Privacy Policy
PulsePoint Training Solutions Ltd
Last updated: 15/11/2025
1. Introduction
PulsePoint Training Solutions Limited (“we”, “our”, “us”) is committed to protecting the privacy and security of your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website or engage with our training services.
We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and process all personal data in line with our internal Data Protection Policy.
By using our website, you agree to the practices described below.
2. Data Controller
PulsePoint Training Solutions Limited is the Data Controller, responsible for determining how and why personal data is processed.
Contact:
Email: ben@pulsepointtraining.co.uk
Phone: 077920098528
Address: Unit 39 Gelli Industrial Estate, Gelli, Pentre, CF41 7UW
Our Data Protection Lead oversees compliance, risk management, and communication with the Information Commissioner’s Office (ICO).
3. Information We Collect
We collect personal data relevant to enquiries, course bookings, certification, and the operation of our services.
3.1 Information You Provide Directly
- Name
- Email address
- Phone number
- Company or employer
- Course booking information
- Payment details (processed securely via third-party processors; we do not store card details)
3.2 Information Collected Automatically
Through website analytics and cookies, we may collect:
- IP address
- Browser type and device information
- Pages visited and time spent
- Cookies and usage data
3.3 Special Category Data
Where relevant to training or regulatory requirements, we may process:
- Health information
- Learning support needs
- Medical conditions relevant to course safety
Such data is processed with additional safeguards in line with our internal Data Protection Policy.
4. How We Use Your Information
Your information is used for purposes consistent with those outlined in our Data Protection Policy.
We use your data to:
- Respond to enquiries
- Manage course bookings and learner registration
- Provide training, assessment, certification, and customer support
- Verify identity for awarding body requirements
- Maintain training records
- Issue certification and communicate with awarding bodies
- Send important service notices
- Improve website performance and user experience
- Send marketing communications only with your explicit consent
5. Lawful Bases for Processing
Processing is conducted lawfully, fairly, and transparently in accordance with:
- Contractual necessity
e.g., processing learner information for course delivery or registration - Legal obligation
e.g., health and safety requirements, regulatory audits - Legitimate interests
e.g., quality assurance, operational efficiency, website analytics - Consent
e.g., marketing communications or optional sign-ups
Where Special Category Data is processed (e.g., health information), this is done under the appropriate UK GDPR conditions and only when strictly necessary.
6. Data Storage & Security
We take strong measures to protect your personal data.
- Electronic data is stored in secure, password-protected systems with restricted access
- Paper records are kept in locked cabinets or secure offices
- Data transferred electronically (e.g., results, invoices) is encrypted or securely transmitted
- Access is limited to authorised trainers, staff, and contractors
These protections mirror the controls described in our internal Data Protection Policy.
7. Data Retention
We retain personal data only for as long as necessary, following our Data Retention Schedule and relevant regulatory requirements.
Examples include:
- Learner records & assessment evidence: minimum 3 years, or longer per awarding body rules
- Staff training & qualification records: 6 years after employment ends
- Financial records: 6 years (HMRC requirement)
Data no longer required is securely deleted or shredded.
8. Data Sharing
We do not sell personal data.
We may share your information with approved third parties when necessary:
- Awarding or regulatory bodies (for learner registration and certification)
- Insurers
- IT service providers
- Payment processors
- Statutory bodies when legally required
Any third party acting as a Data Processor must comply with UK GDPR and operate under written agreements.
Sharing is always:
- minimal
- secure
- purpose-limited
9. Cookies
Our website may use cookies to:
- Improve functionality
- Analyse visitor behaviour
- Enhance user experience
You may change cookie preferences in your browser at any time.
10. Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate or incomplete information
- Erase data (“right to be forgotten”) in certain circumstances
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent where it is the lawful basis
Requests are handled according to our internal Subject Access Request Procedure, with responses typically provided within one month.
11. Data Breaches
Any suspected or confirmed data breach is managed following our internal Data Breach Procedure.
If a breach is likely to pose a risk to your rights or freedoms:
- the ICO will be notified within 72 hours
- affected individuals will be informed without undue delay
12. Third-Party Links
Our website may contain links to external sites.
We are not responsible for their privacy practices or content.
13. Changes to This Policy
We may update this Privacy Policy periodically.
Updated versions will be published on this page with a revised date.
14. Contact Us
If you have questions or wish to exercise your rights, contact:
PulsePoint Training Solutions Limited
Email: ben@pulsepointtraining.co.uk
Phone: 077920098528
Address: Unit 39 Gelli Industrial Estate, Gelli, Pentre, CF41 7UW