Privacy Policy

Last updated: 24 August 2026

Frontline Training Ltd is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains what personal information we collect, why we use it, how long we keep it, who we may share it with, and the rights you have in relation to your information.

1. Who We Are

Frontline Training Ltd is the data controller responsible for the personal information described in this policy.

Frontline Training Ltd
4 Hazel Mead, Epsom, Surrey, United Kingdom, KT171PW

Email: info@frontlinetraining.co.uk
Telephone: 0208 402 8232 / 07531 705 283

For any questions about how we use your personal information, please contact us using the details above.

2. Information We May Collect

The information we collect depends on how you interact with us.

Enquiries and bookings

When you contact us, request a quote, book a discovery call or arrange training, we may collect:

your name;
company or organisation name;
job title;
email address;
telephone number;
workplace or training venue address;
course requirements;
proposed training dates;
learner numbers; and
information you choose to provide within emails, forms or telephone conversations.

Learner and course information

Where you attend training with us, we may collect or receive information including:

learner name;
contact details;
course attended;
attendance information;
assessment results;
qualification or certification information;
certificate dates and expiry dates;
reasonable-adjustment requirements; and
other information required to administer, assess or certify the course.

This information may be provided directly by the learner or by the organisation arranging the training.

Special category information

Occasionally, a learner may provide information about their health, disability or other circumstances where this is necessary to arrange reasonable adjustments or appropriate support.

We will only collect this information where necessary and will apply the additional protections required by data protection law. Where appropriate, we may rely on the individual’s explicit consent.

Website information

When you use our website, we may automatically collect limited technical information such as:

IP address;
browser and device type;
pages visited;
approximate location;
referral source; and
information about how the website is used.

This may be collected through website security systems, server logs, cookies and analytics services.

3. How We Use Your Information

We may use personal information to:

respond to enquiries and provide quotations;
arrange and administer training courses;
communicate with clients, learners and course organisers;
deliver training and assessments;
register learners for regulated qualifications where applicable;
issue or arrange certificates;
maintain training and qualification records;
provide reminders relating to certificate expiry or requalification where appropriate;
manage invoices, payments and accounting records;
respond to complaints, appeals or quality-assurance matters;
improve our courses, services and website;
maintain the security and operation of our website and systems;
meet our legal, regulatory and awarding-organisation requirements; and
provide relevant information about our services where permitted by law.

4. Our Lawful Bases for Using Personal Information

Data protection law requires us to have a lawful basis for using personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide a quotation, respond to a request before entering into a contract, or provide services under a contract with you.

Legitimate interests

We may rely on our legitimate business interests where this is necessary and proportionate, including:

communicating with business contacts;
administering training arranged by an employer or organisation;
maintaining appropriate records;
improving our services;
protecting our systems and business; and
communicating relevant information about our services where permitted by law.

We consider the impact on individuals and their rights before relying on legitimate interests.

Legal obligation

We may process information where this is necessary to comply with legal, regulatory, taxation, accounting or other statutory obligations.

Consent

We may rely on consent where appropriate, including for certain marketing activities, cookies or the processing of particular information.

Where we rely on consent, you may withdraw that consent at any time.

5. Training Booked by an Employer or Organisation

Many of our courses are arranged by employers, schools, local authorities, charities and other organisations on behalf of their staff or learners.

In these circumstances, we may receive personal information from the organisation arranging the training rather than directly from the learner.

We use that information only as necessary to organise and deliver the training, maintain appropriate records and administer certification or qualifications.

The organisation providing us with learner information is responsible for ensuring that it has an appropriate basis for sharing that information with us.

6. Awarding Organisations and Certification

Where a course leads to a regulated qualification or externally issued certificate, we may need to share relevant learner information with an approved awarding organisation or other certification body.

This may include information required to:

register learners;
administer assessments;
conduct quality assurance;
issue certificates;
investigate complaints or appeals; and
meet regulatory requirements.

Those organisations may process personal information as separate data controllers in accordance with their own privacy policies.

7. Who We May Share Information With

We do not sell personal information.

Where necessary, information may be shared with:

awarding organisations and certification bodies;
trainers, assessors and internal quality-assurance personnel involved in course delivery;
organisations that have commissioned training for their staff;
website hosting and IT service providers;
email, cloud-storage and business-software providers;
form, analytics and website-security providers;
accountants and professional advisers;
payment or banking providers where applicable;
insurers;
regulators, government bodies or law-enforcement authorities where required by law; and
other service providers acting on our behalf.

We only share information where there is a legitimate reason to do so and only disclose the information reasonably required for that purpose.

8. International Transfers

Some of the technology and service providers we use may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with UK data protection law.

These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards.

9. How Long We Keep Information

We do not keep personal information for longer than reasonably necessary.

Retention periods vary depending on the type of information and why we hold it.

As a general guide:

Unsuccessful enquiries and quotations may normally be retained for up to 24 months after the last meaningful contact.
Client, contractual, invoice and accounting records will normally be retained for at least the period required by taxation and accounting law.
Learner, assessment and certification records may be retained for the period required by the relevant awarding organisation, regulator, contractual requirement or for as long as reasonably necessary to verify training and qualifications.
Marketing information is retained until you unsubscribe, object to the processing or the information is no longer reasonably required.
Website and analytics information is retained in accordance with the settings and retention periods of the relevant systems we use.

Some information may need to be retained for longer where required by law, regulatory requirements, legal claims or safeguarding obligations.

10. Marketing Communications

We may occasionally contact clients, previous customers or other business contacts about relevant Frontline Training services where permitted by law.

We may use consent, legitimate interests or another lawful basis as appropriate, while also complying with the rules that apply to electronic marketing.

Where required, we will provide an opportunity to opt out when information is collected.

Every marketing email we send will provide a way to unsubscribe or opt out of future marketing.

You can also ask us to stop sending marketing communications at any time by contacting:

info@frontlinetraining.co.uk

Service communications relating to an existing booking, qualification or contract are not marketing communications and may still be sent where necessary.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

operate essential website functions;
maintain website security;
understand how visitors use the website;
improve website performance; and
support third-party services used on the site.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.

Where consent is required for analytics, advertising or other non-essential cookies, these technologies will only be used in accordance with the choices made through our cookie controls.

You can also manage cookies through your browser settings.

12. Website Forms and Security

Information submitted through our website forms is used for the purpose indicated on the relevant form, such as responding to an enquiry, preparing a quotation or arranging training.

We use reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration or disclosure.

No method of transmitting or storing information electronically can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

13. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

ask for access to the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your information;
ask us to restrict how your information is used;
object to certain uses of your information;
receive certain information in a portable format;
withdraw consent where we rely on consent; and
complain about how your information has been handled.

These rights are subject to certain legal conditions and exemptions.

In most circumstances, you will not be charged a fee for exercising your data protection rights.

We may need to verify your identity before responding to a request.

To exercise your rights, contact:

info@frontlinetraining.co.uk

14. Complaints

If you have concerns about how Frontline Training uses your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

15. Automated Decision-Making

We do not currently use personal information to make decisions about individuals solely through automated decision-making or profiling that produces legal or similarly significant effects.

16. Links to Other Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of those websites. We recommend reviewing the relevant privacy information before providing personal information to another organisation.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we use personal information.

The latest version will always be published on this page and the date at the top of the policy will show when it was last updated.

18. Contact Us

For questions about this Privacy Policy, how we use your personal information, or to exercise your data protection rights, contact: