Privacy Policy

Last updated: October 2026

1. Who we are

ESO Education and Training (NW) Ltd (“ESO”) is the data controller for the personal information described in this policy. We are registered in England and Wales, company number 12295396. Registered office: 23 Farnworth Street, Widnes, England, WA8 9LH.

ICO registration number: ZA718485

Data protection contact: Simon Owen, simonowen@esotrainingnw.co.uk, 0800 144 8458.

2. The information we collect

Contact details: name, address, email address and phone number.
Identity details needed for SIA and awarding body rules: date of birth, copies of identification documents, and photographs.
Course records: bookings, attendance, assessment results, certificates and learner portal activity.
Photographs and video recorded during training and assessment, where the awarding organisation or SIA requires it (we ask for your consent separately).
Information about a disability or health condition, only if you tell us so we can arrange reasonable adjustments.
Payment information: we do not see or store your full card details. Card payments are processed securely by our payment provider Square. If you choose to pay in instalments, the instalment plan is provided by Clearpay, who will process your information under their own privacy notice.
Website data: see our Cookie Policy.

3. Why we use it and our lawful basis

To deliver the course you booked, register you with the awarding organisation and issue your certificate (contract).
To take payment for your booking through Square, or Clearpay if you choose it (contract).
To meet awarding body, Ofqual and SIA requirements, including identity checks and keeping assessment records (legal obligation and legitimate interests).
To arrange reasonable adjustments (explicit consent, or substantial public interest under the Data Protection Act 2018).
To answer enquiries and deal with complaints and appeals (legitimate interests).
To send you news about our courses, only if you have agreed (consent). You can opt out at any time.

Laser Trident, our awarding organisation, to register you and issue certificates.
The Security Industry Authority (SIA), where needed for licence-linked qualifications.
Ofqual or other regulators, if they ask us to.
Square, to process card payments, and Clearpay, if you choose to pay in instalments.
Service providers who help us run the business, such as our website host, email provider, Microsoft 365 and the host of our online learning site. They may only use your data on our instructions.
Your employer, only if they booked the course for you.

We never sell your personal information.

5. International transfers

If a service provider stores data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract terms.

6. How long we keep it

We keep learner and assessment records for 3 years after your course ends, in line with SIA and awarding body requirements. Training and assessment video is kept for a minimum of 1 year and a maximum of 3 years. Enquiries that do not lead to a booking are deleted after 12 months. We keep your contact details so we can send you SIA licence renewal reminders; you can ask us to stop at any time.

7. Your rights

You have the right to access your data, have it corrected, have it erased, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email simonowen@esotrainingnw.co.uk. We will reply within one month.

8. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.