Privacy policy

The following statement explains Pagoda Security Training’s policy regarding the personal data you may disclose to us when booking a training course.

Our aim is to respect your privacy and comply with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR).

The Data Controller

Pagoda Security Training Ltd is the Data Controller for any personal data you give to us. Our full details are:
Pagoda Security Training Ltd, Office Suite, King & Queen, 13-16 Marlborough Place, Brighton, BN1 1UB
Telephone: 01273 916888
Email: training@pagodasecurity.co.uk

What Personal Data We Collect & What We Do With It

When you book a course we will use your details to:

  • Deliver our contract to provide training to you;
  • Contact you with regard to any matter arising from your booking or attendance at our event;

If you book a certified or accredited course we may need to pass on your details to the accrediting/endorsing bodies so that they can check your eligibility and/or make arrangements for you to sit their exams.

From time to time an employer may request details of course attendance by their staff. We will disclose this information only where the employer has paid for the course or has allowed staff time off work for this purpose. In all other situations, we will seek your written consent.

What We Do & Our Legal Basis Under GDPR

Deliver our contract to provide training for you.

Article 6(1)(b) – this is necessary for the performance of our contract with you/your employer. Without it, we will not be able to process your booking.

Article 6(1)(f) – this is necessary for our legitimate interests.

Contact you with regard to any matter arising from your booking or attendance at our event e.g. dietary requirements, cancelled courses etc.

Article 6(1)(b) – this is necessary for the performance of our contract with you/your employer. Without it, we will not be able to process your booking.

Article 6(1)(f) – this is necessary for our legitimate interests. 

If you book a certificated or accredited course we may need to pass on your details to the accrediting/endorsing bodies (eg Highfield or IQ) so that they can check your eligibility and/or make arrangements for you to sit their exams.

Article 6(1)(b) – this is necessary for the performance of our contract with you/your employer. Without it, we will not be able to process your booking.

Article 6(1)(f) – this is also necessary for our legitimate interests.

Occasionally your employer may request details of your course attendance. We will disclose this information only where the employer has paid for the course or has allowed you time off work for this purpose. In all other situations, we will seek your written consent.

Article 6(1)(b) – this is necessary for the performance of our contract with you/your employer. Employers will only pay for the courses we have provided for you.

Article 6(1)(f) – this is also necessary for our legitimate interests. 

We do not disclose your booking/course data to any other parties without your written consent.

Where you require us to make Reasonable Adjustments to enable you to attend a course or sit an exam, we may require further information from you. If this includes information about your physical or mental health, such information (being sensitive personal data (Special Categories Data)), will only be used by us, with your explicit consent, to assess your eligibility for Reasonable Adjustments. We will not share or disclose it to others. The legal basis upon which we do this is set out in Article 9(2)(a) of GDPR (explicit consent). You can withdraw your consent at any time by contacting us. Please note that we may not be able to process your request for Reasonable Adjustments if you do this. 

How Long We Keep Your Personal Data

By law, we have to keep basic information about course attendees and their contact details for a minimum of 6 years for tax purposes.

Subject to any legal requirement, we will delete your information where you tell us that you will no longer be attending our courses in the future or six years after you last attended a course.

Third Parties

Pagoda Security Training Ltd will not sell, assign, disclose or rent your personal data to any other external organisation or individual.

Protecting Your Personal Data

We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

Protecting Your Personal Data

We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

Your Rights

You are in complete control. You can object or withdraw your consent to the use of your personal data at any time. Though in some cases we may not be able to provide your requested service (e.g. training course) where the information processing is an integral part of the service. We will tell you if this is likely to be the case.

Subject to some legal exceptions, you have the right to:

  • request a copy of the personal information Pagoda Security Training holds about you;
  • to have any inaccuracies corrected;
  • to have your personal data erased;
  • to place a restriction on our processing of your data;
  • to object to processing; and
  • to request your data to be ported (data portability).

To learn more about these rights please see the ICO website.

Please address any such requests to the Pagoda Security Training Ltd’s Data Protection Officer through the contact details listed above.

If you are dissatisfied with our response you can complain to the Information Commissioner’s Office
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113 (local rate) or 01625 545 745

Your Data Abroad

We do not transfer or process data outside the European Economic Area unless we have your specific consent or where the nature of the processing requires it (for example, because you have chosen to use an email or other communications service which routes data outside the EEA).