// LEGAL

Privacy Policy

Last updated: 1 March 2027

1. Data Controller

Threshold Systems Training Ltd ("we", "us", "our") is the data controller responsible for your personal data. We are registered in England and Wales under company number 13492817. Our registered office is at 14 Churchill Way, Floor 2, Cardiff CF10 2DY, United Kingdom.

If you have questions about this policy or our data practices, contact us at enquiries@thresholdsystems.co.uk or call +44 29 2048 7361.

2. Data We Collect

We collect and process the following categories of personal data:

  • Contact information: name, email address, telephone number, company name, and job title, provided when you complete our consultation form, send us an email, or speak with us by telephone.
  • Enquiry details: the content of your message, your area of interest, and your preferred meeting type, as submitted through our website forms.
  • Billing information: invoicing address, purchase order numbers, and payment references required to process programme bookings. We do not store payment card details directly; card payments are processed by our payment service provider.
  • Programme participation data: attendance records, assessment results, and CPD certification details for participants enrolled in our training programmes.
  • Technical data: IP address, browser type and version, operating system, and referral source, collected automatically when you visit our website.
  • Cookie data: information stored by cookies and similar technologies as described in Section 7 below.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your consultation request and arrange meetings
  • To administer training programme bookings, including scheduling, invoicing, and issuing CPD certificates
  • To communicate with you about programme details, changes, or follow-up matters
  • To maintain our accounts and business records in compliance with legal and regulatory requirements
  • To analyse website usage and improve our services
  • To comply with our legal obligations under UK law

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases to process your personal data:

  • Contract: Processing necessary for the performance of a contract with you, or to take steps at your request prior to entering a contract (e.g., responding to your consultation request, administering your programme booking).
  • Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and maintaining our business records, provided these interests do not override your rights and freedoms.
  • Legal obligation: Processing necessary to comply with our legal obligations, such as tax and accounting requirements.
  • Consent: Where you have given your specific consent to the use of cookies or to receive marketing communications. You may withdraw consent at any time by contacting us.

5. Who We Share Your Data With

We may share your personal data with the following categories of recipients:

  • Our payment service provider for processing programme fees
  • Our accountants and legal advisers where necessary for professional advice and regulatory compliance
  • CPD accreditation bodies for issuing and verifying certification records
  • Government authorities, regulators, or law enforcement agencies where required by law

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. International Transfers

Your personal data is primarily stored and processed within the United Kingdom. Where it is necessary to transfer data outside the UK (for example, if our hosting or email provider processes data in another jurisdiction), we ensure that appropriate safeguards are in place. These safeguards include the use of Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office, or transfers to countries that have been granted an adequacy decision by the UK Secretary of State.

7. Cookies

Our website uses cookies — small text files placed on your device — to remember your preferences and understand how visitors use our site. We use the following types of cookies:

  • Strictly necessary cookies: Required for the website to function, such as remembering your cookie consent preference. These cannot be disabled.
  • Analytics cookies: Used to collect anonymous information about how visitors use our website, including which pages are visited most frequently and how visitors navigate between pages. This data helps us improve the site.

You can manage your cookie preferences using the cookie banner displayed when you first visit our site, or by adjusting your browser settings. Disabling non-essential cookies will not affect the core functionality of our website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Consultation enquiries: retained for 12 months from the date of your last communication with us, unless a programme booking follows.
  • Programme and billing records: retained for seven years from the end of the financial year in which the transaction occurred, in line with HMRC requirements.
  • CPD certification records: retained for ten years to support ongoing verification requests from participants and accreditation bodies.
  • Website analytics data: anonymised and retained for up to 26 months.

At the end of the applicable retention period, personal data is securely deleted or anonymised.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to erasure: You may request deletion of your personal data in certain circumstances.
  • Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
  • Right to data portability: You may request a machine-readable copy of data you have provided to us.
  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at enquiries@thresholdsystems.co.uk. We will respond to your request within one month, as required by law.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (TLS), access controls limiting data access to authorised personnel, regular security reviews of our systems, and secure disposal procedures for data that is no longer required. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to external websites that are not operated by us. We have no control over, and accept no responsibility for, the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policy of every site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our website following any changes constitutes acceptance of the updated policy.

13. Complaints

If you are dissatisfied with our handling of your personal data, we encourage you to contact us first so we can try to resolve the matter. You may reach us at enquiries@thresholdsystems.co.uk or by post at 14 Churchill Way, Floor 2, Cardiff CF10 2DY.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO). You can contact the ICO through their website at ico.org.uk, by telephone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.