Privacy Policy

Who are we? 

Oak Tree Management & Training Ltd, the data controller of this website. We are a UK private  limited company with company number 3961023. 

We can be contacted by phone (+44(0)1284 763040 or email jane@oaktree-training.co.uk) 

This Privacy Policy sets out when and why we collect personal information, how we use it and how  we keep it secure. 

We may collect, use and store your personal data, as described in this Privacy Policy. We will also explain at the point of data capture how your personal information will be used. 

We will always comply with the General Data Protection Regulation (GDPR) when dealing with your personal data. Further details on the GDPR can be found at www.ico.gov.uk.

What data we collect and why

Type of data Purposes/use Legal basis of processing
Invoice payers’ name, address, telephone number, email address Processing your payment. This will be processed by Worldpay, our payment processor Performing our contract with our customers. For the purpose of our legitimate interests
Delegates’ name, address, telephone number, email address. On occasion date of birth Managing attendance on our training courses. For Awarding Body Registrations Performing our contract with our delegates. For the purpose of our legitimate interests
Photos and videos of delegates To use as a promotional tool on our website and on social media Consent. We will always ask your consent before taking and using photos.
Subscribers’ name and email address Sending email newsletters. Data will be processed by MailChimp, our chosen email marketing service provider Consent. We will seek consent and make it clear at the point of data capture (and under “Email newsletter” section in this policy) how your data will be used
Automatically collected data as outlined in “Visitor tracking” section Processed by Google Analytics to help us monitor usage of our website Consent. When you first visited our site, you were asked to consent to the use of cookies

Data Protection

  1. We will never transfer your personal data outside the EU without prior consent with the  exception of MailChimp and Google (see “Third parties” section) 
  2. We have taken a number of steps to protect your personal data from loss, misuse and unauthorised access. 
  3. For payments taken on our website, we use the secure, recognised online payment system  Worldpay. For more details see Worldpay website. 
  4. We will never sell your personal data. 
  5. We will not share your personal data with any third parties without your prior consent.  However, we may need to pass your personal data to third parties for the purpose of fulfilling services you have requested (for example passing your details to awarding bodies such as NEBOSH, ILM, HABC, CSkills, BSC, RTITB, ITSSAR, IPAF, PASMA, LANTRA in order for you to complete your qualification). 
  6. We will notify you promptly in the event of any breach of your personal data, see Data Breach  ‘your rights’ below.

Note: please be aware that we cannot guarantee that transferring information over the internet is always 100% secure. 

How long do we keep your data?

  1. We will hold your personal data for as long as you are an Oak Tree Management & Training  Ltd customer and for as long afterward as it is in our legitimate interest to do so. This will generally be for up to 5years. 
  2. We review collected personal data annually to establish whether we are still legally entitled to process and retain it. 
  3. We will never store payment information for orders processed on this website. If you choose to store your payment information in your website account, the details will be stored securely with Worldpay, our payment processor. 
  4. For payments completed via telephone, we will securely destroy your payment information as soon as we have used it to process your order. 

Visitor tracking

Like almost all websites, we use Google Analytics (GA) to track how you interact with our website. This helps us understand how people find and use our website, allowing us to make changes to improve usability and user experience. 

GA stores data such as your location, device, internet browser, and operating system. This does not enable us to identify you personally. 

Furthermore, GA record’s your device’s IP address. This could allow Google to personally identify you but we do not have access to this information. 

You can disable cookies on your internet browser to stop GA from tracking your usage of this site.  We consider Google to be a third party data processor. See “Third Parties” section below.

Email newsletter

This website enables you to sign up for our email newsletter. Any details you submit will be forwarded to our own Customer Relationship Management (CRM) system and also MailChimp (who we use for email marketing services). If you choose to sign up for our email newsletter, your personal details will not be stored in a database on our own website or on any of our internal computer systems. 

Your personal details will remain within MailChimp until you request removal from the newsletter. We provide unsubscribe links in every email newsletter that we send to you. You can also request that we remove you by contacting us. 

If you would like your personal details to be removed from our own CRM system, please contact us. We consider MailChimp to be a third party data processor. See “Third Parties” section below. 

Contact forms

If you choose to contact us using any enquiry forms on our website, none of the data that you enter will be stored by this website. 

External websites and social networks

Our website may contain links to external websites including social networking websites which are not affiliated with or controlled by us. These external websites may collect your personal data and also use cookies. Examples include Facebook, Twitter and LinkedIn. We are not responsible for these external websites including their security and privacy of any information they collect. Please review the privacy policies of each external website you visit. 

Additionally, our website may include social networking features such as Facebook and Twitter “Like” or “Share” widgets. Plus, you may be given the option to register or login to our website or related services using your social media accounts. If you choose this option, we may receive and store personal information from that service which will enable you to log in and other information that you may choose to share. 

If you don’t want your personal information shared between this website and your social media account, please do not connect your social account with this website.

Cookies

This site uses cookies to monitor and analyse how you interact with our website. Cookies are small text files which are downloaded to your device when you use our website. Cookies are then sent back to our website on each visit you make to our website, or to another website that recognises that cookie. 

Cookies are useful because they allow our website to recognise your device. This allows us to remember your preferences and tailor our website and other media to you. 

Server information

This website is hosted by SimpleClick within a UK data centre. 

All traffic handled by this website is encrypted and delivered over HTTPS. 

Third parties

We use third parties to provide services that are crucial to the management and growth of our business. These third parties process personal data on our behalf. 

Third Party Privacy Policy Other Notes
Google Google:

https://policies.google.com/p rivacy?hl=en&gl=uk

Google Analytics: https://support.google.com/analytics/answer/6004245?hl =en

 This third party is EU-U.S Privacy Shield compliant.
MailChimp https://mailchimp.com/legal/ privacy/ This third party is EU-U.S Privacy Shield compliant. https://www.privacyshield.gov/welcome

Data breaches

We will report any unlawful data breach of our own data or our third party’s data to all relevant people and authorities within 72 hours of the breach. 

Your Rights

Under GDPR, you have to right to:

  1. Request access to your personal data 
  2. To be provided with information about how your personal data is processed and used by us
  3. To have your personal details corrected 
  4. To have your personal data removed from our systems 
  5. In certain circumstances have your personal data transferred to another business if required
  6. 6. to object to how your personal data is processed 

You are able to complain to the Information Commissioner if you feel we have unlawfully processed  your personal data: https://ico.org.uk/concerns/

Updating your preferences

If at any time you would like to change how we are able to communicate with you please visit our preference centre which you will find a link to at the bottom of every marketing email we send to you.

Alternatively, you can contact us and we will be happy to discuss your current contact preferences and make any changes required. 

Changes

If legislation is updated, we decide to change Awarding Bodies, or third party services, this privacy policy may change.

It is not possible for us to notify all website users of all changes so we recommend that you occasionally check this page for updates.