First Aid Training On Site Accredited · UK-wide · On-site
0800 852 7739 Get a quote

Privacy Policy

Last updated: 26 June 2026

This policy explains what personal information we collect when you use this website or get in touch with us, how we use it, and what rights you have. We take your privacy seriously and handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are and how to contact us

This website is operated by First Aid Training On Site, a UK-based first aid training provider that delivers accredited courses at your workplace.

If you have any questions about how we handle your personal information, or if you wish to exercise any of your rights (see Section 8), please get in touch:

We will respond to data-related requests within one calendar month.

2. What personal information we collect

We only collect the information you actively provide to us. At present, the main way we receive personal data is through the enquiry and quote request form on our Contact page. The fields on that form are:

  • Your name
  • Your company or organisation name
  • Your email address
  • Your phone number
  • Course of interest
  • Preferred training location (town, city or postcode)
  • Any additional message or requirements you choose to share

All of these fields are provided voluntarily by you. We do not collect sensitive or special-category personal data (such as health information, religious beliefs or financial details) through this website.

We may also collect limited technical information automatically — for example, your IP address or browser type — through the services described in Section 5 (third-party providers). We do not use this technical data to identify you personally.

3. How we use your information

We use the information you submit through our enquiry form for the following purposes:

  • Responding to your enquiry — to reply to the specific question or quote request you have sent us, by email or phone.
  • Providing training services — if you proceed to book a course, to arrange and administer that booking, including confirming dates, location and delegate numbers.
  • General administration — to keep a record of communications, manage follow-up where relevant, and handle any issues that arise before, during or after a course.

We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing emails. If you enquire about a course and do not proceed to book, we will not add you to a mailing list or contact you again unless you initiate further contact.

4. Lawful basis for processing

We process your personal data on two lawful bases under UK GDPR:

  • Legitimate interests (Article 6(1)(f)) — when you send us an enquiry, it is in our legitimate interest to respond to it. We have assessed that this does not override your rights and freedoms, given that you have voluntarily initiated contact.
  • Performance of a contract (Article 6(1)(b)) — where you proceed to book a course with us, processing your details is necessary to fulfil that agreement.

5. Third-party providers and data sharing

We do not sell, rent or trade your personal information with any third party for marketing purposes. The following third-party services are used on this website and may process limited data as part of their function:

Web3Forms

Our contact form is submitted via Web3Forms, a form-handling service. When you submit an enquiry, Web3Forms processes and forwards your submission to our email inbox. Web3Forms acts as a data processor on our behalf. Please refer to the Web3Forms Privacy Policy for details of their data handling practices.

Cloudflare Turnstile

We use Cloudflare Turnstile on our contact form to distinguish human visitors from automated bots, protecting us from spam. Turnstile may collect non-personal signals from your browser (such as interaction patterns) to carry out this check. No CAPTCHA image is shown and no tracking cookies are set by Turnstile. See Cloudflare's Privacy Policy for full details.

Google Fonts

This website loads typefaces from Google Fonts. When your browser requests a font file, Google's servers may receive your IP address. No personal data is stored by Google Fonts in connection with these requests beyond what is needed for delivery. See Google's Privacy Policy for more information.

Cloudflare (hosting and network)

This site is delivered via Cloudflare's content delivery network. Cloudflare may process connection metadata (such as IP addresses) as part of routing requests and providing security services. See Cloudflare's Privacy Policy.

Other than the services listed above, we do not share your personal data with any other third party unless we are legally required to do so (for example, in response to a lawful request from a regulatory body or law enforcement agency).

6. Cookies

This website uses a minimal number of cookies. We do not use advertising cookies, tracking pixels, or cookies from social media platforms.

The cookies that may be set are:

  • Strictly necessary cookies — for example, any session token or security cookie set by Cloudflare Turnstile when you submit the contact form. These are required for the form to function correctly and are not used to track you across other websites.
  • Preference cookies — if your browser settings cause Google Fonts to set a cookie to remember a font-delivery preference, this is incidental to the font-loading process and does not identify you personally.

We do not use analytics cookies (such as Google Analytics or similar) at present. If this changes, we will update this policy and provide appropriate notice.

7. How long we keep your data

We retain the content of enquiry submissions for as long as is reasonably necessary to manage your enquiry and any resulting booking. As a general guide:

  • If an enquiry does not result in a booking, we will not retain your details beyond the period needed to follow up on your query — typically no longer than six months from your last communication with us.
  • If a booking is made, we will retain relevant records (including contact details and booking confirmation) for a period of up to six years, in keeping with standard business record-keeping requirements under UK law.

When personal data is no longer required, we delete or securely destroy it.

8. Your rights

Under UK GDPR, you have a number of rights in relation to your personal data. You can exercise any of these rights by contacting us at [email protected]. We will respond within one month.

  • Right of access — you may request a copy of the personal data we hold about you.
  • Right to rectification — if any of the information we hold is inaccurate or incomplete, you can ask us to correct it.
  • Right to erasure — in certain circumstances you can ask us to delete your personal data (for example, if we no longer need it for the purpose for which it was collected).
  • Right to object — where we rely on legitimate interests as our lawful basis, you have the right to object to that processing. We will then stop unless we can demonstrate compelling grounds that override your interests.
  • Right to restrict processing — you can ask us to pause our use of your data in certain situations, for example while a complaint is being investigated.
  • Right to data portability — where processing is based on your consent or a contract and carried out by automated means, you can request that we provide your data in a structured, machine-readable format.

Right to complain to the ICO

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

We would appreciate the opportunity to address any concern before you contact the ICO, so please do reach out to us first.

9. Changes to this policy

We may update this privacy policy from time to time — for example, if we introduce new features on the website or if legal requirements change. The date at the top of this page will always reflect when the policy was last revised. We encourage you to check back periodically. Where changes are material, we will take reasonable steps to bring them to your attention.

This policy was last updated on 26 June 2026.

Any questions about your data?

Get in touch and we'll be happy to help.

Contact us Call 0800 852 7739