Privacy Policy
Introduction
HB Training is committed to protecting your personal information and respecting your privacy. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
By using our website (hbtraining.org) or providing us with your personal information, you agree to the practices described in this policy. We may update this page occasionally, so please check back to ensure you’re happy with any changes.
Information We Collect
2.1 Information You Provide
We may collect the following details when you book a course, make an enquiry, or interact with us:
- Name
- Email address
- Phone number
- Invoice and delivery addresses
- Business type
- Course booking details
- IP address (when using our website)
2.2 Payment Information
- Online payments are processed securely by our payment providers (e.g., Secure Trading, PayPal).
- We do not store or have access to your full card details.
- Card details provided over the phone are not recorded or stored.
2.3 Technical & Browsing Data
We collect anonymous information such as:
- Device type (e.g., mobile, tablet, desktop)
- Operating system and browser
- Pages visited and time spent on the site
This helps us improve website performance and user experience.
2.4 CCTV
CCTV is used at our premises for the safety and security of staff, learners, and visitors.
How We Use Your Data
We use your personal information to:
- Process and manage course bookings or orders
- Contact you about your booking
- Deliver services you have requested
- Send marketing communications (only if you have opted in)
- Improve our website and services
- Protect against fraud
- Comply with legal obligations
Marketing Communications
If you opt in, we may send updates by email or SMS. You can unsubscribe at any time.
Analytics & Advertising
We use browsing data to:
- Analyse website performance
- Improve user experience
- Display relevant adverts through Google and social media (remarketing)
You can manage Google ad settings through your Google account.
Sharing Your Data
We only share your information when necessary, including with:
- Courier and delivery partners
- Email and SMS service providers
- Payment processors
- Mailing companies
- Social media platforms (for targeted advertising, if opted in)
All third‑party providers must comply with UK data protection law. We never sell your personal information.
Legal Basis for Processing
We process your data under the following lawful bases:
- Contract: To provide the services you have requested
- Consent: For marketing communications
- Legitimate interests: To improve our services and prevent fraud
- Legal obligation: To meet UK regulatory requirements
Data Retention
- Browsing data: kept for 26 months
- Course and order information: retained as required for legal and financial purposes
- Marketing data: kept until you unsubscribe or request deletion
We only keep your information for as long as necessary.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request corrections to inaccurate information
- Request deletion of your data (in certain circumstances)
- Withdraw consent for marketing
- Object to certain types of processing
- Request data portability
To exercise any of these rights, please contact us.
Unsubscribing From Marketing
You can unsubscribe at any time by:
- Clicking the link in our emails or texts
- Contacting us directly
Contact Us
If you have questions about this policy or wish to make a data request, please contact us using the details on our website.