Website: trainigo.com
Data Controller: [COMPANY LEGAL NAME] (“Trainigo”, “we”, “us”, “our”)
Registered address: [REGISTERED ADDRESS]
ICO Registration Number: [ICO REGISTRATION NUMBER]
Contact: [EMAIL ADDRESS]
Last updated: July 2026
This Privacy Policy explains how Trainigo collects, uses, stores, and shares your personal data. It applies to all individuals who visit trainigo.com, enquire about our courses, or enrol as Learners. Please read it carefully.
1. Who We Are
[COMPANY LEGAL NAME], trading as Trainigo, is a UK-based provider of vocational education and training qualifications. We are registered as a data controller with the Information Commissioner’s Office (ICO) under registration number [ICO REGISTRATION NUMBER].
We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this Privacy Policy or how we handle your personal data, contact us at [EMAIL ADDRESS].
2. Data We Collect
We collect the following categories of personal data:
2.1 Identity and Contact Data
• Full name, date of birth, and gender
• Postal address, email address, and telephone number
• Proof of identity where required for qualification registration
2.2 Application and Enrolment Data
• Educational and professional qualifications and experience
• Subject specialism and occupational background
• Responses to enrolment application questions
• Suitability declaration information provided during the application process
• DBS disclosure information, where voluntarily provided
2.3 Learning and Assessment Data
• Assignment submissions, portfolio evidence, and assessment records
• Tutor feedback and assessment decisions
• Course progress and completion records
• Micro-teach and practical assessment documentation
2.4 Payment Data
• Transaction records (amount, date, payment method)
• Billing address
We do not store full card details. Payment transactions are processed by a third-party payment provider and are subject to their security standards.
2.5 Communications Data
• Emails, messages, and correspondence between you and Trainigo
• Records of complaints, feedback, or support requests
2.6 Technical and Website Data
• IP address, browser type, and device information
• Pages visited, time on site, and referral source
• Cookie data — see Section 8 for details
3. How We Use Your Data and Our Lawful Basis
The table below sets out the purposes for which we process your personal data and the lawful basis under UK GDPR on which we rely.
Enrolment and account administration
We process your identity, contact, and enrolment data to manage your application, confirm your place, provide access to Course Materials, and administer your learner record. Lawful basis: performance of a contract.
Course delivery and assessment
We process your learning and assessment data to provide tutor support, assess your work, maintain quality assurance records, and submit your results to the Awarding Organisation. Lawful basis: performance of a contract.
Qualification registration and certification
We share your personal data with the relevant Awarding Organisation to register you for your qualification and process your certificate upon successful completion. Lawful basis: performance of a contract; legitimate interests.
Payment processing
We process your payment and billing data to take payment for your Course and maintain financial records. Lawful basis: performance of a contract; legal obligation.
Applicant suitability screening
We process your application responses and suitability declaration to assess whether your enrolment is appropriate. Lawful basis: legitimate interests (protecting the integrity of our programmes and the learners and professionals involved in them).
Safeguarding
Where we become aware of information relevant to safeguarding or legal compliance obligations, we may be required to process or disclose certain data. Lawful basis: legal obligation; vital interests.
Responding to enquiries and communications
We use your contact data to respond to questions, complaints, and requests. Lawful basis: legitimate interests; performance of a contract.
Marketing and course updates
With your consent, we may send you information about new courses, offers, and updates relevant to your professional development. You may withdraw consent at any time. Lawful basis: consent.
Website analytics and improvement
We use anonymised technical data to analyse how our website is used and improve its performance. Lawful basis: legitimate interests.
4. Sharing Your Data
We do not sell your personal data. We share personal data only where necessary and with appropriate safeguards in place.
4.1 Awarding Organisations
We share your identity, enrolment, and assessment data with the relevant Awarding Organisation to register you for your qualification and process certification. The Awarding Organisation acts as an independent data controller for its own purposes.
4.2 Tutors and Assessors
Your learning and assessment data is shared with the Trainigo tutors and assessors responsible for supporting and assessing your Course.
4.3 Service Providers
We use third-party service providers to support our operations, including:
• Learning management system (LMS) platform provider
• Payment processing provider
• Email and communications service providers
• IT support and hosting providers
All service providers are contractually required to process personal data only on our instructions and in compliance with UK data protection law.
4.4 Legal and Regulatory Disclosure
We may disclose personal data to law enforcement agencies, regulatory bodies, or other third parties where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of Trainigo, our learners, or others.
4.5 International Transfers
Where any of our service providers process personal data outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with UK data protection law, including Standard Contractual Clauses or adequacy decisions as applicable.
5. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account our legal obligations and legitimate business needs.
• Learner records (identity, enrolment, and assessment data): retained for a minimum of 7 years following completion or withdrawal, in accordance with qualification records requirements.
• Financial records: retained for 7 years in accordance with HMRC requirements.
• Application data for unsuccessful or declined applications: retained for 12 months.
• Website analytics data: retained in anonymised form for up to 26 months.
• Marketing consent records: retained until consent is withdrawn, plus 12 months.
At the end of the applicable retention period, data is securely deleted or anonymised.
6. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access
You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification
You have the right to request correction of any inaccurate or incomplete personal data.
Right to erasure
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected.
Right to restriction of processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy.
Right to data portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to object
You have the right to object to processing based on legitimate interests. We will assess whether our legitimate interests override your rights in the circumstances. You have an absolute right to object to processing for direct marketing purposes.
Rights related to automated decision-making
Trainigo does not make solely automated decisions that produce legal or similarly significant effects on you.
To exercise any of these rights, contact us at [EMAIL ADDRESS]. We will respond within one calendar month. We may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
7. Cookies
Our website uses cookies to improve your experience and help us understand how the site is used.
7.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and store preferences or usage information.
7.2 Cookies We Use
Strictly necessary cookies
Required for the website and learning platform to function. These cannot be disabled.
Analytics cookies
Used to understand how visitors interact with our website (e.g., pages visited, time on site). We use anonymised data only. Analytics cookies are only set with your consent.
Marketing cookies
Used to track the effectiveness of our advertising and deliver relevant content. Only set with your consent.
7.3 Managing Cookies
When you first visit the website, you will be presented with a cookie consent banner where you can accept or decline non-essential cookies. You can update your preferences at any time via the cookiesettings link in the website footer.
You can also manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the website or learning platform.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
• Encryption of data in transit using TLS
• Access controls limiting personal data to authorised staff and tutors
• Regular review of security practices and service provider contracts
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.
9. Third-Party Links
Our website may contain links to third-party websites, including Awarding Organisation websites. These sites have their own privacy policies, and Trainigo is not responsible for their content or data practices. We recommend reviewing the privacy policy of any third-party site you visit.
10. Children’s Data
Trainigo courses are available only to individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [EMAIL ADDRESS].
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The current version will always be available at trainigo.com/privacy-policy. We will notify enrolled Learners of any material changes.
12. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
Trainigo
[REGISTERED ADDRESS]
Email: train@trainigo.com
Website: trainigo.com
This Privacy Policy was last updated in July 2026 and applies to personal data processed in connection with trainigo.com and all Trainigo courses.
