Privacy Policy

Last Updated: 2nd November 2026

1. Introduction 

ExperTrain Limited ("ExperTrain", "we", "us" or "our") is committed to protecting the privacy and personal information of individuals who visit our website, enquire about our services, book training courses or participate in training delivered by us or our training partners.

This Privacy Policy explains what personal information we collect, how we use it, the circumstances in which we share it, how long we retain it and the rights individuals have under applicable data protection legislation.

ExperTrain Limited is a company registered in England and Wales (Company Number 15178884), with its registered office at 72 Perrycroft, Windsor, Berkshire, SL4 4HE.

ExperTrain acts as a data controller for personal information processed in connection with its own website, enquiries, customer relationships, marketing activities and training administration, except where a different arrangement applies.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, as amended, and other applicable data protection legislation.

This policy applies to our website at www.expertrain.co.uk and to personal information processed as part of our training services.

2. Information We Collect 

We collect and process personal information where necessary to operate our business, respond to enquiries, arrange and deliver training, maintain appropriate records and communicate with customers and prospective customers.

2.1 Personal and Contact Information

This may include:

- Full name and job title.
- Employer or organisation name.
- Business or personal email address.
- Telephone number.
- Postal or billing address.
- Information provided through website enquiry forms, emails or other correspondence.

2.2 Training and Delegate Information

Where individuals book or attend training courses, we may collect and process:

- Course bookings and attendance records.
- Employer and organisational details.
- Course prerequisites and relevant training history.
- Assessment results and achievement information.
- Certification and training completion records.
- Delegate feedback and course evaluations.
- Information required to administer externally accredited or assured training.

For courses delivered under the CITB Training Provider Network, additional information may be required in accordance with CITB's training standards and administrative requirements. This may include learner identification details, CITB registration information, attendance and achievement records.

2.3 Accessibility and Additional Learning Requirements

Where necessary to arrange reasonable adjustments or provide appropriate support, we may process information relating to a delegate's accessibility requirements, disability or additional learning needs.

Such information is treated as confidential and is only collected where relevant to the provision of training or assessment.

2.4 Website Usage Information

When visitors access our website, certain technical information may be collected, including:

- IP address and approximate location information.
- Browser type and operating system.
- Pages visited and time spent on the website.
- Referring websites and traffic sources.
- Website interaction and usage information.

2.5 Cookies and Analytics

Our website uses cookies and similar technologies for purposes such as website functionality, security, analytics and performance measurement.

Further information is available in our Cookie Policy.

2.6 Business and Marketing Information

We may hold professional contact information relating to existing customers and prospective business customers, including names, job titles, organisations, business email addresses and relevant business interests.

This information may be obtained directly from individuals, through existing business relationships or from third-party business information providers.

Where we obtain personal information from third parties, we take account of applicable data protection and electronic marketing requirements.

3. How We Use Your Information 

We use personal information for the purposes described below, relying on an appropriate lawful basis under the UK GDPR.

3.1 Responding to Enquiries

We use contact details and information provided by individuals to respond to enquiries, prepare quotations and provide information about our training services.

Depending on the circumstances, processing may be necessary to take steps before entering into a contract or for our legitimate interests in responding to business enquiries.

3.2 Course Bookings and Administration

We process relevant customer and delegate information to arrange course bookings, issue joining instructions, communicate course requirements, coordinate trainers, provide training services and maintain appropriate administrative records.

The lawful basis depends on the contractual arrangements and may include contractual necessity or our legitimate interests in administering training booked by employers for their staff.

3.3 Training Delivery and Certification

We use delegate information to support training delivery, maintain attendance records, record assessments and arrange certificates or confirmation of achievement.

Where training is delivered under an external accreditation or assurance scheme, additional information may be required to meet the relevant scheme requirements.

The applicable lawful basis is determined by the nature of the training and the requirements governing the processing.

3.4 CITB Assured Training

Where individuals attend training delivered under the CITB Training Provider Network, we process relevant delegate and employer information to administer training, verify eligibility and identification where required, maintain attendance and assessment records, and report achievements to CITB.

Relevant personal information may be submitted to CITB for inclusion in the Construction Training Register and for associated quality assurance and training administration purposes.

The applicable lawful basis for this processing is determined by the relevant contractual, legal and operational requirements.

Delegates are also provided with the applicable CITB Fair Processing Notice in accordance with CITB's requirements.

3.5 Delegate Feedback and Service Improvement

We collect and review feedback to evaluate training quality, identify improvements and maintain appropriate standards of service.

Where personal information is processed for these purposes, we generally rely on our legitimate interests in monitoring and improving our training services.

3.6 Business Communications and Marketing

We may use professional contact information to inform existing customers and prospective business customers about relevant training courses, services and business developments.

Such communications are undertaken in accordance with applicable data protection legislation and the Privacy and Electronic Communications Regulations (PECR).

Where permitted, we may rely on legitimate interests for relevant business-to-business marketing. Where consent is required, we will obtain it before sending the relevant communications.

Individuals may object to direct marketing at any time, including by using the unsubscribe facility provided in marketing emails or by contacting ExperTrain directly.

3.7 Website Analytics and Performance

We use website analytics and performance information to understand how visitors use our website, identify technical issues and improve its content and usability.

Where consent is required for non-essential cookies or similar technologies, these are used only in accordance with the visitor's cookie preferences.

3.8 Legal and Regulatory Obligations

We may process personal information where necessary to comply with applicable legal, regulatory, accounting or other statutory obligations.

4. How We Share Your Information 

ExperTrain Limited does not sell personal information to third parties.

We share personal information only where necessary for legitimate business purposes, training administration, service delivery or compliance with applicable legal and regulatory requirements.

Depending on the circumstances, recipients may include:

4.1 Freelance Trainers and Training Partners

We may share relevant delegate information with freelance trainers and training partners responsible for delivering booked courses.

This may include names, course details, attendance information, prerequisites and information necessary to arrange appropriate learning support.Only information reasonably necessary for the relevant purpose is shared.

4.2 Awarding Bodies and Accreditation Organisations

Where a course includes an external examination, assessment or certification, relevant information may be shared with the awarding body, examination provider or accreditation organisation responsible for administering the qualification.

4.3 Construction Industry Training Board (CITB)

For CITB Assured training, relevant delegate, employer, attendance and achievement information may be shared with CITB in accordance with the applicable Training Provider Network requirements.

This may include information needed for the Construction Training Register, training quality assurance and verification of achievements.

4.4 Technology and Business Service Providers

We use external service providers to support the operation of our business, including website hosting, email and communications, customer administration, accounting, training delivery, analytics and other business systems.

These providers may process personal information on our behalf under appropriate contractual and data protection arrangements.

4.5 Legal and Regulatory Requirements

We may disclose personal information where required by law, regulatory obligation or lawful request from a competent authority.

4.6 Business Transfers

In the event of a merger, acquisition or transfer of business assets, relevant personal information may be disclosed where lawful and necessary, subject to appropriate confidentiality and data protection safeguards.

We require recipients to handle personal information appropriately, having regard to their role and applicable data protection responsibilities.

5. Your Rights and Choices 

Under applicable UK data protection legislation, individuals have rights concerning the personal information held about them.

Depending on the circumstances, these may include:

- The right to access personal information.
- The right to request correction of inaccurate information.
- The right to request erasure of personal information.
- The right to restrict certain processing activities.
- The right to object to processing in certain circumstances.
- The right to data portability, where applicable.
- Rights relating to certain automated decision-making activities.

These rights are subject to applicable legal conditions and exemptions.

Where processing is based on consent, individuals may withdraw that consent at any time. Withdrawal does not affect processing already undertaken lawfully.

‍Right to Object to Direct Marketing

‍Individuals have the right to object at any time to the use of their personal information for direct marketing purposes.

Marketing communications can be stopped by using the unsubscribe option included in the relevant communication or by contacting ExperTrain at enquiries@expertrain.co.uk.

Further details about individual rights and how to exercise them are available in our Data Subject Rights Policy.

Individuals also have the right to raise concerns with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

6. Security, Data Retention and International Transfers

6.1 Information Security

ExperTrain Limited takes appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.

These measures include restricting access to personal information to authorised individuals, using appropriate security controls for business systems and requiring those handling personal data on our behalf to maintain suitable confidentiality and security arrangements.

ExperTrain holds Cyber Essentials certification and reviews its information security arrangements as appropriate.

While we take reasonable precautions to protect personal information, no electronic system or method of transmission can be guaranteed to be completely secure.

6.2 Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable training administration, certification, accounting, contractual and regulatory requirements.

Retention periods vary according to the type of information and the requirements governing its use.

When determining appropriate retention periods, we consider the purpose of processing, applicable legal and contractual requirements, relevant training scheme rules and the need to maintain accurate records of completed training.

Where information is no longer required, it is securely deleted, anonymised or otherwise disposed of in accordance with our data management arrangements.

6.3 International Data Transfers

Some of the external service providers and training partners used by ExperTrain may process or access personal information outside the United Kingdom.

Where personal information is transferred internationally, we apply the relevant requirements of UK data protection legislation, including appropriate transfer mechanisms and safeguards where required.

7. Changes to this Privacy Policy 

ExperTrain Limited reviews this Privacy Policy periodically and updates it where necessary to reflect changes in our business operations, information processing activities, legal requirements or relevant guidance.

The date of the most recent update is displayed at the top of this policy.Where material changes affect how personal information is collected or used, we will take appropriate steps to bring those changes to the attention of affected individuals, including providing additional information where required by law.

We encourage visitors to review this policy periodically.

8. Contact Us 

If you have any questions about this Privacy Policy, how ExperTrain processes personal information or how to exercise your data protection rights, please contact:

ExperTrain Limited
‍72 Perrycroft
Windsor
Berkshire
SL4 4HE

Email: enquiries@expertrain.co.uk
‍Telephone: 0800 841 1000
Website: www.expertrain.co.uk
‍Company Registration Number: 15178884
ExperTrain Limited is registered with the Information Commissioner's Office (ICO).

If you remain dissatisfied with how we have handled your personal information, you can raise a concern with the ICO:

Website: www.ico.org.uk
‍Telephone: 0303 123 1113

‍