Privacy Policy
Website Privacy Policy
We are committed to safeguarding the privacy of our website visitors; in this policy we explain how we will treat your personal information. By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.
Collecting Personal Information
We may collect, store and use the following kinds of personal information:
(a) information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths). Google Analytics is used on our site and will collect this information, please read their privacy policy before using our site. We also use Castos to host our podcasts that are featured on our website. They will collect user information in the form of aggregated, anonymous statistics which they present to us in the form of a graph, please read their privacy policy before listening to any of our podcasts. We also use Vimeo to host our video content, such as webinars and collect analytics, please read their privacy policy before engaging with any video content;
(b) information that you provide to us when registering with our website (including your email address, name and contact details) and any details submitted through any forms on our website, including the checkout form, will be stored on our CRM database, Hubspot (please refer to their privacy policy), we will only use this information to contact you where your consent is also received;
(c) information that you provide when completing your profile on our website (including your name, profile pictures, gender, date of birth, relationship status, interests and hobbies, educational details and employment details);
(d) information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (including your name and email address);
(e) information that you provide to us when using the services on our website, or that is generated in the course of the use of those services (including the timing, frequency and pattern of service use);
(f) information relating to any purchases you make of our services or any other transactions that you enter into through our website (including your name, address, telephone number, email address, membership number, company registration number, CITB number) (Please refer to Stripe’s Privacy Policy in relation to card purchases made on our website and please refer to Google’s Privacy Policy for use of contact forms on website, as ReCAPTCHA is installed);
(g) information that you post to our website for publication on the internet (including your user name, your profile pictures and the content of your posts);
(h) information contained in or relating to any communication that you send to us or send through our website (including the communication content and metadata associated with the communication); and
(i) any other personal information that you choose to send to us.
Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.
Using Personal Information
Personal information submitted to us through our website will be used for the purposes specified in this policy, as specified in our Terms and Conditions or on the relevant pages of the website.
We may use your personal information to:
(a) administer our website and business;
(b) personalise our website for you;
(c) enable your use of the services available on our website;
(d) send you goods purchased through our website;
(e) supply to you services purchased through our website;
(f) send statements, invoices and payment reminders to you, and collect payments from you;
(g) send you non-marketing commercial communications;
(h) send you email notifications that you have specifically requested;
(i) send you our email newsletter, if you have requested it (you can inform us at any time if you no longer require the newsletter);
(j) send you marketing communications relating to our business or the businesses of carefully-selected third parties which we think may be of interest to you, by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications);
(k) provide third parties with statistical information about our users (but those third parties will not be able to identify any individual user from that information);
(l) deal with enquiries and complaints made by or about you relating to our website;
(m) keep our website secure and prevent fraud; and
(n) verify compliance with the terms and conditions governing the use of our website (including monitoring private messages sent through our website private messaging service).
If you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the licence you grant to us.
Your privacy settings can be used to limit the publication of your information on our website, and can be adjusted using privacy controls on the website.
We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.
Disclosing Personal Information
We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy.
We may disclose your personal information to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes set out in this policy.
We may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any ongoing or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(d) to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and
(e) to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
Except as provided in this policy, we will not provide your personal information to third parties.
International Data Transfers
Information that we collect may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this policy.
Personal data shall not be transferred to a country or territory outside the European Union unless that country or territory ensures an adequate level of protection for the ‘rights and freedoms’ of data subjects in relation to the processing of personal data.
The transfer of personal data outside of the EU is prohibited unless one or more of the specified safeguards or exceptions apply;
- Binding corporate rules
- Model contract clauses in place
Personal information that you publish on our website or submit for publication on our website may be available, via the internet, around the world. We cannot prevent the use or misuse of such information by others.
You expressly agree to the transfers of personal information described in this Section 6.
Retaining Personal Information
This Section 7 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.
Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
Notwithstanding the other provisions of this Section 7, we will retain documents (including electronic documents) containing personal data:
(a) to the extent that we are required to do so by law;
(b) if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
Security of Personal Information
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We will store all the personal information you provide on secure (password- and firewall-protected) servers hosted by Siteground and internally on our secure (password- and firewall-protected) servers.
Amendments
We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.
Your Rights
You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to:
- the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address).
We may withhold personal information that you request to the extent permitted by law.
You may instruct us at any time not to process your personal information for marketing purposes.
In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.
Third Party Websites
Our website includes hyperlinks to, and details of, third party websites.
We have no control over, and are not responsible for, the privacy policies and practices of third parties.
Updating Information
Please let us know if the personal information that we hold about you needs to be corrected or updated.
Our Details
This website is owned and operated by Construction Health & Safety Group.
Our principal place of business is at John Ryder Training Centre, St Ann’s Road, Chertsey KT16 9DG
You can contact us:
(a) by post, using the postal address; John Ryder Training Centre, St Ann’s Road, Chertsey KT16 9DG
(b) using our website contact form; https://www.chsg.co.uk
(c) by telephone, on; 01932 561871 or
(d) by email, using info@chsg.co.uk.
General CHSG Privacy Policy to Cover Offline Practices
Management System Policy
DOCUMENT REF: MS-P-GDP ISSUE NO: 1 ISSUE DATE: Sept 2018 APPROVED BY: SM TITLE: CHSG Privacy Policy
The Construction Health and Safety Group, a registered charity, provides accredited health safety training to the construction industry from premises at the John Ryder Training Centre, St Ann’s Road, Chertsey, Surrey KT 16 9DG.
This privacy notice provides information about the personal information we process as a data controller when providing training for courses CHSG accredits, in compliance with the General Data Protection Regulation (GDPR).
Our ICO registration number is Z6032900.
What Personal Data do We Process?
The personal data we process includes:
Names
Contact details
Date of birth
NI numbers
Exam results.
Why do CHSG Process Personal Data and What is the Legal Basis for Doing so?
We process the personal data of course delegates because it is in our legitimate interest to do so as a training provider. Without this information we would not be able to provide the requested training and certification and also alert individual when refresher training is required.
Where do we Collect the Personal Data From and Whom do we Share Personal Data With?
We collect personal data from individuals mostly. Occasionally we may collect names and email addresses from their employers.
Personal data is shared internally and externally strictly on a need to know basis.
Delegates’ personal information is shared with tutors since it is in our legitimate interest to do so in order to provide training and certification.
Contact details may be shared with others on the same course with consent.
Attendance records and examination results are provided to us by tutors, and may be shared with delegates’ employers where they have arranged and paid for the training course. They have a legitimate interest in having this information.
We may also share personal data with IT and other office support providers, pursuant to GDPR compliant contracts, because it is in our legitimate interest to do so in order to run our Training Centre. Our contractors are subject to a duty of confidentiality.
How Long Does CHSG Keep Personal Data for?
We generally keep personal data for six and a half years. Very occasionally it may be necessary to keep personal data for longer.
Your Rights
We are committed to protecting your rights to privacy. They include:
Right to be informed about what we do with your personal data
Right to have a copy of all the personal information we process about you
Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete
Right to be forgotten and your personal data destroyed
Right to restrict or “block” the processing of your personal data
Right to object to the processing we carry out based on our legitimate interest.
Information Commissioner’s Office
If you have questions about your personal data please contact our data protection lead, Sera Martorana, at admin@chsg.co.uk.
You may also contact the Information Commissioner’s Office on 0303 123 1
