Privacy Policy

Privacy Policy – Core Practice Training

Last updated: 29/05/2026

Core Practice Training is committed to protecting your privacy and ensuring your personal data is handled safely, lawfully and transparently. This Privacy Policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who We Are

Core Practice Training provides accredited training services including EpiPen and anaphylaxis training, SEND training and other specialist CPD for education and care settings.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: info@corepracticetraining.co.uk 

2. What Personal Data We Collect

We may collect and process the following information:

Information you provide directly, including:

• Name
• Email address
• Phone number
• Job title and organisation
• Booking details
• Payment information (processed securely via third‑party providers)
• Any information you submit via contact forms or email

Information collected automatically, including:

• IP address
• Browser type and device information
• Website usage data (via cookies and analytics tools)

Information collected during training, including:

• Attendance records
• Assessment or competency outcomes (if applicable)
• Feedback forms

We do not collect unnecessary or excessive data.

3. How We Use Your Data

We use your personal data to:

• Process training enquiries and bookings
• Deliver training services
• Issue certificates and attendance records
• Communicate with you about your booking
• Provide customer support
• Maintain accurate business and financial records
• Improve our website and services
• Send updates or marketing communications (only with your consent)

We will never sell your data or share it with third parties for marketing purposes.

4. Lawful Basis for Processing

We process your data under the following lawful bases:

• Contract: To provide the training or services you have booked
• Legal obligation: For accounting, tax and safeguarding requirements
• Legitimate interests: To operate and improve our business
• Consent: For optional marketing communications

5. How We Store and Protect Your Data

We take data security seriously. Your information is stored securely using:

• Encrypted devices
• Password‑protected systems
• Secure cloud storage
• Restricted access controls
• Regular data backups

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal obligations.

6. Sharing Your Data

We may share your data with:

• Payment processors (e.g., Stripe, PayPal)
• Email or CRM providers
• Certification or accreditation bodies (if required)
• IT service providers who support our systems
• Regulatory authorities where legally required

All third‑party providers are GDPR‑compliant and only process data on our behalf.

7. Cookies and Website Tracking

Our website uses cookies to:

• Improve user experience
• Analyse website traffic
• Remember your preferences
• Support security features

You can manage or disable cookies through your browser settings.

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO (Information Commissioner’s Office)

To exercise any of these rights, contact us using the details above.

9. Children’s Data

We do not knowingly collect personal data from children. Any information relating to children during training (e.g., case studies, scenarios) is anonymised.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.