Introduction

The term "UK Construction Training Services” or "us", "we", “our” and “ours” refers to the owner of the website.  The term "you" refers to the user or viewer of our website. If you purchase any goods or services mentioned on this website, this Privacy Notice should be read in conjunction with our Terms and Conditions, which are detailed separately on this website or are available upon request.

The European Union General Data Protection Regulation (EU GDPR) replaces the UK Data Protection Act 1998 and EU Directive 95/46/EC.  Providing a coherent and thorough personal data privacy law across EU member states, GDPR aims to prevent security breaches and loss of Personally Identifiable Information (PII) by organisations that hold or process such data.

Based on the founding principles of these regulations, our Privacy Notice describes how we collect, use, share, retain and safeguard your PII, whilst also informing you of your rights.

 

Important Definitions

A data ‘controller’ means the individual or organisation which, alone or jointly with others, determines the purposes and means of the processing of PII.  We are the controller in this instance and there is no joint control.

A data ‘processor’ means the individual or organisation which processes PII on behalf of the controller. 

 

Your Rights

Individuals are provided with legal rights governing the use of their PII. These grant individuals the right to understand what PII relating to them is held, for what purpose, how it is collected and used, with whom it is shared, where it is located, to object to its processing, to have the information corrected if inaccurate, to take copies of it and to place restrictions on its processing. Individuals can also request the deletion of their PII.  These individual rights are listed below:

• The right to be informed about the PII being processed;
• The right of access to your PII;
• The right to object to the processing of your PII;
• The right to restrict the processing of your PII;
• The right to rectification of your PII, if it is incorrect;
• The right to erasure of your PII;
• The right to data portability (to receive an electronic copy of your PII, only);

 

Exercising Your Rights

Individuals can exercise their Individual Rights at any time. Although we do not currently anticipate it to be the case, you should understand that there may be extenuating circumstances where we are unable to fully meet your request.  However, where this situation occurs, we will establish open lines of consistent communication within the appropriate timeframe, as stipulated within the regulation.

As mandated by law we will not charge a fee to process these requests, however if your request is considered to be repetitive, wholly unfounded and/or excessive, we are entitled to charge a reasonable administration fee.

If you have questions or if you wish to exercise either of these rights, the regulations require you to submit a Subject Access Request (SAR) to our Data Protection Representative (DPR) at DPR@ukcss.org. 

 

Concerning Your Right to Object

Our Terms and Conditions stipulate that we aim to process your PII within a certain time frame pertinent to Single and Group bookings, meaning that processing may be completed any time before.  Please be aware, that the receipt of Confirmation of your test date, time and location, is not indicative of the exact date and time the test was booked and paid for by us.  You have the right to object to further processing, however, if our administrative team have already processed the request to book your test and you have not yet received your confirmation, you will incur the administrative charge stipulated for processing and you will not receive your confirmation, as you will have objected to further processing of your information. 

 

What Is Personally Identifiable Information?

This is the personal data, or information relating to an identified or identifiable natural person.  Examples include an individual’s name, age, address, date of birth, their gender and contact details.

PII may contain information which is known as special category data (previously referred to as sensitive information). This may be information relating to an individual’s health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, or sexual orientation.

 

PII We Collect

For us to deliver our goods and services we require the following information:

• Name
• Address
• Date of Birth
• National Insurance Number (optional)
• Telephone number
• E-mail address
• IP Address (your unique online electronic identifier)
• Unique identifier numbers allocated by the Construction Industry Training Board (CITB).

We collect one type of special category data, asking you to confirm whether you have a disability that would hinder you from either gaining access to the test centre or taking the test.  Details are not required, and you are required to select either a ‘yes’ or ‘no’, with this in mind. 

 

Use of Cookies

To facilitate optimal use of our website, we use a temporary " session " cookie which disappears when your browser session ends. In addition, we use Google Analytics cookies, a popular independent measurement and research service provided by Google Inc. to gather non-personal data regarding the number and frequency of visitors to our site and to see how they move around our site when they are using it. Further information regarding Google Analytics privacy statement can be found at www.google.com/privacy. If you do not wish us to use cookies in your web browser you can normally modify your browser to decline or prevent cookies. For information on deleting or controlling cookies please refer to your file management software or go to www.AboutCookies.org. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site.

 

PII You Submit But We Do Not Process

Bank details.  Once you have confirmed you would like to purchase our services, you are directed to our WorldPay Merchant Services web page to key in your bank details and billing address.  We do not receive or store or ever see these details on our WorldPay customer page.

The Worldpay privacy statement can be accessed here: https://secure.worldpay.com/global3/brands/worldpay/payment/default/help_security_en.html

 

Why Do We Need Your PII?

In purchasing our products and services you should understand that you are forming a contract with us, as stipulated in our Terms and Conditions, which you must also accept.  It is in our legitimate interest to collect your PII so that we can deliver the goods and services you have requested from us.

We share your information with NCS Pearson, Inc. in order to fulfil the terms of our contract.  Their privacy statement can be accessed here: https://home.pearsonvue.com/Legal/Privacy-and-cookies-policy.aspx#information-policy-relating-to-test-center-applications

We will never share your PII with any other individuals or organisations anywhere in the world. 

We do not use your information to conduct any marketing, nor do we therefore use it to conduct any profiling, which is an automated method of processing PII to evaluate certain aspects of an individual.

 

How Long Do We Store Your PII?

Our Retention Policy.  We have no legal basis to retain your PII after we have concluded the terms of our agreed contract.  However, we have identified an administrative reason to retain your information (administrative retention), which we have set at 6 months in case of other future business needs.  Therefore, information that exceeds this lifetime is automatically deleted from our database and manually deleted from our e-mail correspondence files.

 

Where Is Your Data Stored and Who Stores it?

Your data is stored on a database, associated with our website.  It is held on an encrypted server, operated by Exascale Limited, who hold your data in accordance with our written controller-processor agreement, the main aspects of which, stipulate that they are to hold your data, ensure that it is backed-up and that they do not access or share it.  Acting as the processor, they are not to step outside of their remit, as agreed in our contract.

 

Disclaimers

• The content of the pages of this website is for your general information and use only. It is subject to change without notice.
• Neither we nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials found or offered on this website for any particular purpose. You acknowledge that such information and materials may contain inaccuracies or errors and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.

• Your use of any information or materials on this website is entirely at your own risk, for which we shall not be liable. It shall be your own responsibility to ensure that any products, services or information available through this website meet your specific requirements.
• You may use our site only for lawful purposes. Unauthorised use of this website may give rise to a claim for damages and/or be a criminal offence. Unauthorised use includes but is not restricted to knowingly introducing viruses or other technologically harmful material, attempting to gain unauthorised access such as by hacking or by attacking the website including denial of service attacks.
• We will not be liable for any loss or damage if for any reason this website is unavailable or suspended for whatever reason including as a result of technical problems.
• We cannot provide any warranty or guarantee that our website is free of viruses or any other technically harmful material.