Privacy Policy

1. Introduction

AreYou – Training and Consultancy CIC (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website www.areyou.org.uk (the “Site”) or use our services, including face-to-face and online learning courses, and consultation services (collectively, “Services”).

This policy is in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect and process the following personal information about you:

• Contact Information: Name, email address, phone number, and postal address.
• Account Information: Username, password, and other information used to access our Services.
• Payment Information: Billing details and payment method (note that we do not store full payment card details).
• Course and Consultation Information: Details about your enrolment, progress, and participation in our courses or consultations.
• Communications: Records of your interactions with us, including emails, phone calls, and other correspondence.
• Usage Data: Information about how you use our Site, such as IP address, browser type, time zone, and pages accessed.

2.2 Sensitive Information

We do not generally collect sensitive personal data (such as health information or information related to race, religion, or political beliefs) unless necessary and with your explicit consent. This is only used for Qualifications, as requested by the awarding bodies or for RSE referrals. 

3. How We Use Your Information

We may use your personal information for the following purposes:

• To Provide Services: To process your enrolment, deliver our courses and consultations, and manage your account.
• Communication: To communicate with you about your account, our Services, and respond to your inquiries.
• Payment Processing: To process payments for Services purchased and manage any refunds or billing issues.
• Marketing: To send you promotional materials, newsletters, and information about our Services, provided you have opted in to receive such communications.
• Site Improvement: To analyse how you use our Site and Services to improve functionality, user experience, and content.
• Legal Compliance: To comply with legal obligations, such as record-keeping and responding to lawful requests from public authorities.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with:

• Service Providers: Third-party companies that provide services on our behalf, such as payment processing, email marketing, and website analytics. These providers are contractually obligated to protect your information.
• Legal Authorities: If required by law, we may disclose your information to public authorities, law enforcement, or legal advisors.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity as part of the transaction.

5. Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your information is no longer needed, we will securely delete or anonymise it.

6. Your Rights

Under the UK GDPR, you have the following rights concerning your personal information:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, subject to certain legal obligations.
• Right to Restrict Processing: You can request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You can request that we transfer your data to another service provider in a structured, commonly used format.
• Right to Object: You have the right to object to the processing of your personal data in some cases, such as for direct marketing.
• Right to Withdraw Consent: If you have provided consent for the processing of your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [Your Contact Information].

7. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to collect information about your browsing behaviour. Cookies help us to improve your experience on our Site and to deliver targeted advertising. For more information about how we use cookies, please refer to our [Cookie Policy].

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

It is unlikely but your personal information may be transferred to and processed in countries outside the UK, including countries that may not have equivalent data protection laws. Where this occurs, we will ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect your information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and we encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

AreYou – Training and Consultancy CIC
Email:office@areyou.org.uk
Phone: 02392 983404