Privacy notice
This policy has not been approved yet
Who we are
UK Fire Safety Training is a trading name of UK Fire Door Training Ltd (company number 13350267), Unit 8 Aspley Close, Four Ashes, Wolverhampton WV10 7DE. We are the controller of the personal information described here. Our managing director is responsible for data protection. To contact us about your information, email info@ukfiresafetytraining.com, ring 01902 931 101 or use our contact form.
What we collect
- Your account: name, email address, password (stored only in scrambled form by our sign-in provider), and phone number and organisation if you give them. If you give us a mobile number, we use it only to text you the day before a practical course and about changes to it. Remove it from Your details and the texts stop.
- If you buy without signing in: we set up an account in the name you give, so you can reach what you bought, unless your email address already has one. It can't be used until you confirm your address with the link in your order confirmation and choose a password.
- Orders and payments: what you bought, prices, invoices, refunds, billing contact and purchase order number. Stripe takes card payments; we never see or store card details.
- Training records: lessons started and finished, assessment scores and results, practical course bookings, attendance, trainer's notes on the outcome, and certificates.
- People you book on: the name and email address of each learner you buy a place for.
- Date of birth (optional): asked for at practical courses, only to tell apart people with the same name, and only if you're happy to give it.
- Health and access needs, only if you tell us: a health condition, disability or other need that affects how you take part, so we can make reasonable adjustments. A trainer's notes may record it if it affected how the course went. The law gives health information extra protection, so we ask before we record it and use it only to make adjustments.
- Enquiries and quotes: what you tell us in a form, email or call.
- Technical information: your network address and browser details, used to keep the site secure and working.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account, deliver courses, mark assessments, issue certificates | Contract: we need it to provide what you bought |
| Make reasonable adjustments for a health condition or disability you tell us about | Contract, and for the health information itself, your explicit consent. You can withdraw it at any time, though we may then be unable to make the adjustment |
| Keep orders, invoices and refunds | Legal obligation: tax and accounting law |
| Let employers and clients check a certificate is genuine | Legitimate interests: making certificates trustworthy and preventing fraud |
| Show an organisation the progress and results of the places it gave | Legitimate interests: the organisation needs to know the training it paid for is done. You're told before you accept the place |
| Email a reminder before a certificate's refresher date | Legitimate interests. Every reminder has a link to stop them |
| Text you the day before a practical course, and about changes to it | Contract: it helps us deliver the course you booked. Only if you've given a mobile number |
| Answer enquiries and prepare quotes | Steps you've asked for before a contract, or legitimate interests |
| Keep the site secure, stop spam and fix errors | Legitimate interests |
| Count visits with Plausible, if you accept analytics | Consent, which you can withdraw in your cookie settings |
We don't sell your information, and we don't send marketing emails without your agreement.
Who we share it with
- The organisation that gave you a place, and its team managers, see your progress, results and certificates for the courses it gave you.
- Anyone you give a certificate reference to can check it. They see your name, the course, the dates and whether it's valid.
- Awarding bodies: if a course leads to a qualification from an awarding body, we share the details it needs to register you and issue the qualification. The course page says when this applies.
- Our suppliers, who handle information for us under contract and only on our instructions:
| Supplier | What they do | Where |
|---|---|---|
| Supabase | Database and sign-in | London |
| Vercel | Website hosting | London, with a global delivery network |
| Sanity | Storing the website's text and pictures, and sending the pictures to your browser | EU and US, with a global delivery network |
| Stripe | Card payments | UK, EU and US |
| Resend | Sending emails | EU and US |
| Twilio | Sending text messages | US |
| Sentry | Error reports | EU |
| Vimeo | Playing course films, with tracking switched off | US |
| YouTube (Google) | Playing some films, in its privacy-enhanced mode, only once you press play | US |
| Plausible | Visit counts, only if you accept analytics | EU |
- Others where the law requires it, such as HM Revenue & Customs or the police, and our professional advisers.
Where a supplier handles information outside the UK, the transfer is protected by UK adequacy regulations or the UK's approved contract terms for international transfers.
How long we keep it
| Information | How long |
|---|---|
| Orders, invoices and refunds | 6 years, as tax law requires |
| Certificates | 6 years from issue |
| The record of what our staff did (audit log) | 6 years |
| Emails we sent you | 2 years. After that we keep only the fact an email was sent, not who to or what it said |
| A checkout that was never paid | 30 days, then the buyer's details are removed |
| Your account and training records | While you have an account, and as long as the certificates above |
| Health and access needs you tell us about | Until your course is over, or sooner if you ask. If a trainer's notes record it, as long as your training records |
Backups of our database roll off on a fixed schedule.
If you ask us to erase your details
We remove your name, contact details, sign-in, and the contents of emails and enquiries. We also remove your name and contact details from the payment records we store, keeping the amounts and dates, and clear any notes a trainer wrote about your course, keeping whether you attended and your result. We keep the orders and certificates themselves, because the law and the organisations that rely on them need them. Your certificate then reads "Name removed at the holder's request". Anyone checking it can still confirm it's genuine, and can confirm it's yours only by typing your name, which we check without ever showing it.
Your rights
You have the right to:
- get a copy of the information we hold about you
- have wrong information corrected
- have your information erased, as described above
- restrict or object to how we use it
- have information you gave us sent to you or someone else in a usable format
- withdraw consent where we rely on it
- have a person review an assessment result, as described below
Ask us using the details at the top of this page. We'll confirm it's you, then reply within one month. There's no charge.
How assessments are marked
Online assessments are marked automatically. The system checks your answers against the correct ones and decides whether you've passed, with no person involved. Nothing else about you is decided automatically. If you think a result is wrong, tell us using the details at the top of this page. A member of our staff will check your answers and how they were marked, take account of anything you tell us, and tell you what they found and what we'll do about it.
Keeping it safe
Your information is held in London on encrypted systems. Access is limited to the staff who need it, staff sign in with two-step verification, and every staff action is recorded.
Cookies
Our cookies page explains what we store in your browser and how to control it.
Complaints
If you're unhappy with how we've used your information, tell us by email, phone or our contact form, using the details at the top of this page. We'll confirm we've received your complaint within 30 days, look into it, and tell you what we found and what we've done about it without undue delay. If you're still unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
This notice was last updated on 28 October 2026.