Privacy Policy

1. About this policy

This Privacy Policy explains how Visualise Training and Consultancy Ltd collects, uses, stores and protects personal data, in compliance with the UK GDPR and the Data Protection Act 2018. It applies to data collected from clients, prospective clients, associates, suppliers and visitors to this website. If you are being referred for or undergoing an assessment, please also read our separate Privacy Notice, which is written specifically for you.

2. Information we collect

We may collect names, contact details and job titles; business or company information; financial and payment information; information about service requirements; the reason for a referral; limited information relevant to an assessment; and technical data such as your IP address when you visit our website. We collect this directly from you or, where lawful and necessary, from third parties such as a referring organisation.

3. Our lawful basis

We process personal data only where a lawful basis exists: your consent, performance of a contract, compliance with a legal obligation, or our legitimate interests. Where we process special category data, such as health information relevant to an assessment, an appropriate condition under Article 9 of the UK GDPR also applies, as set out in our Appropriate Policy Document.

4. How we use and share information

We use personal data to deliver our services, manage client and supplier relationships, respond to enquiries, meet our legal obligations and, where permitted, tell you about relevant services. We share data only where necessary and lawful: with associates and suppliers who support service delivery under written agreements, with IT service providers who maintain our systems, and with regulators where required by law. We never sell your personal data.

5. Cookies

Our website uses cookies, which are small files stored on your device. We use essential cookies that are necessary for the website to work, and, with your consent, analytics cookies that help us understand how visitors use the site so that we can improve it. When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time through the banner or through your browser settings. We do not use cookies to identify you personally or to sell your data.

6. How we keep your data safe, and how long we keep it

We protect personal data using multi-factor authentication, encryption in transit and at rest, least-privilege access controls, security monitoring and patching, and secure deletion. We keep personal data only for as long as necessary, in line with our Data Classification, Retention and Disposal Policy. Assessment-related information is deleted 30 days after the report is sent, unless a dispute or legal requirement means we must keep it a little longer.

7. Your rights

You have the right to be informed about how we use your data, to access the data we hold about you, and to ask us to correct it, erase it, restrict or object to its use, or provide it in a portable form. To exercise any of these rights, please contact our Data Protection Lead using the details below. All personal data is stored in secure UK-based Microsoft 365 data centres.

8. Contact and complaints

Data Protection Lead: Daniel Morgan-Williams
Visualise Training and Consultancy Ltd, 299 Lansdowne Road, Cardiff, CF5 1JR
Email: daniel@visualisetrainingandconsultancy.co.uk

If you have a concern about how we handle your data, please contact us first and we will do our best to help. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.