding to valid requests from authorities or handling your data-protection rights.
Sending an enquiry does not sign you up to marketing emails. We do not sell enquiry details to other organisations for their marketing. We do not use this website's enquiry information to make decisions about you with legal or similarly significant effects solely by automated means.
What happens to an enquiry
When you submit the contact form, our Cloudflare-hosted service validates the request and uses Cloudflare Turnstile to check for automated abuse. If it passes, Cloudflare's email service delivers your enquiry to info@skillstg.co.uk. Your email address is used as the reply address so our team can respond.
The website's form service does not create a separate database of enquiries or automatically add the enquiry to Salesforce. The delivered message is held in our business email system, where authorised staff can handle it. Follow-up work may become part of a booking or customer record where relevant to your request.
The service also uses a protected identifier derived from your IP address to limit repeated submissions. Technical delivery and verification records help us investigate failures; the form service does not deliberately record your message or contact fields in application logs. Our hosting and email providers still process the information needed to operate their services.
Bookings and payments
Course-date listings on this site come from our booking system. Choosing a booking or waiting-list link takes you to booking.skillstg.co.uk, where the booking service collects the details needed for your request. Our booking process connects to Salesforce and uses Opayo for payments.
This website's enquiry form does not collect or process payment-card details. Please read the privacy information and terms presented during booking, together with our customer and student privacy notice. If you provide another person's details, make sure they know how those details will be used and share the relevant notice with them.
Hosting and external services
We share information with the service providers needed to operate this website and answer your enquiry. They include:
- Cloudflare: website hosting, security, form verification and enquiry email delivery. Turnstile processes connection and browser signals, including IP address and browser information, to detect bots. Cloudflare also uses those signals to improve its bot-detection service under its own Turnstile privacy notice. See also Cloudflare's privacy policy.
- Our business email service: receiving, storing and replying to messages sent to the team.
- Google Maps, if you allow it: displaying interactive venue maps. Google receives connection and device information when a map loads and may use cookies or associate activity with your Google account according to your account settings. See Google's privacy policy.
- Trustpilot, if you allow it: displaying the live review widget. Trustpilot receives connection and device information when the widget loads and may use cookies or similar technologies. See Trustpilot's privacy policy.
Maps and reviews stay unloaded until you allow their provider. You can use the course information, addresses, dates and contact details without allowing them. A link that opens Google Maps, Trustpilot or another website takes you to that service, which has its own privacy settings.
We have not installed a separate visitor analytics service or advertising pixels on this website. The optional providers described above handle their own service data. Before introducing our own analytics or advertising tracking, we will update this notice and the relevant preference controls.
We may also disclose relevant information where required by law, to establish or defend legal claims, or to professional advisers assisting with those matters.
International processing
Some providers operate internationally, so information may be processed outside the UK, including in the United States. Cloudflare's data processing addendum describes its transfer arrangements, including applicable adequacy arrangements and standard contractual clauses with the UK transfer addendum where required.
Google and Trustpilot explain their international processing and safeguards in the notices linked above. You can contact us for information about the safeguards that apply to information we share. Allowing an optional widget is a choice about loading that service; it is not a waiver of your data-protection rights.
How long we keep information
We keep enquiry correspondence for the time needed to answer your request and manage relevant follow-up. When deciding whether a record is still needed, we consider whether the enquiry is resolved, whether it resulted in a booking, and whether the record is needed for a complaint, legal obligation or legal claim. Information that becomes part of a booking or training record is handled under our customer and student privacy notice.
Technical security and delivery information is kept for the period needed to operate the service, investigate failures and prevent abuse, subject to the provider's applicable retention arrangements.
Your optional-service choices are valid for 180 days in this browser, unless you change them or clear browser storage sooner. After that, the website asks you to choose again. Third-party services have their own retention arrangements, described in their notices.
Your rights and choices
Depending on the circumstances, you can ask to access your personal information, correct it, erase it, restrict its use or receive a portable copy. These rights are not absolute; for example, we may need to retain information to meet a legal obligation or deal with a legal claim.
You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. You also have an unconditional right to object to the use of your information for direct marketing.
Where we rely on consent, you can withdraw it at any time. Use Privacy settings in the footer to change your optional-service choices. Withdrawal stops future loading of the relevant service on this site; it does not undo processing that already took place or clear cookies held on another provider's domain. You can also manage those cookies through your browser or the provider's controls.
To exercise your other rights, email info@skillstg.co.uk. We may need enough information to confirm your identity and locate the relevant records. We will respond within the period required by data-protection law.
Contact and complaints
Send privacy questions or complaints to info@skillstg.co.uk, or write to Data Protection, Skills Training Group, Units 1–3, 5 Murray Street, Paisley, PA3 1QG.
You can also complain to the Information Commissioner's Office. You do not have to complete our own complaints process before contacting the ICO.
We will update this policy when the way this website uses information changes. The date at the top shows when it was last updated.