Privacy notice

Draft for review — check with your data protection lead before publishing.

Who we are

BERMAD UK Limited (“BERMAD UK”, “we”) runs this training site and is the controller of the personal data collected through it. Contact: sales.uk@bermad.com.

What we collect

• Account holders: name, work email, organisation, job title, phone number, and a password (stored as a one-way hash).
• Delegates: name, work email, organisation, job title, and any dietary or access needs you choose to tell us.
• Records of bookings, attendance and assessment outcomes.
• Email delivery information: whether our emails were delivered, opened or clicked.

Why we use it, and our lawful basis

• To run courses you or your employer book: taking bookings, managing places, sending joining instructions and keeping training records. Basis: legitimate interests (and contract, where we provide training to your employer).
• Dietary and access needs: only to make arrangements for the session. These may be health information, so we only use them with your agreement and delete them after the course.
• To tell you about future BERMAD UK courses. Basis: legitimate interests for business contacts, and you can opt out at any time using the link in every email.

Who we share it with

Our email provider (Amazon Web Services, which hosts this site and sends our emails), and the trainer and venue for the session you attend. If your employer booked your place, they can see the booking status. We don’t sell your data.

How long we keep it

Training records are kept for six years after the course so we can confirm attendance if asked. Dietary and access notes are removed after the session. Marketing contacts are reviewed every two years.

Your rights

You can ask to see, correct or delete your data, object to how we use it, or stop marketing emails. Email sales.uk@bermad.com. You can also complain to the Information Commissioner’s Office (ico.org.uk).