MPTT Ltd is committed to protecting and respecting the privacy of all those who use our website and our services.
In line with the EU General Data Protection Regulations (GDPR) it is important to us that our website visitors and customers understand the personal data we collect and how it is processed and stored.
What personal data do we collect and why?
Information provided by you:
If you make an enquiry (via the website or by telephone) about attending one of our training courses we may ask for all, or some, of the following information; your name, email address, date of birth, telephone contact number, home address, scheme registration number and national insurance number. We ask for this information so that we can access and check your current accredited industry qualification status stored on the awarding bodies online system.
If you express an interest in our services at an exhibition, or by email or telephone, we will ask you for your name, position, company name & address, email, telephone number and website address. We ask for these details so that we can respond to your enquiry and add you to our mailing list so that we can share information about our training courses and related products/news via email and direct mail.
If you sign up to one of our courses you will complete a candidate contact form which will tell us your name, date of birth, CPCS registration number, company (if applicable), home address, landline & mobile, emergency contact, email address, gender and ethnicity. We use this information to ensure your health and safety during your training with us and to meet the identification requirements of our awarding bodies, for funding purposes and to eliminate fraud.
Depending on the course you attend you will be required to complete the appropriate forms to commence your training. In addition to the above data you may be asked for your levy number, CITB number, education and qualifications. The information is used to register you and meet the specifications of the accreditation authorities.
All of this personal data is collected from you, or your employer, with consent and/or is necessary for us to carry out our contract/agreement with you.
Employees, Suppliers and Industry Partners
We also collect data from our employees, suppliers and industry partners. This information is given with consent and used for communication and to make payments.
Information we collect from you:
If you agree to our cookie consent system when you visit our website we collect your IP user address and information about the pages you accessed and how long you stayed on these pages as part of our Google Analytics.
Google Analytics does not store, save or collect personal information and provides it to us in an anonymised format (general summary rather than individualised). We use this information to monitor and improve our website and service.
This information is held with your consent.
Occasionally we may collect your personal data to create a bespoke marketing database that we can use to contact companies/individuals that may be interested in our services.
Using LinkedIn, or similar source, we will identify prospective customers using carefully considered parameters. For example, businesses that are within a specific geographical location, work within the construction industry and conduct business that would benefit from plant training.
If we hold personal data for this reason we do so under legitimate interest.
How do we use your data?
The data we hold is used for the following purposes;
- To respond to enquiries
- To register and train candidates
- To meet the requirements of awarding bodies
- To market our business
- To remind about training expiration dates
- To take or make payments
- To track progress of qualifications
Where do we store your data?
Personal identifiable data can be stored on our CRM database, email system, Google calendar, our ‘Mailchimp’ account, our internal portal and on Xero (our accounting system).
All of these systems are hosted on our secure server which are password protected and only accessible by authorized personnel.
We also store hard copies of invoices for accounting purposes (these are held for 7 years) and Candidate records (which contain your name, registration number and date of birth). All hard copies are stored in locked filing cabinets accessible only by authorized personnel.
Do we share your information?
We only share your personal data occasionally with awarding bodies if we are audited and for quality control purposes unless required to do so by law.
How long do we keep hold of your data?
If you attended a course with us we will hold your data for differing periods depending on the type of training.
- For CPCS we will hold your data for 5 years
- For CSCS we will hold your data for 2 years
- For NOCN/CSKILLS Awards we will hold your data for 5 years
- For Proqual we will hold your data for 5 years.
We hold your data whilst your qualification is valid and to make re-qualification easier.
If you enquire about our services we will retain your data until you confirm our services. If you do not book through us we will destroy your details after one month.
When we no longer need to hold your data we will delete or destroy it.
Records will be held and annual data audits conducted to help us manage these retention periods.
How do we secure your information?
We take a proactive approach to user privacy and ensure, to the best of our knowledge, that the necessary security steps are taken.
Our website is maintained by an external provider and is hosted on a secure server and complies with all UK national laws and requirements for user privacy.
Anti-virus software and passwords are installed on all our administrative laptops and our CRM database is password protected and only available to staff that need to have access.
While we do take all applicable technical and organisational measures to safeguard your data it is impossible for us to secure the entire internet it is, therefore, your responsibility to acknowledge this and to understand that the personal details you give to us by your own choice across the internet are transferred at your own risk.
What about our social media platforms?
Our social media engagement is subject to the customs and privacy policies of each social media platform. Social media may have their own tracking cookies in place.
While we take great care to ensure the security and safety of our follower’s personal information it is up to the individual to use the platforms with due care and caution in regard to their own privacy and personal details.
MPTT Ltd will never ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as telephone or email.
If we use social sharing buttons which help share web content directly from web pages to the social media platform in question, users do so at their own discretion. By default, some social media platforms shorten lengthy URL’s (web addresses) so that they look like this; http://bit.ly/wkDTpk18. These shortened URL’s can be prone to spam and hacking. MPTT Ltd cannot take any liability for damages/implications caused by visiting any shortened links
What are your Data Protection Rights?
Data Request: You may request a copy of the personal data we hold for you free of charge. If you would like a copy of this information, please write to the business address at the bottom of this policy. We will respond to your request within 30 days providing you supply us with appropriate proof of identity.
Amending your data: You may also request to amend the details we hold by contacting us directly by email or using the address at the bottom of the policy.
Your right to be forgotten: We strive to ensure that our direct marketing or emailers/newsletters contain relevant and useful information to add value to your business however you will ALWAYS be able to unsubscribe. A clear and straightforward opt-out method is included on all of our communication with you so that you have an easy to follow route if you decide you no longer wish to be contacted by MPTT. Upon this request, your personal details will be deleted.
We will update this policy in response to legal, technical or business developments. It was last updated in May 2018.
Resources & Further Information
- Data Protection Act 1998
- Privacy and Electronic Communications Regulations 2003
- Privacy and Electronic Communications Regulations 2003 – The Guide
Midland Plant Training and Testing
Swan Works, Pelsall Road
Brownhills WS8 7DL
T: 01543 899706