top of page

Privacy Policy

​

The Privacy Centre Ltd
Effective Date: July 2026

​

1. Introduction

The Privacy Centre Ltd is committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect your personal data when you register for, attend, or engage with our Senior Information Risk Owner (SIRO) Training programme.

​

2. Who We Are

The Privacy Centre Ltd is the data controller for the personal information collected in connection with our SIRO training services.

​

If you have any questions about this Privacy Notice or how we process your personal data, please contact:

​

The Privacy Centre Ltd
31 Rooksmead, Bedford, MK41 7QX
Email: enquiries@theprivacycentre.co.uk

​

3. Personal Information We Collect

When you book or attend a training course, we may collect:

  • Name

  • Job title

  • Organisation name

  • Work email address

  • Telephone number

  • Billing and payment information

  • Dietary or accessibility requirements (where relevant)

  • Attendance records

  • Feedback and evaluation responses

  • CPD and certification information

​

4. How We Use Your Information

We process your personal information to:

  • Manage and administer your training booking

  • Communicate with you about the course

  • Provide joining instructions and course materials

  • Record attendance

  • Issue certificates of completion or attendance

  • Process payments and invoices

  • Respond to enquiries and support requests

  • Improve our training services through feedback and evaluation

  • Comply with legal, regulatory and contractual obligations

​

5. Our Lawful Basis for Processing

We process your personal data under one or more of the following lawful bases:

  • Contract – where processing is necessary to provide the training service you have booked.

  • Legal Obligation – where we are required to retain records for tax, accounting, or regulatory purposes.

  • Legitimate Interests – to operate, evaluate and improve our training services.

  • Consent – where you choose to receive marketing communications from us.

​

6. Marketing Communications

We may occasionally send information about future training courses, events, resources, or services that may be relevant to you.

Where required by law, we will only do so with your consent. You may withdraw your consent or unsubscribe at any time using the unsubscribe link in our emails or by contacting us directly.

​

7. Sharing Your Information

We do not sell your personal information.

​

We may share your information with trusted service providers who help us deliver our services, including:

  • Training and webinar platforms

  • Payment and invoicing providers

  • Email and communication providers

  • Certificate and learning management systems

All third parties are required to process personal data securely and only in accordance with our instructions.

​

8. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with UK data protection legislation.

​

9. How Long We Keep Your Information

We will only retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

  • Training records and certificates: up to 6 years

  • Financial and invoicing records: up to 7 years

  • Marketing preferences: until consent is withdrawn or no longer required

Retention periods may vary where legal or regulatory requirements apply.

​

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

​

11. Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request erasure of your personal information in certain circumstances

  • Request restriction of processing

  • Object to processing based on legitimate interests

  • Withdraw consent where processing is based on consent

  • Request the transfer of your information to another organisation where applicable

  • Lodge a complaint with the Information Commissioner's Office (ICO)

  • ​

12. Contact Us

If you have any questions about this Privacy Notice or your personal information, please contact:

​

The Privacy Centre Ltd
Email: enquiries@theprivacycentre.co.uk

​

You also have the right to contact the Information Commissioner's Office at ICO Website.

bottom of page