Privacy Policy

1. Who We Are

Luton Gas Training is a community information hub dedicated to gas engineering qualifications and career development in the Luton region.

Data Controller: Luton Gas Training
Contact Email: info@luton.gasengineertraining.uk
Website: luton.gasengineertraining.uk

We recommend that you check whether we are registered with the UK Information Commissioner's Office (ICO) at ico.org.uk for data controller registration.

2. What Information We Collect

Information you provide directly:

• Your name and email address
• Your phone number (when you contact us)
• Your training interests and preferences
• Any other information you voluntarily submit via contact forms, waitlist signups, or newsletter signups

Information collected automatically:

• Your IP address
• Browser type and version
• Device type and operating system
• Pages you visit on the Site
• Time spent on each page
• Your referring website or source of traffic
• Cookie and tracking data

What we do NOT collect:

• Payment or financial information
• Special category data (health information, ethnicity, religion, etc.)
• Data from children under 16 — intentionally

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries: When you contact us via forms or email, we use your details to respond with relevant information
• To match you with training: To identify and communicate opportunities that match your stated training interests
• To send marketing communications: Only if you have given us explicit consent. This includes newsletters, course updates, and event information
• To improve the Site: To understand how visitors interact with our pages, identify issues, and enhance user experience
• To comply with legal obligations: Such as tax, regulatory, or law enforcement requests
• For website security and fraud prevention: To protect the Site and its users

Legal basis for processing:

• Consent: For marketing communications and optional contact form submissions
• Legitimate Interest: For website analytics, security, and improving our services
• Legal Obligation: Where required by UK data protection law or regulatory requirements

4. How We Store and Protect Your Data

Data Security: We use industry-standard security measures to protect your personal data, including encryption where appropriate and secure hosting.

Storage Location: Your data is stored within the UK and EEA where possible. Some processing may occur via cloud-based services located within the UK/EEA.

Data Retention Periods:

• Contact form enquiries: Retained for 2 years from your last contact or interaction
• Newsletter subscribers: Retained for the duration of your subscription, plus 6 months after unsubscribe
• Website analytics: Retained for 26 months on a rolling basis
• Form submissions via webhook: Stored securely in our backend system; retention period depends on the form type and your communication preferences

5. Who We Share Your Data With

We do NOT sell your personal data to third parties for any purpose.

We may share your data with:

• Website hosting and infrastructure providers: To keep the Site running securely
• Email service providers: To send you newsletters and responses to enquiries (only if you have opted in)
• Analytics tools: To understand Site usage (anonymised data only)
• Training providers: Only if you have specifically asked us to share your details to match you with training opportunities, and only with your explicit consent
• Law enforcement or regulatory authorities: When legally required to do so

All third parties are contractually required to protect your data in accordance with UK GDPR and applicable data protection laws.

6. Cookies and Tracking

This Site uses cookies and similar tracking technologies to enhance your experience, measure usage, and personalise content.

Cookies are small files stored on your device that help us remember your preferences and understand how you use the Site. You can control cookie settings through your browser settings.

We comply with the Privacy and Electronic Communications Regulations (PECR) and always obtain your consent before sending marketing communications via email or SMS.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you (Subject Access Request)
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can request that we delete your data ("right to be forgotten") in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to specific types of processing, including marketing communications
• Right to withdraw consent: If we are processing your data based on consent, you can withdraw this at any time
• Right to lodge a complaint: You can report concerns to the Information Commissioner's Office (ICO) at ico.org.uk

How to exercise these rights: Email info@luton.gasengineertraining.uk with details of your request. We will respond within one calendar month (or up to three months for complex requests).

8. Marketing Communications

We only send marketing communications (newsletters, course updates, event announcements) to people who have given us explicit consent.

How to manage your preferences:

• Every marketing email includes an unsubscribe link. Click it to remove yourself from our mailing list
• You can withdraw consent at any time by emailing info@luton.gasengineertraining.uk
• We will action unsubscribe requests within 48 hours

9. Third-Party Links

This Site contains links to external websites operated by training providers, employers, regulatory bodies, and other third parties.

We are not responsible for:

• The content, accuracy, or completeness of external sites
• The privacy practices or security measures of third-party sites
• Your interactions or data sharing with third parties

We recommend reviewing the privacy policy and terms of any external site before submitting your personal information.

10. Children's Privacy

This Site is not directed at children under 16 years old.

We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will delete it promptly and may contact you to confirm.

If you are under 16, please ask your parent or legal guardian for permission before using this Site or submitting any information.

11. International Data Transfers

We primarily process your data within the UK. Data is stored and processed in accordance with UK GDPR.

If your data needs to be transferred outside the UK (which is rare), we ensure adequate safeguards are in place, including:

• UK adequacy decisions (where applicable)
• Standard Contractual Clauses (SCCs)
• Your explicit consent (where required by law)

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make significant changes, we will:

• Post the updated policy on this page with a new "Last Updated" date
• Make reasonable efforts to notify you of material changes via email or a prominent Site notice

Your continued use of the Site following any updates constitutes your acceptance of the updated Privacy Policy.

13. How to Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact:

Luton Gas Training
Email: info@luton.gasengineertraining.uk
Website: luton.gasengineertraining.uk

To report a data protection concern to the regulator:
Information Commissioner's Office (ICO)
ico.org.uk