Demonstration site: courses, prices, dates and teaching content are illustrative and awaiting approval.

Questions? Call 01902 931 101

Privacy notice

What personal information we hold, why, who sees it, how long we keep it and your rights.

This policy has not been approved yet

The wording on this page is a draft and must be reviewed before the site takes real bookings.

Who we are

UK Fire Safety Training is a trading name of UK Fire Door Training Ltd (company number 13350267), Unit 8 Aspley Close, Four Ashes, Wolverhampton WV10 7DE. We are the controller of the personal information described here. Our managing director is responsible for data protection. To contact us about your information, email info@ukfiresafetytraining.com, ring 01902 931 101 or use our contact form.

What we collect

  • Your account: name, email address, password (stored only in scrambled form by our sign-in provider), and phone number and organisation if you give them. If you give us a mobile number, we use it only to text you the day before a practical course and about changes to it. Remove it from Your details and the texts stop.
  • If you buy without signing in: we set up an account in the name you give, so you can reach what you bought, unless your email address already has one. It can't be used until you confirm your address with the link in your order confirmation and choose a password.
  • Orders and payments: what you bought, prices, invoices, refunds, billing contact and purchase order number. Stripe takes card payments; we never see or store card details.
  • Training records: lessons started and finished, assessment scores and results, practical course bookings, attendance, trainer's notes on the outcome, and certificates.
  • People you book on: the name and email address of each learner you buy a place for.
  • Date of birth (optional): asked for at practical courses, only to tell apart people with the same name, and only if you're happy to give it.
  • Health and access needs, only if you tell us: a health condition, disability or other need that affects how you take part, so we can make reasonable adjustments. A trainer's notes may record it if it affected how the course went. The law gives health information extra protection, so we ask before we record it and use it only to make adjustments.
  • Enquiries and quotes: what you tell us in a form, email or call.
  • Technical information: your network address and browser details, used to keep the site secure and working.

Why we use it, and our lawful basis

What we doLawful basis
Run your account, deliver courses, mark assessments, issue certificatesContract: we need it to provide what you bought
Make reasonable adjustments for a health condition or disability you tell us aboutContract, and for the health information itself, your explicit consent. You can withdraw it at any time, though we may then be unable to make the adjustment
Keep orders, invoices and refundsLegal obligation: tax and accounting law
Let employers and clients check a certificate is genuineLegitimate interests: making certificates trustworthy and preventing fraud
Show an organisation the progress and results of the places it gaveLegitimate interests: the organisation needs to know the training it paid for is done. You're told before you accept the place
Email a reminder before a certificate's refresher dateLegitimate interests. Every reminder has a link to stop them
Text you the day before a practical course, and about changes to itContract: it helps us deliver the course you booked. Only if you've given a mobile number
Answer enquiries and prepare quotesSteps you've asked for before a contract, or legitimate interests
Keep the site secure, stop spam and fix errorsLegitimate interests
Count visits with Plausible, if you accept analyticsConsent, which you can withdraw in your cookie settings

We don't sell your information, and we don't send marketing emails without your agreement.

Who we share it with

  • The organisation that gave you a place, and its team managers, see your progress, results and certificates for the courses it gave you.
  • Anyone you give a certificate reference to can check it. They see your name, the course, the dates and whether it's valid.
  • Awarding bodies: if a course leads to a qualification from an awarding body, we share the details it needs to register you and issue the qualification. The course page says when this applies.
  • Our suppliers, who handle information for us under contract and only on our instructions:
SupplierWhat they doWhere
SupabaseDatabase and sign-inLondon
VercelWebsite hostingLondon, with a global delivery network
SanityStoring the website's text and pictures, and sending the pictures to your browserEU and US, with a global delivery network
StripeCard paymentsUK, EU and US
ResendSending emailsEU and US
TwilioSending text messagesUS
SentryError reportsEU
VimeoPlaying course films, with tracking switched offUS
YouTube (Google)Playing some films, in its privacy-enhanced mode, only once you press playUS
PlausibleVisit counts, only if you accept analyticsEU
  • Others where the law requires it, such as HM Revenue & Customs or the police, and our professional advisers.

Where a supplier handles information outside the UK, the transfer is protected by UK adequacy regulations or the UK's approved contract terms for international transfers.

How long we keep it

InformationHow long
Orders, invoices and refunds6 years, as tax law requires
Certificates6 years from issue
The record of what our staff did (audit log)6 years
Emails we sent you2 years. After that we keep only the fact an email was sent, not who to or what it said
A checkout that was never paid30 days, then the buyer's details are removed
Your account and training recordsWhile you have an account, and as long as the certificates above
Health and access needs you tell us aboutUntil your course is over, or sooner if you ask. If a trainer's notes record it, as long as your training records

Backups of our database roll off on a fixed schedule.

If you ask us to erase your details

We remove your name, contact details, sign-in, and the contents of emails and enquiries. We also remove your name and contact details from the payment records we store, keeping the amounts and dates, and clear any notes a trainer wrote about your course, keeping whether you attended and your result. We keep the orders and certificates themselves, because the law and the organisations that rely on them need them. Your certificate then reads "Name removed at the holder's request". Anyone checking it can still confirm it's genuine, and can confirm it's yours only by typing your name, which we check without ever showing it.

Your rights

You have the right to:

  • get a copy of the information we hold about you
  • have wrong information corrected
  • have your information erased, as described above
  • restrict or object to how we use it
  • have information you gave us sent to you or someone else in a usable format
  • withdraw consent where we rely on it
  • have a person review an assessment result, as described below

Ask us using the details at the top of this page. We'll confirm it's you, then reply within one month. There's no charge.

How assessments are marked

Online assessments are marked automatically. The system checks your answers against the correct ones and decides whether you've passed, with no person involved. Nothing else about you is decided automatically. If you think a result is wrong, tell us using the details at the top of this page. A member of our staff will check your answers and how they were marked, take account of anything you tell us, and tell you what they found and what we'll do about it.

Keeping it safe

Your information is held in London on encrypted systems. Access is limited to the staff who need it, staff sign in with two-step verification, and every staff action is recorded.

Cookies

Our cookies page explains what we store in your browser and how to control it.

Complaints

If you're unhappy with how we've used your information, tell us by email, phone or our contact form, using the details at the top of this page. We'll confirm we've received your complaint within 30 days, look into it, and tell you what we found and what we've done about it without undue delay. If you're still unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

This notice was last updated on 28 October 2026.