Privacy policy
Our approach to Data Protection and Privacy
eLearning at Work is a trading name of Training at Work Group Limited (Company Number 11379815). We are specialists in workplace training across the UK. In addition to keeping your workforce trained and safe, as the Data Controller of this company we are committed to keeping your data secure and confidential as a visitor to this website and/or as a customer.
This Privacy Policy forms our commitment to keeping your data secure, confidential and lawfully processed. It sets out how we use your data when you visit this website and use our services.
- Law
The information contained in this Privacy Policy shall be governed and construed in accordance with English law and be subject to the exclusive jurisdiction of the English courts.
- General Data Protections Regulations
We abide by the principles set out in the GDPR regulations.
- When we collect your data
We collect personal data in a number of circumstances:
- When you visit this website
- Processing your booking with us whether online or through our customer services team.
- When you contact us to discuss your booking.
- When corresponding with you or contacting you about our services.
- When you take part in surveys or provide us with feedback.
- When someone books a place on a course with us on your behalf.
- What data do we collect about you
We may collect the following data about you. This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the below personal data is collected directly, for example when you purchase training from us or fill out a contact form. Other personal data is collected indirectly, for example your browsing or shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.
Data categories
- Identification – name, age/date of birth. Employer, role (if you contact us on behalf of a company you are employed by).
- Contact details – email address, telephone number, location/postal address.
- Account – your purchase, quotation and communication history with us, and marketing preferences
- Electronic identification – IP address, website cookies, location, browser, device, operating system
- Usage – usage of website, products & services
- Payment details – debit/credit card/invoicing details, billing contact details.
- Training history – course title, qualification type, date taken, validity, expiry, location taken, grade.
We also collect, use and share aggregated data, including via this website’s use of Google Signals for remarketing purposes. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
- How we use your data
We only use your data when it is lawful for us to do so. Please find information on how we use your data below, and the lawful basis for processing in each case.
| Type/Purpose of Processing | Lawful Basis for Processing | Data Categories |
| Processing your order | Contract | Identification, Contact, Account, Payment Details |
| Performance of administrative, accounting or customer service tasks relevant to an order, enquiry and/or training | Contract | Identification, Contact, Account, Payment Details |
| Fulfillment of your training, and verification of it after completion. | Contract | Identification, Contact, Training History |
| To fulfill your training in any case where you have medical, disability or other health needs that are necessary to be considered for the succesful provision of training | Consent | Health/Medical/Disability information |
| Provide you with information on relevant products, services and offers if you have contacted us | 1.Contract/Pre-Contractual Intention 2. Legitimate Interests – To help ensure you fulfill all your training requirements and to market our products & services |
Identification, Electronic Identification, Contact, Account, Training History |
| Inform you when the training you have purchased is approaching it’s expiry | Legitimate Interest – To offer you the best possible service we can, and improve brand loyalty | Identification, Contact, Account, Payment Details, Training History |
| Manage your marketing, website and service preferences | Legitimate Interest – To honour your preferences as a user of our website, customer or other interested party | Identification, Electronic Identification, Contact, Account |
| Gather feedback on products, services and experience | Legitimate Interest – To both improve and to ensure you are happy with, our products, services and customer experience. | Identification, Contact, Account, Training History |
| Provide you with relevant information and marketing through personalisation | Legitimate Interest – To offer you the best possible service through relevant information and content, and to grow as a company through improving marketing effectiveness | Identification, Electronic identification, Contact, Account, Training History |
| Analysis of website and product usage, communications, purchase history and marketing data to gain knowledge on service and product performance, user behaviour and marketing effectiveness | Legitimate Interest – Improve our website, customer experience, products, services and marketing in order to improve & grow as a company | Identification, Electronic identification, Contact, Account, Training History |
| Quality assurance testing, monitoring, auditing, market analysis, developing of and training on products, services, business systems and processes | Legitimates interest – To improve products, services, business processes and systems, security and protection of business assets | Identification, Electronic Identification Contact, Account, Training History, Account |
Cookies & IP Addresses
We use your IP address and website cookies on this website. These bits of information allow are needed for site functionality, and also allow us to track how you use our website as an individual.
| Cookie | Description |
|---|---|
| __cf_bm | Cloudflare set the cookie to support Cloudflare Bot Management. |
| __cfruid | Cloudflare sets this cookie to identify trusted web traffic. |
| __zlcmid | Zopim sets this cookie to store a unique user ID. |
| __zlcstore | Zopim sets this cookie to store information about the current status of the chat. |
| _clck | Microsoft Clarity sets this cookie to retain the browser’s Clarity User ID and settings exclusive to that website. This guarantees that actions taken during subsequent visits to the same website will be linked to the same user ID. |
| _clsk | Microsoft Clarity sets this cookie to store and consolidate a user’s pageviews into a single session recording. |
| _ga | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
| _ga_* | Google Analytics sets this cookie to store and count page views. |
| _gat_gtag_UA_* | Google Analytics sets this cookie to store a unique user ID. |
| _gat_UA-* | Google Analytics sets this cookie for user behaviour tracking. |
| _gcl_au | Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services. |
| _gd.* | Description is currently not available. |
| _gid | Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website’s performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously. |
| _GRECAPTCHA | Google Recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks. |
| _hjAbsoluteSessionInProgress | Hotjar sets this cookie to detect a user’s first pageview session, which is a True/False flag set by the cookie. |
| _hjFirstSeen | Hotjar sets this cookie to identify a new user’s first session. It stores the true/false value, indicating whether it was the first time Hotjar saw this user. |
| _hjIncludedInPageviewSample | Hotjar sets this cookie to check whether a user is included in the data sampling defined by the site’s pageview limit. |
| _hjIncludedInSessionSample_.* | Description is currently not available. |
| _hjRecordingEnabled | Hotjar sets this cookie when a Recording starts and is read when the recording module is initialized, to see if the user is already in a recording in a particular session. |
| _hjRecordingLastActivity | Hotjar sets this cookie when a user recording starts and when data is sent through the WebSocket. |
| _hjSession_.* | Description is currently not available. |
| _hjSessionUser_.* | Description is currently not available. |
| _hjTLDTest | To determine the most generic cookie path that has to be used instead of the page hostname, Hotjar sets the _hjTLDTest cookie to store different URL substring alternatives until it fails. |
| _uetsid | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
| _uetvid | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
| ANONCHK | The ANONCHK cookie, set by Bing, is used to store a user’s session ID and verify ads’ clicks on the Bing search engine. The cookie helps in reporting and personalization as well. |
| AWSALBCORS | Amazon Web Services set this cookie for load balancing. |
| cblon | Metrilo sets this cookie for the online shopping cart. They allow us to ensure that the shopping cart works appropriately. |
| cbuid | No description available. |
| cbuid_meta | No description available. |
| CLID | Microsoft Clarity set this cookie to store information about how visitors interact with the website. The cookie helps to provide an analysis report. The data collection includes the number of visitors, where they visit the website, and the pages visited. |
| CONSENT | YouTube sets this cookie via embedded YouTube videos and registers anonymous statistical data. |
| cookielawinfo-checkbox-advertisement | Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the “Advertisement” category. |
| cookielawinfo-checkbox-analytics | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Analytics”. |
| cookielawinfo-checkbox-functional | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category “Functional”. |
| cookielawinfo-checkbox-necessary | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Necessary”. |
| cookielawinfo-checkbox-others | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Other. |
| cookielawinfo-checkbox-performance | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Performance”. |
| CookieLawInfoConsent | CookieYes sets this cookie to record the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie. |
| No description available. | |
| gclid | Description is currently not available. |
| Google signals | We use this cookie to enable Google Analytics to collect data about our website traffic in addition to data collected through a standard Google Analytics implementation to provide additional features like cross device audiences and insights for remarketing purposes. |
| handl_ip | HandL UTM Grabber plugin sets this cookie to record the web browser’s IP address. |
| handl_landing_page | HandL UTM Grabber plugin sets this cookie is used to record the very first page you visited on our site in your browser. |
| handl_original_ref | HandL UTM Grabber plugin sets this cookie to record the URL from which you came to our site. |
| handl_ref | HandL UTM Grabber plugin sets this cookie to record the URL from which you came to our site. |
| handl_url | HandL UTM Grabber plugin sets this cookie to form the URL on which we placed the code that generates. |
| message | Description is currently not available. |
| mhVisitorId | No description available. |
| MR | This cookie, set by Bing, is used to collect user information for analytics purposes. |
| MUID | Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations. |
| NID | Google sets the cookie for advertising purposes; to limit the number of times the user sees an ad, to unwanted mute ads, and to measure the effectiveness of ads. |
| PHPSESSID | This cookie is native to PHP applications. The cookie stores and identifies a user’s unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed. |
| SM | Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains. |
| SRM_B | Used by Microsoft Advertising as a unique ID for visitors. |
| td_session_.* | This cookie is used to store any products that get added to the basket. |
| type | Description is currently not available. |
| username | No description available. |
| utm_campaign | Google Ad Services sets this cookie to store session campaign value if present. |
| utm_content | This cookie is used for storing the session content value if present. |
| utm_medium | This cookie is used to record from where the visitor came to the website orginally. This information is used by the website operator to know the efficiency of their marketing. |
| utm_source | This cookie is used to record from where the visitor came to the website orginally. This information is used by the website operator to know the efficiency of their marketing. |
| utm_term | This cookie is used to record from where the visitor came to the website orginally. This information is used by the website operator to know the efficiency of their marketing. |
| viewed_cookie_policy | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
| vuid | Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website. |
| wc_client | This cookie is set by the provider Woundwo.com. This cookie is used for identifying the web traffic. It records the landing page and source of the visitor’s visit for analytics. |
| wc_client_current | No description available. |
| wc_visitor | No description available. |
| wow.anonymousId | This is a analytic cookie used to store anonymous visitor ID. It tracks the visitor uniquely between visits. |
| wow.schedule | This cookie is set by the provider Communigator.This cookie is used to track the Load Balance Session Queue. |
| wow.session | This cookie is set by the provider Communigator.This cookie is used to track the Internet Information Services(IIS) session state. |
| wow.utmvalues | This cookie is from Communigator. This cookie is used to store UTM values for the session.UTM values are specific text strings that are appended to URLs that allow Communigator to track the URLs and the UTM values when they get clicked on |
| zte2095 | Description is currently not available. |
Types of Cookies
Essential Cookies – these enable the core functionality of this website, allowing you to contact us, make a purchase, get a quotation or other core function.
Performance Cookies – cookies that collect information on how users use our website, in order for us to measure performance and improve user experience.
Functional – Cookies that give you extra useful features, like live chat to our agents.
Targeting Cookies – these cookies record your behaviour on this website, including interactions and the pages you visit, and allow us to improve the relevance of our advertising and marketing towards you.
You can block any cookies from this website or any other by using the controls on your web browser. If you choose not to use cookies, you will still be able to use our website but some features may not work as expected. For more general information about both cookies and our analytics platform Google Analytics, and how to adjust your cookies settings, please see the following links:
http://www.aboutcookies.org.uk/
https://support.google.com/analytics/answer/6004245
You can opt-out of Google Analytics tracking by using the tool provided at this link: https://tools.google.com/dlpage/gaoptout
We also use public & third-party IP address lookup tables to identify your organisation, if you’re browsing on behalf of a company, to check your customer history and offer you the best possible service as an existing or prospective customer. In some limited cases i.e. single person companies, it may be possible to identify personal data from publicly available ICANN data. We may share your data with Google for enhanced conversions to perform ad measurement services on our behalf.
Pixels and other web technologies
We may use pixels or or other web technologies to track when you’ve opened an email or link we send to you.
- Retention Periods
We store data on you for different lengths of time depending on the type of user you are and your relationship with the company. We use a combination of criteria to determine how long we keep the different types of data we hold on you.
Some data is required to be held by law and to fulfill our contractual obligations with both you as a customer, and the awarding bodies we work with to certify your qualifications. In other situations, we store your data for as long as we believe their is be a legitimate mutual interest between us, as an existing or prospective customer. You have certain rights under the GDPR to remove, transfer or change this data – please see the ‘Your Data Rights’ section for more information’.
- Direct Marketing
If allowed by the Applicable Law and/or your consent, we may contact you from time to time to provide you with information which we think you may find of interest, unless you have opted out of such contact.
You can contact us at any time to withdraw your details and consent to processing from our marketing database, by contacting dataprotection@trainingatworkgroup.co.uk
We will not make available or sell your information to third parties for marketing purposes. However, If we sell, assign or transfer the assets of our business, or if our business is merged or enters into a joint venture with another business entity, we reserve the right to sell or transfer the database maintained by us (including any personal information provided by you).
- Suppliers and Sub-processors
In order for us to provide you with great quality Health and Safety training and an enjoyable browsing experience, we sometimes use services provided by other companies to assist us. These suppliers range from operational (e.g. our accountants), product (e.g. our eLearning providers), to technical (e.g. our Web Hosting provider, online payment providers).
Where necessary, we may share your personal data with these companies for processing in order to fulfil certain services. This is always done in a secure, confidential manner and your data is only held with the company for as long as is necessary in each case. The organisations will also always have appropriate technical and organisational methods in place to protect your data.
A full list of these providers, the personal data they hold, why we send them this data and the length of time they hold the data for can be obtained if required by contacting dataprotection@trainingatworkgroup.co.uk.
We may also disclose personal information where information is part of a due legal process and otherwise required or permitted by law.
- Location and International Transfers
Your data is largely held and processed within the EEA, however some of our third-party suppliers, such as hosting providers and other technology focused service providers, are based in the USA and so store and process data within the USA – certain global providers may also store and process data in other non-EEA countries.
In these cases, agreements with these suppliers will use Standard Contractual Clauses (SCC) / Model Contractual Clauses (MCC) from the European Commission, or similar agreements providing the same or greater levels of protection for international data transfers.
By submitting your data and agreeing to this policy you agree to this transfer, storing or processing.
- Security
We employ technical and organisational measures to protect the information provided by you from access by unauthorised persons and against unlawful processing.
This is achieved through a wide range of methods, including but not limited to: data encryption where appropriate, risk analysis, staff training, internal information security policies and other methods recommended under the GDPR.
All third party data processors that we use (as described in section 8, ‘Suppliers and Sub-processors’), have also confirmed that they employ the technical and organisational methods needed to keep your data safe and secure.
Other Collectors of Information
Except as otherwise expressly included in this Privacy Policy, this document only addresses the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties, different rules may apply to their use or disclosure of the information you disclose to them. To the extent that we use third party advertisers, they adhere to their own privacy policies. Since we do not control the privacy policy of any third party, you are subject to the privacy policy of that third party.
- Your Data Rights
We adhere to all rights given to individuals under the GDPR. To exercise any of these rights with the personal data we hold on you, please contact dataprotection@trainingatworkgroup.co.uk or write to:
eLearning at Work , First Floor, 1 Horsefair, Wetherby, West Yorkshire, England LS22 6JG
Subject Access Requests
This is your right to request a copy of the information that we hold about you. If you would like a copy of some or all your personal information, please email us at dataprotection@trainingatworkgroup.co.uk with sufficient information to enable us to identify you. We will respond to your request within one month of receipt of the request.
Updating and Correcting Information
We want to make sure your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Objections to processing of personal data
It is your right to lodge an objection to the processing of your personal data if you feel the “ground relating to your particular situation” apply. The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interest, rights and freedoms, or the processing is for the establishment, exercise or defence of a legal claims.
Data Portability
It is also your right to receive the personal data which you have given to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without delay from the current controller if:
(a) The processing is based on consent or on a contract, and
(b) The processing is carried out by automated means.
Right to be Forgotten
Should you wish for us to completely delete all information that we hold about you for, please either email dataprotection@trainingatworkgroup.co.uk or write to:
eLearning at Work , First Floor, 1 Horsefair, Wetherby, West Yorkshire, England LS22 6JG
Please note that if the personal data you wish to delete is needed for lawful purposes and/or contractual fulfilment, it may not be possible for us to remove this.
- Complaints
If you believe we have processed your data unfairly or unlawfully, you have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner’s Office within the UK – https://ico.org.uk/.
- Changes to this Policy
We may need to change this Privacy Policy over time. We will post changes to this Privacy Policy to the website when such changes are necessary. All amended terms shall automatically be effective immediately after they are initially posted on the website.
- Contact us
If you have any questions about this Privacy Policy, how we run the website or your dealing with our website, please send an e-mail to us at:
dataprotection@trainingatworkgroup.co.uk
Or write to us at:
eLearning at Work , First Floor, 1 Horsefair, Wetherby, West Yorkshire, England LS22 6JG
This privacy policy (“Privacy Policy”) is provided by eLearning at Work as a part of the Training at Work Group Limited (Company Number 11379815) whose registered office is at First Floor, 1 Horsefair, Wetherby, West Yorkshire, England LS22 6JG (referred to as “us”, “our” or “we” in this Privacy Policy) for the information of visitors (referred to as “you” or “your” in this Privacy Policy) to our website, the URL of which is https://www.elearningatwork.co.uk/ referred to as the “Website” in this Privacy Policy.
