top of page

Privacy Notice

​

Privacy Notice

Castle Enterprise Ltd trading as Castle Training

Last updated: September 20th 2026

1. Who we are

Castle Training is a trading name of Castle Enterprise Ltd, a company registered in England and Wales (company number 16152661), with its registered office at Peel House, Peel Rd, Skelmersdale, England, WN8 9PT. We provide telecoms, streetworks, highways, traffic management and site safety training.

We are the “controller” of the personal data described in this notice, which means we decide how and why it is used.

If you have any questions about this notice or how we use your data, contact us at info@castletraining.co.uk, Tel: 01744 73711, or by post at the address above.

2. Whose data this notice covers

This notice applies to people who attend our courses, contacts at our client organisations, people who work for us or apply to work with us, people who receive our marketing, and visitors to our website.

3. What we collect, why, and our legal basis

If you are…

We collect…

We use it to…

Our legal basis

A learner

Your name, contact details, employer, job role, the course you book, attendance, assessment results and certificates

Book and deliver your training, assess you, issue certificates and register you with awarding bodies

Contract, if you book directly with us. Legitimate interests, if your employer books for you (running training and assessing you as they have asked). Legal obligation for some health and safety records.

A learner (identity checks)

Photo ID and date of birth. National Insurance number only where a funder or awarding body requires it

Confirm your identity as our awarding bodies require, and confirm eligibility for funded courses

Legitimate interests, or legal obligation / contractual requirement under funding rules

A learner (health and accessibility)

Health conditions, disabilities or support needs you choose to tell us about, and accident or incident details

Make reasonable adjustments, keep you safe during practical training and record accidents

Your explicit consent. For accident records, legal obligation and defending legal claims

A learner (assessment evidence)

Photos or video of practical assessments, signatures and attendance registers

Provide evidence to awarding bodies for verification and quality assurance

Legitimate interests. We ask for your consent before using your photo in any marketing.

A client contact

Your name, work email and phone number, job title, company and order history

Provide quotes, manage bookings and accounts, send invoices and send results to the organisation that booked

Contract and legitimate interests

A prospective client or marketing contact

Your business contact details, job title, company and your marketing preferences

Tell you about our training services and send newsletters

Legitimate interests for business-to-business marketing. Your consent where the law requires it.

A member of staff, associate trainer, contractor or applicant

Contact details, right-to-work documents, bank and tax details, qualifications and accreditation records

Employ or engage you, pay you and meet awarding body requirements for trainers

Contract, legal obligation and legitimate interests

A website visitor

Details you put in enquiry forms, your IP address and cookie data

Reply to your enquiry and understand how our website is used

Legitimate interests for enquiries. Your consent for non-essential cookies.

 

Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms, and you can ask us about that assessment at any time.

Where we ask for your explicit consent, for example for health information, you can withdraw it at any time by contacting us. Withdrawing consent does not affect the lawfulness of what we did before, but we will stop using the information going forward.

If we get your details from somewhere other than you (for example your employer, a company website or a business directory) we will tell you where they came from the first time we contact you, and at the latest within one month.

4. Who we share your data with

We only share personal data when we need to, and only what is necessary. Recipients include:

  • Awarding bodies, such as SMART Awards and LANTRA, so they can register you, verify assessments and issue certificates.

  • Your employer, if they booked your training, so they can see your attendance, results and certificates. We do not share health information with your employer without your agreement unless there is a genuine safety need.

  • Funders and government bodies, if your course is funded, to confirm eligibility, enrolment, progress and outcomes.

  • Associate trainers and subcontractors who deliver or assess sessions for us, under written confidentiality and data protection terms.

  • Service providers that handle data on our behalf, such as our IT, email and document storage providers (including Microsoft) and our booking or training system supplier.

  • Professional advisers, insurers, regulators and law enforcement where we have a legitimate reason or are legally required to.

We do not sell your personal data.

5. How long we keep your data

We keep personal data only for as long as we need it for the purposes above, or as long as awarding bodies, funders or the law require. As a guide:

Type of data

How long we usually keep it

Training, attendance and certification records

3 Years from the end of your course, or longer if an awarding body or funder requires it

ID document copies

Deleted once your identity has been verified and your registration is complete

Health and accessibility information

12 Months after your course, unless we need to keep accident records for longer

Client account records

For the length of our relationship and 6 years afterwards for financial records

Marketing contacts

Until you opt out, or we review them after 24 months without contact. We keep a record of anyone who has opted out so we do not contact them again.

Staff and associate trainer records

For the length of engagement and 6 years afterwards (some records for shorter periods)

Website enquiries

24 months if no business follows

 

6. Where your data is stored and how we protect it

Your data is held mainly on secure cloud systems (Microsoft 365) and our booking and training system, with some paper records at our premises and on training sites. We use access controls, multi-factor authentication, secure storage and staff training to protect it, and we limit access to people who need it.

We do not transfer personal data outside the UK

7. Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you (subject access);

  • ask us to correct data that is inaccurate or incomplete;

  • ask us to delete your data, where we do not need to keep it;

  • ask us to restrict how we use your data in certain circumstances;

  • object to us using your data on the basis of legitimate interests, and object at any time to direct marketing;

  • receive data you gave us in a portable format, where we use it under consent or contract; and

  • withdraw consent at any time, where we rely on it.

To use any of these rights, contact us using the details in section 1. You do not need to use a special form and there is normally no charge. We will respond within one month, though we can extend that by up to two months for complex requests, and we will tell you if we do. We may need to confirm your identity first. We do not make decisions about you using solely automated processing.

8. Marketing

We may contact business contacts by email or phone about our training services. Every marketing email includes an unsubscribe link, and you can ask us to stop at any time by contacting us. If you are a sole trader or an individual subscriber, we will only email you with your consent or where you are an existing customer of similar services and have not opted out. We screen telephone numbers against the Telephone Preference Service and the Corporate TPS before calling.

9. Cookies

Our website uses cookies. Essential cookies are always on.

10. Complaints

We hope we can resolve any concern directly, so please contact us first at info@castletraining.co.uk You also have the right to complain to the Information Commissioner’s Office at any time:

  • Website: ico.org.uk/make-a-complaint

  • Helpline: 0303 123 1113

  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

11. Changes to this notice

We review this notice regularly and will update it when our practices change. The latest version is always on our website at www.castletraining.co.uk, and the date at the top shows when it was last updated.

bottom of page