Privacy Policy
Established in 1770, John Jarrold advertised his honourable intentions as a shopkeeper and assured customers of his “utmost assiduity to merit their encouragement”. These are values we hold strong today throughout our company including our views on your data and privacy protection.
Jarrold Training is part of Jarrold and Sons Ltd.
This privacy notice is to let you know how we process and manage your personal data. This includes: what you tell us about yourself, what we learn by having you as a valued customer and the choices about what marketing you would like us to send you. This notice explains how we do this and tells you about your privacy rights and the law that protects you.
This privacy notice covers you online, via email, written correspondence, phone and in person.
Our Privacy Promise
We promise:
- • To keep your data safe and private.
- • Not to sell your data
- • To give you ways to manage and review your marketing choices at any time.
Jarrold Training Online Account
Password Policy:
- • Length: 12 characters minimum, no maximum
- • Recommended: 3 words with punctuation and a number
- • Multi-Factor-Auth: Setup wherever possible
- • Change password immediately or as soon as possible
- • Contact us on 01603 677107 to reset the password or freeze the account
- • If we become aware of unusual login activity we will freeze the user account and make contact with owner of that account
Compromised Password Process:
Data Protection Law
As well as our Privacy Promise, your privacy is protected by the GDPR (General Data Protection Regulations). This law says we must have one or more reasons to process your data:
- • To fulfil a contract we have with you, or
- • When it is our legal duty, or
- • When it is in our legitimate interest, or
- • When you consent to it.
A legitimate interest is when we have a commercial reason to use your information, but this must not be unfair to you. If we rely solely on our legitimate interest, we will let you know.
| What we use your personal information for | Our reasons | Our legitimate interests |
|
• To manage our relationship with you. • To develop new ways to meet our customers’ needs and to grow our business. • To develop and carry out marketing activities. • To study how our customers use products and services from us. • To provide advice or guidance about our products and services |
• Your consent. • Fulfilling contracts. • Our legitimate interests. • Our legal duty. |
• Keeping our records up to date, working out which of our products and services may interest you and telling you about them. • Developing products and services. • Seeking your consent when we need it to contact you. • Being efficient about how we fulfil our legal duties. |
|
• To deliver our products and services. • To make and manage customer payments. |
• Fulfilling contracts. • Our legitimate interests. • Our legal duty. |
• Being efficient about how we fulfil our legal and contractual duties. • Complying with regulations that apply to us. |
|
• To detect, investigate, report, and seek to prevent financial crime. • To manage risk for us and our customers. • To obey laws and regulations that apply to us. • To respond to complaints and seek to resolve them. |
• Fulfilling contracts. • Our legitimate interests. • Our legal duty. |
• Developing and improving how we deal with financial crime, as well as doing our legal duties in this respect. • Complying with regulations that apply to us. • Being efficient about how we fulfil our legal and contractual duties. |
|
• To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance, and audit. |
• Fulfilling contracts. |
Groups of Personal Information
| Type of personal information | Description |
| Behavioural | Details about how you use our website. |
| Consents | Any permissions, consent or preferences that you give us. This includes how you want us to contact you. |
| Contact | Your billing and postal addresses and how we contact you. |
| Contractual | Details about the products or services we have provided to you. |
| Financial | We do not store any credit or debit card information as required under our PCI-DSS compliance. |
| Locational | Data we obtain about where you are, which may come from your internet service provider or mobile phone operator. |
| Technical | Details on the devices and technology you use. |
| Transactional | Previous purchase history whether online, via email or in person. |
| Usage Data | Other data about how you use our website. |
Where we collect personal information from
We collect data about you where you have supplied the information directly for example:
- • Register for our newsletter
- • Correspondence you send to us
- • Enquiries made online, via email, phone or in person.
- • Booking a course or purchasing a service
- • Any feedback
- • Dealing with a refund or customer complaint
We also collect data relating to behaviour, location, technical and usage data when you use our website to help us improve the service we offer through Cookies.
Who we share your personal information with
In order to support our business operations and administration of your booking(s) we may have to share your personal information with carefully selected organisations, such as:
Type of company and reasons to share this information:
| Type of company | Reasons to share this information |
| Awarding Bodies (e.g NEBOSH, ILM, IOSH etc) | To be able to register you for your accredited examinations. |
| Partners | To be able to deliver your course or service. |
| Postal Services | To be able to arrange the delivery and tracking of items sent through the post or a courier (eg certificate or course material) |
Sending data outside of the EEA
Any companies we use that process your personal data outside of the European Economic Area (EEA) will either be US-Privacy Shield compliant, an approved third country or where there are specific contractual clauses to manage data in compliance with the GDPR.
If you choose not to give personal information
We may need to collect personal information by law, or under the terms of a contract to supply goods and services.
If you choose not to give us this personal information, it may delay or prevent us from meeting our obligations. It may also mean we cannot supply the course or services you have requested from us and we would therefore have to cancel the booking.
Any data collection that is required, will be made clear at the point of booking.
Marketing
How long we keep your personal information
We will aim to limit the amount of personal data we hold in compliance with our internal Data Retention Policy and reduce the amount of data held the older your data becomes. We may keep your data for as long as is legally necessary, for example to support awarding bodies / funding requirements or to support our internal reporting purposes.
How to get a copy of your personal information
You can request a copy of your personal data by writing to us at the address below or emailing dsar@jarroldtraining.co.uk:
Data Subject Access Request
Jarrold Training
St James Mill
Whitefriars
Norwich
NR3 1SH
You will need to supply as much information as possible, so we can identify you e.g. a customer number, email or postal address. Additionally, if you would like to receive an electronic copy of your data, please also provide your email address.
We will aim to provide this information to you within one month of receipt.
Letting us know if your personal information is incorrect
You have the right to question any information we have about you that you think is wrong or incomplete. Please contact us if you want to do this and we will take reasonable steps to check its accuracy and correct it.
What if you want us to stop using your personal information?
You have the right to object to our use of your personal information, or to ask us to delete, remove, or stop using your personal information if there is no need for us to keep it. This is known as the ‘right to object’ and ‘right to erasure’, or the ‘right to be forgotten’.
There may be legal or other reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.
You can ask us to restrict the use of your personal information if:
- • It is not accurate.
- • It has been used unlawfully, but you don’t want us to delete it.
- • It is not relevant.
- • You have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it.
If you want to object to how we use your data, or ask us to delete it or restrict how we use it or, please contact us.
How to withdraw consent
You can withdraw your consent at any time. Please login to your online account or contact us.
How to complain
If you wish to complain about your rights as a data subject, please contact us in the first instance. If we cannot deal with your complaint you can escalate this to the Information Commissioner’s Office at https://ico.org.uk/concerns/.
Cookies
Our website uses Cookies, should you wish to block cookies you can do so via your browser settings. For more information on Cookies, please see https://www.jarroldtraining.co.uk/cookie-policy/. Please note, our site does not work correctly without Cookies.
Contact Us
Jarrold Training
St James Mill
Whitefriars
Norwich
NR3 1SH
01603 677107
enquiries@jarroldtraining.co.uk
Last updated, May 2018.