Privacy Policy

1. Who We Are

FASTcompliance ("we", "us", "our") is a QNUK Accredited training provider delivering accredited first aid, safety, and compliance training to businesses and organisations across the United Kingdom.

We are the data controller for personal data collected through this website and in the course of delivering our training services. Our contact details are set out at the end of this policy.

2. What Data We Collect

We collect personal data in the following circumstances:

2.1 Enquiries and quote requests

When you submit an enquiry or request a quote through our website, we collect:

• Your name and job title
• Your company name and address
• Your email address and telephone number
• Information about the training you require, including the number of delegates and preferred dates
• Any additional information you choose to provide in free-text fields

2.2 Delegate information for booked courses

When a course is booked and confirmed, we collect delegate information required to issue accredited QNUK certificates. This includes:

• Full name and date of birth of each delegate
• Any relevant medical information declared by the delegate that may affect their participation
• Assessment results and pass/fail status
• Contact details for certificate delivery

2.3 Certificate renewal reminders

If you have opted in to our certificate renewal reminder service, we retain delegate names, certificate expiry dates, and contact information in order to notify you in advance of upcoming renewals.

2.4 Website usage data

We collect standard website analytics data, which may include your IP address, browser type, pages visited, time spent on the site, and the source of your visit. This data is collected in aggregate and is not used to identify individuals.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries and provide quotations for training services
• To arrange, schedule, and deliver training courses at your premises
• To issue QNUK Accredited certificates to delegates who successfully complete a course
• To register delegate results with QNUK as required by our accreditation agreement
• To send certificate renewal reminders where you have requested this service
• To maintain accurate training records that you may require for audit or compliance purposes
• To invoice for training services rendered
• To comply with our legal obligations, including health and safety record-keeping requirements

4. Legal Basis for Processing

We process your personal data under the following lawful bases as defined by UK GDPR Article 6:

• Contract — processing is necessary to fulfil the training contract between us and your organisation, or to take steps at your request prior to entering into a contract.
• Legitimate interests — where we have a legitimate business interest in processing your data that is not overridden by your rights. This includes responding to enquiries, maintaining training records, and sending renewal reminders to existing clients.
• Legal obligation — where processing is necessary to comply with a legal obligation, including our obligations under health and safety legislation and our accreditation requirements with QNUK.
• Consent — where you have given us specific consent, for example to receive marketing communications. You may withdraw consent at any time.

5. Who We Share Your Data With

We do not sell, rent, or trade personal data. We may share your data with the following parties in limited circumstances:

• QNUK — as our awarding body, QNUK requires delegate data (name, date of birth, assessment results) to issue and register certificates. QNUK is a data controller in its own right for the purposes of certificate registration.
• IT and software providers — we use third-party software to manage bookings, scheduling, and communications. These providers act as data processors on our behalf and are subject to data processing agreements.
• Accountants and financial advisors — limited financial data may be shared for invoicing and accounting purposes.
• Legal and regulatory authorities — where we are required to do so by law, court order, or at the request of a regulator.

We do not transfer personal data outside the United Kingdom or European Economic Area.

6. How Long We Keep Your Data

We retain personal data for no longer than is necessary for the purposes for which it was collected:

• Enquiries that did not result in a booking — 12 months from the date of the enquiry.
• Delegate training records and certificates — 7 years from the date of the course, in line with standard business record-keeping practice and the validity period of qualifications.
• Invoice and financial records — 7 years in accordance with HMRC requirements.
• Certificate renewal reminders — until you ask us to remove you from the reminder service, or until we are no longer in contact with your organisation.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate personal data.
• Right to erasure — in certain circumstances you may ask us to delete your personal data.
• Right to restriction — you may ask us to restrict the processing of your personal data in certain circumstances.
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request your data in a portable format.
• Right to object — you may object to processing based on legitimate interests at any time.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month. You will not be charged for making a request.

If you are dissatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk (opens in a new tab) or by calling 0303 123 1113.

8. Cookies

Our website uses cookies to support basic functionality and to collect anonymous usage analytics. We do not use cookies to track individuals across other websites, and we do not use advertising or targeting cookies.

You may configure your browser to refuse cookies. Doing so may affect certain functions of the site, but will not prevent you from making an enquiry.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. Our website is served over HTTPS. Where data is transmitted to third parties such as QNUK, appropriate security measures are applied.

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on this page. Where changes are material, we will take reasonable steps to notify you.