Privacy Policy

Last updated: 15 March 2027

1. Who We Are

Crossfield IT Training Ltd is a company registered in England and Wales (Company No. 12847193) with its registered office at 103 Colmore Row, 5th Floor, Birmingham B3 3AG. We are the data controller for the personal data described in this policy. You can contact us at hello@crossfieldit.co.uk or by telephone on +44 121 369 4718.

2. What Data We Collect

We collect the following categories of personal data:

Contact details: name, telephone number, email address, and organisation name when you request a callback, make an enquiry, or book a training programme.
Training records: attendance, assessment results, and CPD certification details for participants enrolled in our programmes.
Billing information: company name, billing address, purchase order numbers, and payment references. We do not store credit or debit card numbers directly.
Website usage data: pages visited, time spent on site, and browser type. This data is collected through essential cookies only and is not linked to your identity.
Correspondence: records of emails, telephone calls, and other communications you have with us.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to callback requests and enquiries you submit through our website or by telephone.
To administer training programmes, including enrolment, scheduling, assessment, and certification.
To issue invoices and process payments for our services.
To send you information about our services where you have consented to receive such communications or where we have a legitimate interest in doing so.
To comply with our legal and regulatory obligations.
To improve our website and services based on aggregated, anonymised usage data.

4. Lawful Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

Contract: where processing is necessary to perform a contract with you or to take pre-contractual steps at your request (e.g. responding to a callback request, delivering training).
Legitimate interest: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g. administrative record-keeping, service improvement).
Legal obligation: where we are required to process data to comply with a legal obligation (e.g. tax and accounting requirements).
Consent: where you have given explicit consent, for example to receive marketing communications. You may withdraw consent at any time by contacting us.

5. Sharing Your Data

We do not sell your personal data. We may share your data with the following categories of third parties:

Service providers: companies that help us deliver our services, such as hosting providers, payment processors, and email platforms. These providers are bound by data processing agreements and may only use your data as instructed by us.
CPD accreditation bodies: to verify and record your continuing professional development credits.
Professional advisers: our accountants and legal advisers, where necessary.
Law enforcement or regulators: where we are required to do so by law or to protect our legal rights.

6. International Transfers

Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO) or transfers to countries with an adequacy decision.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Callback requests and enquiries: 12 months from the date of the enquiry, unless a business relationship is established.
Training records and CPD certificates: 7 years from the date of programme completion to support verification requests.
Billing and financial records: 7 years as required by HMRC for tax and accounting purposes.
Website usage data: 26 months, after which it is automatically deleted.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data where there is no compelling reason for us to continue processing it.
Right to restrict processing: to request that we limit how we use your data in certain circumstances.
Right to data portability: to request that we provide your data in a structured, commonly used, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at hello@crossfieldit.co.uk. We will respond within one calendar month.

9. Cookies

Our website uses only essential cookies that are necessary for the site to function correctly. These include cookies that remember your cookie consent preference. We do not use advertising, tracking, or analytics cookies. Essential cookies do not require your consent under UK GDPR, but we inform you of their use through our cookie banner.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (TLS) for data in transit, access controls limiting data access to authorised personnel, and regular reviews of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to minimise risk.

11. Children's Data

Our services are designed for working professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a person under 18, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Complaints and Contact

If you have questions or concerns about how we handle your personal data, please contact us:

Crossfield IT Training Ltd
103 Colmore Row, 5th Floor
Birmingham B3 3AG
Email: hello@crossfieldit.co.uk
Phone: +44 121 369 4718

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113