Heartbeat Training Ltd – Privacy Policy

Effective Date:

1st June 2026

Last Reviewed:

1st June 2027

1. Introduction

Heartbeat Training Ltd ("we", "us", "our") is committed to respecting and protecting the privacy of all individuals who engage with our training services. This privacy policy explains how we collect, use, disclose, and protect your personal data, and your rights in relation to that data, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and associated legislation.

2. Who We Are

Heartbeat Training Ltd delivers healthcare and workplace training services across the UK. For the purposes of data protection legislation, we are the Data Controller of your personal data.

Data Controller Contact Details:Alan RalfsEmail: alanhbt@gmail.comPhone:07971797462

3. How We Collect Your Data

We collect your personal data through:- Course registration forms (online or paper)- Communications via email, phone, or website- Certificates and feedback forms- Payments and invoicing- Interactions with our instructors or administration team

4. What Personal Data We Collect

We may collect the following categories of personal data:- Full name and title- Contact details (email address, phone number, postal address)- Date of birth (where required for certification)- Professional registration details (e.g. NMC, GMC)- Training records and certificates- Payment or invoicing information- Medical or access requirements (where relevant for training delivery)

5. Why We Process Your Data

We process your data to:- Register you for courses and manage your attendance- Provide training and issue certificates- Maintain records for CPD and audit purposes- Comply with accrediting body requirements (e.g. Resuscitation Council UK, Qualsafe Awards)- Communicate important course updates or relevant services- Maintain financial records and comply with legal obligations

6. Lawful Basis for Processing

We process your personal data using the following legal bases:- Contractual obligation: To deliver training services you have enrolled in- Legal obligation: To comply with regulatory or accrediting body requirements- Legitimate interest: To improve our services and manage operations- Consent: Where required (e.g. for marketing or optional health details)

7. Who We Share Your Data With

We may share your data with:- Accrediting organisations (e.g. Resuscitation Council UK, Qualsafe Awards)- Administrative and IT service providers (under GDPR-compliant agreements)- Legal or regulatory authorities, if required by law

We will never sell or rent your personal data to third parties.

8. How Long We Keep Your Data

Personal data will be retained only as long as necessary for the purpose for which it was collected:- Training records are kept for at least 5 years to support CPD and re-certification- Financial data is retained in accordance with HMRC requirements- After the retention period, data is securely deleted or anonymised

9. Your Rights

You have the following rights under the UK GDPR:- Right to access your personal data- Right to rectify inaccurate or incomplete data- Right to erasure (in certain circumstances)- Right to restrict or object to processing- Right to data portability- Right to withdraw consent (where consent is used)- Right to lodge a complaint with the ICO (www.ico.org.uk)

10. How We Protect Your Data

We use robust technical and organisational measures to ensure the security of your data, including:- Password-protected and encrypted storage- Staff access controls and training- Secure physical and digital records management- Regular audits and reviews of data protection practices

11. Data Breaches

In the unlikely event of a data breach, we will:- Assess the scope and severity- Report the breach to the ICO within 72 hours, if required- Notify affected individuals where appropriate- Take corrective action to prevent recurrence

12. Contact Us

For any concerns or questions about how your personal data is handled:

Data Controller: Alan RalfsEmail: admin@heartbeatmed.co.uk

You may also contact the Information Commissioner’s Office (ICO):Website: www.ico.org.ukHelpline: 0303 123 1113