Privacy Policy

Established in 1770, John Jarrold advertised his honourable intentions as a shopkeeper and assured customers of his “utmost assiduity to merit their encouragement.” These are values we hold strong today throughout our company including our views on your data and privacy protection.

Jarrold Training Limited respects your privacy and is committed to protecting your personal data. This privacy notice is to let you know how Jarrold Training Limited processes and manages your personal data. This includes through your use of this website, what you tell us about yourself, what we learn about you by having you as a valued customer and the choices about what marketing you would like us to send you. This notice explains how we do this and tells you about your privacy rights and the law that protects you.

Jarrold Training Limited is the controller and responsible for your personal data (referred to as “Jarrolds”, “we”, “us”, or “our” in this privacy notice). This privacy notice is issued on behalf of Jarrold Training Limited.

This privacy notice covers our processing of your personal data both if you are enquiring, engaging us to provide services on behalf of your business, or if you are an attendee on one of our training courses.

Our Privacy Promise

We promise:

to keep your data safe and private;
not to sell or give away your personal data; and
to give you ways to manage and review your marketing choices at any time.

Data Protection Law

As well as our Privacy Promise, your privacy is protected by data protection and privacy law, including the UK version of the General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

The types of personal data we collect

“Personal data” means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Type of personal data	Description
Behavioural / Account Data	Details about how you use our website and your online account, including your account username and password, and booking history.
Consents Data	Any permissions, consent or preferences that you give us. This includes how you want us to contact you.
Contact Data	Your email address, postal address, telephone number and how we contact you.
Health Data	Information about any food allergies or intolerances which you provide prior to attending one of our training courses.
Identity Data	Your first name, last name, date of birth, details of the business you work for, and your job title.
Security Data	CCTV footage recorded when you visit one of our training facilities.
Technical Data	Details on your internet protocol (IP) address, specific device identifiers, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
Training Data	Information collected about you when you attend one of our training courses, together with details of any accreditations you hold or have applied for, and any report which we prepare for you on completion of a training course.

Where we collect personal data from

We collect personal data about you where you have supplied information directly to us, for example when you:

access your online account which we have created for you and input any details into your account information;
purchase a training course from us on behalf of your business;
attend one of our training courses;
contact us by email, telephone, post, or by completing the enquiry form on our website;
send us any feedback or correspondence (including on social media);
register for our newsletter;
complete and submit any customer service surveys;
take part in any of our competitions or promotions; or
request a refund or submit a customer complaint.

When you attend our training facilities, CCTV will be operation in order to protect you, other training course attendees, and our business from crime.

To help us improve the service we offer, as you interact with our website we will also automatically collect Behavioural/Account Data and Technical Data about your equipment, browsing action and patterns using cookies and other similar automated technologies.

Please also see our cookie policy at https://www.jarroldtraining.co.uk/cookie-policy/ for further details.

How we use your personal data

Data protection law says that we must have one or more lawful reasons to process your data. Typically, we rely on one or more of the following lawful bases for processing your personal data:

Performance of a contract with you: When it is necessary to use your personal data to enter into a contract with you (or your business) or to perform a contract we have with you (or your business).
Compliance with a legal obligation: When it is necessary to use your personal data to allow us to comply with a legal obligation.
Our legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Consent: We may use your personal data when you have given your consent to it.

We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

What we use your personal data for	Type of personal data	Lawful basis
To register your business as a customer	– Behavioural / Account Data – Contact Data – Identity Data – Consent Data – Technical Data	– Performance of a contract with you – Necessary for our legitimate interests
To enable you to order services from us on behalf of your business	– Contact Data – Identity Data	– Performance of a contract with you – Necessary to comply with a legal obligation
To provide our training courses that you have ordered	– Contact Data – Identity Data – Health Data – Training Data	– Performance of a contract with you – Necessary to comply with a legal obligation
To manage our relationship with you and your business (including dealing with your enquiries, feedback and correspondence)	– Contact Data – Identity Data – Behavioural / Account Data	– Performance of a contract with you – Necessary to comply with a legal obligation – Necessary for our legitimate interests (to keep our records updated and ensure we maintain high standards of customer service)
To develop new ways to meet our customers’ needs and to grow our business.	– Behavioural / Account Data – Technical Data	– Necessary for our legitimate interests (to improve our offering to customers)
To enable you to partake in a promotion, competition or complete a survey	– Behavioural / Account Data – Contact Data – Consent Data – Identity Data	– Performance of a contract with you – Necessary for our legitimate interests (to study how customers use our services, to develop them and grow our business) – Consent (having obtained your prior consent to receiving offers of promotions, competitions and/or surveys)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	– Behavioural / Account Data – Identity Data – Technical Data	– Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) – Necessary to comply with a legal obligation
To protect you, other training course attendees, our staff and our business from crime	– Security Data	– Necessary for our legitimate interests (for operating a safe and secure business) – Necessary to comply with a legal obligation

Marketing

We may use your Behavioural / Account Data, Contact Data, and Technical Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services and offers may be relevant for you.

You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing.

Third-party marketing

We will not share your data with any 3^rd party for marketing purposes.

Opting out

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you, by contacting us at any time,

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of your purchase of any of our services or your attendance on our training courses.

Who we share your personal data with

In order for us to fulfill our contract with you or to support our business, we may share your personal data with other likeminded companies who take privacy seriously

Type of service provider	Reasons to share personal data
Trainers & partner providers	Where a training course is to be provided by a sub-contracted third party, we will have to share personal data of the course attendees with that third party.
3^rd party funding providers	To act on your behalf to access funding and grants
Awarding Bodies (e.g. NEBOSH, ILM, IOSH, etc.)	Where you are to receive an accreditation, we will have to share your personal data with an Awarding Body so that you can carry out any accreditation exams and be awarded the relevant accreditation.
E-Mail Marketing providers	To be able to create targeted email marketing campaigns to send you our latest offers, details of new services and training courses and other relevant updates.
Postal Services	To be able to arrange the delivery and tracking of items sent through the post or a courier.
Reviewers	To be able to send you reviews to ensure the service we offer you is as you would expect and allow other potential shoppers to evaluate our score.
Website Development and Management	To be able to provide a website that provides the best possible user experience to our customers.

In addition to the service providers listed above, your personal data may also need to be shared with other entities in our group, for the purposes of internal reporting and accounting, or so that those companies can support the services we provide.

Apprenticeships and some accreditations we provide are operated through Jarrold & Sons Limited. If this is applicable to the services being provided to you, we will need to share your personal data with Jarrold & Sons Limited so that this company can provide the necessary services on our behalf.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Sending personal data outside of the UK

Your personal data may be transferred for processing by our external third parties, some of whom may be based outside the UK. External third parties include service providers who provide IT and system administration services to us, and professional advisers who provide banking, legal, insurance, and accounting services to us.

We will only transfer your personal data to countries that provide an adequate level of protection for personal data (currently all countries in the European Economic Area have been found to provide such protection) or if the transfer is subject to appropriate safeguards as required under data protection laws in the UK or if a specific derogation applies.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

If you choose not to give personal data

We may need to collect personal data by law, or under the terms of a contract to supply services.

If you choose not to give us this personal data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot supply the services you have requested from us, and we would therefore have to cancel your order.

Any data collection that is optional will be made clear at the point of collection.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

How long we keep your personal data

We will aim to limit the amount of personal data we hold in compliance with our data retention policy and reduce the amount of data held the older your data becomes. We will keep your data for as long as is legally necessary, for example to support awarding bodies / funding requirements or to support our internal reporting purposes.

How to get a copy of your personal data

You can request a copy of your personal data by writing to us at the address below or emailing dsar@jarrolds.co.uk.

Data Subject Access Request
Jarrold Training
St James Mill
Whitefriars
Norwich
Norfolk
NR3 1SH

You will need to supply as much information as possible, so we can identify you e.g. your name, your account username and password, the business you work for, your job title, and your email or postal address. Additionally, if you would like to receive an electronic copy of your data, please also provide your email address.

We will aim to provide the information requested by you within one month of receipt of your request (unless we have a reason under relevant data protection law not to do so). That period of one month may be extended by two further months if your request is particularly complex or if you make a significant number of requests.

Letting us know if your personal data is incorrect

You have the right to question any information we have about you that you think is wrong or incomplete. Please contact us (using the contact details set out below) if you want to do this and we will take reasonable steps to check its accuracy and correct it.

What if you want us to stop using your personal data?

You have a right to object to our use of your personal data, and to ask us to delete, remove, or stop using your personal data if there is no need for us to keep it. These rights are known as the ‘right to object’ and the ‘right to erasure’ or ‘right to be forgotten’.

There may be legal or other reasons why we need to keep or use your personal data, but please tell us if you think that we should not be using it.

You can ask us to restrict the use of your personal data if:

it is not accurate;
it has been used unlawfully but you don’t want us to delete it;
it is not relevant; or
you have already asked us to stop using your personal data but you are waiting for us to tell you if we are allowed to keep on using it.

If you want to object to how we use your personal data, or ask us to delete it or restrict how we use it or, please contact us using the contact details set out below.

How to withdraw consent

You can withdraw your consent at any time. Please login to your online account with us, or contact us using the contact details set out below.

How to complain

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance using the contact details set out below.

Cookies

We use cookies when you visit our website at https://www.jarroldtraining.co.uk/. Should you wish to block cookies you can do so via your browser settings. Please note that our website may not function correctly if cookies are turned off or deleted. For more information on cookies, please see https://www.jarroldtraining.co.uk/cookie-policy/.

Contact Us

Email
enquiries@jarroldtraining.co.uk

Telephone
01603 677107

Post
Jarrold Training
St James Mill, Whitefriars
Norwich, Norfolk, NR3 1SH

Last updated, January 2025.

This policy will be reviewed annually or as required

Privacy Policy

Get in touch