Privacy Policy

ESO Education and Training (NW) Ltd ("ESO") is the data controller for the personal information described in this policy. We are registered in England and Wales, company number 12295396. Registered office: 23 Farnworth Street, Widnes, England, WA8 9LH.

ICO registration number: ZA718485

Data protection contact: Simon Owen, simonowen@esotrainingnw.co.uk, 0800 144 8458.

• Contact details: name, address, email address and phone number.
• Identity details needed for SIA and awarding body rules: date of birth, copies of identification documents, and photographs.
• Course records: bookings, attendance, assessment results, certificates and learner portal activity.
• Photographs and video recorded during training and assessment, where the awarding organisation or SIA requires it (we ask for your consent separately).
• Information about a disability or health condition, only if you tell us so we can arrange reasonable adjustments.
• Payment information: we do not store full card details. Payments are handled securely by our payment provider Stripe and, if you choose to pay in instalments, by Clearpay.
• Website data: see our Cookie Policy.

• To deliver the course you booked, register you with the awarding organisation and issue your certificate (contract).
• To meet awarding body, Ofqual and SIA requirements, including identity checks and keeping assessment records (legal obligation and legitimate interests).
• To arrange reasonable adjustments (explicit consent, or substantial public interest under the Data Protection Act 2018).
• To answer enquiries and deal with complaints and appeals (legitimate interests).
• To send you news about our courses, only if you have agreed (consent). You can opt out at any time.

• Laser Trident, our awarding organisation, to register you and issue certificates.
• The Security Industry Authority (SIA), where needed for licence-linked qualifications.
• Ofqual or other regulators, if they ask us to.
• Service providers who help us run the business, such as our website host, email provider, Microsoft 365 and our Moodle learner portal host. They may only use your data on our instructions.
• Your employer, only if they booked the course for you.

We never sell your personal information.

If a service provider stores data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract terms.

We keep learner and assessment records for 3 years after your course ends, in line with SIA and awarding body requirements. Training and assessment video is kept for a minimum of 1 year and a maximum of 3 years. Enquiries that do not lead to a booking are deleted after 12 months.

You have the right to access your data, have it corrected, have it erased, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email simonowen@esotrainingnw.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.