Privacy Policy
This explains what personal data we collect, why we collect it, and the rights you have over it.
Training Course Broker Limited ("we", "us" or "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use https://trainingcoursebroker.com (our "Website"), why we collect it, who we share it with, and the rights you have over it.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should be read alongside our Cookie Policy and our Website Terms of Use.
Who we are
Training Course Broker Limited is a company registered in England and Wales, company number 10855487, with its registered office at 8 The Fieldings, Sutton in Ashfield, Nottinghamshire, NG17 2TF, United Kingdom. VAT number 275 3633 87.
For the purposes of UK data protection law, Training Course Broker Limited is the data controller of the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO), registration number ZA271501.
What we do
We operate an independent course comparison and booking website. Students ("delegates") search for and book places on training courses; training providers advertise courses and receive bookings. We are not a training provider ourselves — courses are delivered by the training providers listed on the site.
The personal data we collect
Information you give us directly
- Account and booking details. If you register, book a course, list courses as a training provider, or contact us, you may give us your name, email address, postal address, telephone number, job title/employer, and (for training providers) bank or payment account details for receiving funds.
- Contact and enquiry details. Anything you tell us through our contact form, by phone, or by email.
- Course feedback. Ratings and reviews you choose to submit after completing a course.
Payment information
Course payments are handled directly by PayPal and Stripe. When you pay, you are transferred to PayPal's or Stripe's own secure payment pages. We do not receive, process or store your card details — we only receive confirmation from PayPal or Stripe that a payment has been made, along with the transaction reference. Please see PayPal's and Stripe's own privacy policies for how they handle your payment data.
Information we collect automatically
- Technical and usage data. When you visit our Website, we automatically log your IP address, approximate location derived from that IP address, browser type and version, device and operating system, the page you came from (referrer), the pages you visit, and the date and time of your visit. This is used for site security, fraud prevention, and to understand how our Website is used. See our Cookie Policy for details of the cookies involved.
- Analytics. We use Google Analytics to help us understand how visitors use our Website. Google Analytics uses cookies and collects data such as pages visited, time on site, and general location. See Google's Privacy Policy for more information.
How we use your data, and our legal basis for doing so
| What we use it for | Our legal basis |
|---|---|
| Processing a course booking, or your listing as a training provider, and administering the resulting contract between you and the training provider or delegate | Performance of a contract with you |
| Operating, securing and improving our Website; detecting and preventing fraud and abuse; keeping records for accounting and tax purposes | Our legitimate interests, and legal obligation (for tax/accounting records) |
| Website analytics (Google Analytics) | Consent, where required by law — see our Cookie Policy |
| Sending you service messages about a booking or listing (e.g. confirmation, joining instructions from the training provider) | Performance of a contract with you |
| Sending you marketing about courses or services that may interest you | Consent (you can opt out at any time — see "Your rights" below) |
Who we share your data with
- Training providers. If you book a course, we pass your booking details to the relevant training provider so they can deliver the course and issue joining instructions and certificates.
- Payment processors. PayPal and Stripe, to process payments — see "Payment information" above.
- Service providers who support our Website, such as our hosting provider and website developer, acting under our instructions.
- Google, for website analytics (see above).
- Regulators, law enforcement or other third parties where we are legally required to disclose data, or to protect our rights, property or safety, or that of others.
- A buyer of our business, in the event that we sell or reorganise all or part of our business, subject to the same protections described in this policy.
We do not sell your personal data.
Where your data is processed
We are based in the UK and store data with UK/EU-based hosting where practicable. Some of the third parties listed above (for example Google, PayPal and Stripe) may process data outside the UK, including in the United States. Where this happens, we rely on the safeguards recognised under UK data protection law, such as the UK's international data transfer agreement or standard contractual clauses, to ensure your data remains protected.
How long we keep your data
We keep personal data only for as long as necessary for the purposes it was collected for, as described in this policy, or as required by law (for example, financial records are normally kept for at least six years for tax purposes). We are currently reviewing and setting out fixed retention periods for each category of data we hold, in particular for website visitor logs; until that review is complete, such data is kept for no longer than is reasonably necessary and is deleted or anonymised once it is no longer needed.
Keeping your data secure
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS) and access controls on our systems. No method of transmission over the internet is completely secure, so while we work hard to protect your data, we cannot guarantee its absolute security.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct (rectify) inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), in certain circumstances.
- Restrict how we use your data, in certain circumstances.
- Object to our use of your data, including for direct marketing at any time.
- Data portability — receive certain data in a portable format, or ask us to transfer it to another organisation.
- Withdraw consent at any time, where we rely on consent (this won't affect processing already carried out).
To exercise any of these rights, contact us using the details below. We will not normally charge a fee, and we will respond within one month. If you are unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO) — though we'd appreciate the chance to put things right first.
Children
Our Website and services are intended for business use and for adult learners. We do not knowingly collect personal data from children.
Links to other websites
Our Website contains links to training providers' own websites and to third-party services. This policy only covers our Website — once you leave our site, please check the privacy policy of the site you've moved to, as we are not responsible for it.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The date at the bottom of this page shows when it was last revised. We encourage you to review this page periodically.
Contact us
Questions or requests about this policy, or about your personal data, can be sent to us at 8 The Fieldings, Sutton in Ashfield, Nottinghamshire, NG17 2TF, UK, by email to moc.rekorbesruocgniniart@nimda, or via our contact page.