Your Privacy Matters
AM Specialists Group are committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Information we collect and why
When purchasing a course through the AM Training Site we require the following information:
- Company Name
- Full Name
- Email Address
- Postal Address
- Phone Number
All Payment details are processed by Sage Pay, a secure third party and are not stored by us.
How we use your information
The new legislation says that we are allowed to use and share your personal data only where we
have a proper reason to do so. The law says we must have one or more of these reasons and these
- Contract – your personal information is processed in order to fulfil a contractual arrangement.
- Consent – where you agree to us using your information in this way.
- Legitimate Interests
- Legal Obligation – where there is statutory or other legal requirement to share the information
As part of the AM Training service we use a third party to send email confirmations for course bookings. We may also offer you the chance to receive marketing emails from us. We will only send marketing emails with your consent and you will be able to withdraw your consent at any time.
If you take a training course with us we may have to deliver a certificate to you in which case details such as name and address will be passed to a third party.
If you contact us to enquire about Training, CDM or Health & Safety services you give us permission to contact you in order to provide you information or discuss our services as requested.
How long we store your data
The length of time we retain your data is determined by a number of factors including the purpose for which we use that information and our obligations under the law.
We may need your personal information to establish, bring or defend legal claims. For this purpose we will always retain your personal information for 7 years after the date it is no longer needed by us. The only exceptions to this are where:
- You exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
- We bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or
- In limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.
- the law requires us to hold your personal information for a longer period, or delete it sooner
- Right of access – to request access to your personal information and information about how we process it
- Right to rectification – to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
- Right to erasure (also known as the Right to be Forgotten) – to have your personal information erased.
- Right to restriction of processing – to restrict processing of your personal information
- Right to data portability – to electronically move, copy or transfer your personal information in a standard form
- Right to object – to object to processing of your personal information
- Rights with regards to automated individual decision making, including profiling – rights relating to automated decision making, including profiling
If you have any queries or would like to exercise any of the rights stated above please contact us via email at firstname.lastname@example.org. You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website http://www.ico.org.uk