Cookies and Privacy

This privacy notice tells you what to expect when WEBS Training Ltd collects personal information. It applies to information we collect about you.

WEBS Training Ltd is the “data controller” in respect of your personal information. This privacy notice sets out the basis on which any of your personal information we collect from you or that you provide to us will be processed.

Your privacy is important to us and we will keep your Personal Data secure in accordance with our legal responsibilities. We will take reasonable steps to safeguard your Personal Data against it being accessed unlawfully or maliciously by a third party.

Change in the Law

Until 24 May 2018, we shall process your personal data in accordance with the Data Protection Act 1998 (DPA). From 25 May 2018, we shall process your personal data in accordance with the General Data Protection Regulation (GDPR). This notice complies with requirements under both the DPA and the GDPR.

The principles of the Data Protection Act shall be applied to all data processed:

  • Processed fairly and lawfully
  • Obtained only for lawful purposes, and is not further used in any manner incompatible with those original purposes
  • Accurate and, where necessary, kept up to date,
  • Adequate, relevant and not excessive in relation to the purposes for which it is processed
  • Not kept for longer than is necessary for those purposes
  • Processed in accordance with the rights of data subjects under the DPA
  • Protected by appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage
  • Not transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection of the personal information

Changes to this Notice

Any updates will be made available to all WEBS visitors and can be accessed on the WEBS Training website at

Anything you are not clear about

If there is anything you are unclear about please contact our Data Protection Champion who can answer any queries you may have concerning this Notice, or the way in which we process your personal data. Our Data Protection Champion’s contact details can be found at the end of this Notice.

Please read the following carefully to understand our practices regarding your personal information and how it will be treated.


Our Purpose for Processing your Personal Information

In any contact, you may choose to voluntarily give us certain information which we may process. Examples of this and the purpose include:-
in response to an enquiry from you in relation to any information, products and services

  • to book you onto an open-day, event or an interview. If you have booked onto an event/open day/interview in the future, we may also use your details to tell you about any changes or cancellations to that event.
  • when you visit the company to meet a member of staff for the purpose of health & safety.
  • when you are applying for a training programme
  • when you are applying for a job
  • when you are hiring out rooms
  • for market research and surveys
  • general communication


Use of CCTV camera

When you visit WEBS premises you may inadvertently be recorded on CCTV. This is used for the purpose of staff and learner security and safeguarding. In exceptional cases recordings may be shown/passed to the Police in any unlawful situations. All recordings are automatically deleted after 3 months.


Lawful Basis for Processing your personal information

We will only process your personal information where we have a lawful requirement to do so. The lawful requirement will depend on the purposes for which we have collected and will use your personal information. In almost every case the lawful requirement will be one of the following (ref Article 6 of the GDPR):

  • Compliance with law: e.g. where we are subject to a legal obligation and need to use your personal information to comply with that obligation such as for health and safety purposes in the case of a building evacuation.
  • A Legitimate Interests: e.g. where it is necessary for us to understand our customers needs, promote our services and operate effectively in a way which does not unduly affect your privacy and other rights.
  • The Performance of a Contract or take steps to enter into a contract e.g. employment/training contracts.
  • To Protect the Vital Interests of a data subject or other person for example in the case of a safeguarding incident.
  • Consent: For example, where you have provided your consent to receive certain marketing from us.


WEBS Training Ltd will ensure any use of personal data is justified using at least one of the conditions for processing and this will be specifically documented. All staff that are responsible for processing personal data will be aware of the conditions for processing.


What personal information do we collect about you

We may collect and process the following personal information about you which you provide to us:

  • Name, job title
  • contact details (such as your home address, company name, email and telephone number);
  • responses to any customer satisfaction surveys


Website Visitors


Our websites use cookies; a cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.

Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes, by gathering and remembering information about your preferences.

When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it. For more information on cookies please go to

When visiting our website/social media platforms, personally identifying information like Internet Protocol (IP) addresses may from time to time be used to identify visitors. Statistics about the behaviour of visitors to the website may also be used.


Where we store your personal information

Dependent upon the reason for collecting and processing your data, storage may differ.

  • For general visitors to the building, data will be held on a tablet located at reception which will be deleted after 2 months.
  • For prospective new employers (or members of the public) who telephone or send an email enquiring about our services, an initial enquiry form will be kept manually and kept in locked storage.
  • In relation to the website and social media platforms, personal data is held in the EEA using different servers. Some personal data is held outside the EEA in the US using different platforms such as Google Drive and different social media solutions. Each provider is a signature to the EU/US Privacy Shield. Where data is held in countries outside the EEA, our Website Contractor ‘myCloud Media’ will always first check that the supplier has data compliance certification.

How long do we keep your personal information

WEBS Training Ltd will not retain personal information for longer than necessary and only for the purpose for which it was given. We will hold onto the information you provide either while a contract is in existence, or as needed to be able to provide the required service to you. This is done by following our data retention policy. After the retention deadline has passed the data will be deleted/securely destroyed. This includes electronic and hard copy data.


Security and performance

WEBS are committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use or disclosure. For example, we store the personal information you provide in computer servers with limited access that are located in controlled facilities. When we transmit sensitive information (such as address or date of birth) over the internet, we protect it through the use of encryption, such as the Secure Socket Layer (SSL) protocol. SSL is an industry standard to ensure internet messages are not intercepted.

Webs Training Ltd uses third party services to help maintain the security and performance of the WEBS Training networks and website. When contracting with 3rd parties we will work hard to ensure that the service provider is fully GDPR compliant.


Controlling your Personal Information

We will not sell, distribute or lease your personal information to third parties unless we have your express permission to do so or are required by law.

You may request details of personal information which we hold about you via a subject access request.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.


Data Disposal:

WEBS Training Ltd recognises that the secure disposal of redundant data is an integral element to compliance with legal requirements and an area of increased risk.

All data held in any form of media (paper, tape, electronic) shall only be passed to a disposal partner with demonstrable competence in providing secure disposal services. All data shall be destroyed or eradicated to agreed levels meeting recognised national standards.

Disposal of IT assets holding data shall be in compliance with ICO guidance:


Your Rights

You have certain rights in relation to your personal information. These include: the right to:-

  • be informed about the collection and use of data
  • withdraw consent to the processing of all or some of your information
  • request that information is erased,
  • request that information is corrected if it is incorrect
  • Receive a copy of your personal information.
  • data portability and in relation to automated decision making

For more information on your rights, please visit

We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions. If you wish to exercise any of these rights please contact us using the contact details below.

You may also have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. In the first instance, if you have such concerns we ask that you initially contact us (using the contact details below) so that we can investigate, and hopefully resolve, your concerns.

Where this has been explored and you feel you have not had a satisfactory response with regard to the processing of your data you can write to:-
Information Governance Department
Information Commissioner's Office
Wycliffe House
Water Lane


Subject Access

All individuals whose data is held by us, have a legal right to request access to such data or information about what is held, provided there is no undue burden and it does not compromise the privacy of other individuals. If you wish to make a Subject Access request, please complete the ‘Subject Access Request’ form here and return it to the Data Protection Champion at

Withdrawing Consent

Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will cease any further processing of your data and delete/securely destroy. Please complete the ‘Request to Withdraw Consent’ Form here or contact WEBS Training Ltd via the details below.

Contact Us

Questions and comments regarding this privacy notice should be sent to: marked for the attention of the Data Protection Champion, or you can write to The Data Protection Champion at WEBS Training Ltd, The Poplars, Wollaton Road, Beeston, Nottingham NG9 9PD.