Privacy Policy

What is personal data?

Personal data is any information relating directly or indirectly to a living individual. This information includes things such as a name, an identification number, location data, online identifier or factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

What personal data do we process?
We only collect personal data for specific, clear and legitimate purposes and we will not process it for purposes that differ from those we have notified you about. We will limit our use of your personal data to what is needed, relevant to, and necessary for the purposes we have identified. Access to your personal data is given only to those who need to process it for the purposes identified. We will ensure that we keep your personal data accurate and up to date and will not store it for longer than is necessary.

The types of personal data we collect include (but are not limited to):

• Name
• Address
• Phone number(s)
• Email address(es)
• Other identifiers (for example, social media usernames)
• Medical/health
• Behavioural
• Criminal offence/conviction
• Images
• Location data
• Disability information
• Profiling information
• and other information, such as next of kin and copies of ID documentation.

We collect this information directly from you. For example, when you:

• Interact with our website and social media platforms
• Become a customer/ participant
• Make an enquiry through our website(s)
• Participate in surveys
• Purchase services or products from us
• Raise a complaint or request
• Participate in our courses

Why do we process personal data?

Our processing of your personal data is necessary for us to provide services to you, maintain our relationship with you and to fulfil our legal obligations. We use personal data for the following reasons:

• Attendance registers at our courses
• Follow-up support from our courses
• Opportunities we find available to you specifically
• To support you in the starting/ growing of your business
• Providing community services
• Health, safety and well-being
• Managing enquiries
• Managing our suppliers and contractors
• Improving customer experience
• The management and governance of our businesses
• Fulfilling our legal obligations

How do we process your personal data?

The GDPR gives companies several lawful reasons to collect and process personal data.
Below are the lawful reasons we rely upon and the types of processing activities that relate to each:

Performance of a Contract: In some circumstances, it is necessary to process your personal data in order to fulfil our contractual obligations with you. Without this information, we would not be able to provide a service to you. For example:

• Registering you for our course(s)
• Providing you with content during the course period (10 weeks before the course, the live course, and 12 weeks after the course)
• Providing you with opportunities to grow your business

Legal Obligation: In some circumstances, it is necessary to process your personal data so we can comply with our legal obligations. Without this information, we would not be able to fulfil our legal obligations to you, the authorities, or regulatory and statutory bodies. For example:

• Supplier/subcontractor compliance
• Preparation of legal matters
• Administering public liability claims
• Providing support to and protection of customers, for example, administering safeguarding procedures

Legitimate Interest: There are situations where processing your personal data is necessary to pursue our legitimate interests as a business. We must balance our interests as a business with yours as an individual, so that our legitimate interests do not override your interests, rights or freedoms. For example:

• Conducting surveys and reports, including customer feedback surveys and quality assurance
• Administering customer accounts and properties
• Providing customer support, for example, texting customers about course changes and cancellations
• Receiving and recording enquiries from the public, customers, suppliers and administration
• Recording calls for monitoring, training, complaint, and auditing purposes
• Supplier and subcontractor checks and administration
• Generating records while carrying out our business activities, including notes, meeting minutes and associated documentation, general correspondence
• Organising, planning, and administering courses
• Customer segmentation analysis
• Sending customers and stakeholders information about Enjoy Training Limited services via email, text, social media, and letter
• Providing customers with translations and interpretations
• Carrying out audits, quality assurance and maintaining databases
• Investigating, monitoring, and reporting issues and reportable courses
• Managing complaints and enquiries
• Tendering and procurement processes
• Management of resident involvement groups
• Risk assessment and social value monitoring
• Business continuity and emergency
• Analysing traffic to our website

Consent: In some situations, we will ask you for your consent to collect and process your personal data, for example:

• When you interact with us via our website and social media, for example, X (previously Twitter) and Instagram
• Through cookies when interacting with our website
• Attending courses
• Contact information when ordering an course ticket
• Requests from customers
• Taking photographs for publicity
• Recording third party permissions

Vital Interests: Occasionally, we may need to process your personal data when it is necessary to protect your life, for example, in an emergency where you cannot give consent.

Your Data Rights

You have the following rights over your personal data:

The right to request:

• Access to your personal data is free of charge unless the request is unfounded or excessive.
• Correction of your personal data if it is inaccurate or incomplete.
• To have your personal data deleted or removed where there is no good reason for processing to continue.
• Processing of your data to be restricted, subject to certain criteria.
• Your data is moved, copied or transferred to another platform, subject to certain criteria.

If you make such a request, we will respond to it within one month of your request. In some circumstances, we may require an extension to this time period and will notify you of the reasons for this. If we refuse your request, we will inform you of the reason(s) and of your right to complain to the Information Commissioner’s Office (see details below) within one month of your request.

You also have the following rights:

• To object to us processing your personal data where we have relied upon legitimate interests to process, subject to certain criteria.
• Not to be subject to a decision made on the basis of automated profiling, if that decision produces a legal or a similarly significant effect on you, subject to certain criteria.
• The right to withdraw your consent:
  • Where you have given consent for us to process your personal data, you have the right to withdraw your consent at any time. Please contact us at the email or phone number below.

Direct Marketing

You have the right to object to us processing your personal data for direct marketing purposes. If you would like to stop receiving our marketing communications, please contact us.

Checking identity

In order to protect confidentiality, we may ask you to verify your identity before responding to any request made under this privacy notice. If a third party makes a request on your behalf, we require proof that you have given your permission for them to act on your behalf.