PII is personal data that can be used on its own or with other information to identify, contact or locate a single person. Examples include name, age, address, date of birth, gender and contact details. PII can also include special category (sensitive) data such as health information, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic and biometric data, or sexual orientation.
To provide our services we may collect the following categories of information:
You have the following legal rights in relation to your personal data:
To exercise any of these rights, submit a Subject Access Request (SAR) to our Data Protection Representative (DPR) at info@constructionscert.co.uk. There is no charge to process a valid request unless it is manifestly unfounded, excessive or repetitive, in which case we may charge a reasonable administrative fee.
If we cannot fully comply with a request we will communicate with you promptly and explain the reasons and any available options.
Constructions Cert does not take payments directly. Once you confirm a purchase you will be redirected to our secure payment merchant. We do not store or have access to your payment card details. Please consult your payment provider’s privacy policy for how they handle payment information.
We process PII to fulfil our contract with you and to provide the services you have requested. Where necessary, we will share PII with authorised third parties to deliver services (for example, test registration or card processing).
We share PII with the following partners when needed:
Except as described above, we do not sell, trade, or otherwise transfer your PII to outside parties, nor do we use it for marketing or profiling without your consent.
After we have fulfilled the contract with you, we will retain your personal data only where we have a lawful reason to do so (for example, administrative retention or legal obligations). Our standard retention periods are:
| Category | Retention | Reason |
|---|---|---|
| Booking & service records | 6 months after service | Administrative support, queries |
| Financial / transaction records | 7 years | Tax and accounting obligations |
| Email correspondence | 6 months (then deleted) | Customer support and records |
| ID documents (verification) | Deleted after verification unless law requires longer | Identity checks |
At the end of the retention period data is securely deleted or anonymised.
Your PII is stored on encrypted servers. We have a written controller-processor agreement with our hosting provider which requires them to hold data securely, ensure backups and not access or share your data outside the scope of the contract.
We take security seriously. Measures include (but are not limited to):
Although we take all reasonable steps to protect your data, no system is 100% secure. If you suspect a security incident, please contact us immediately at info@constructionscert.co.uk.
We collect information from you when you place an order, fill out a form, register, contact support, or otherwise interact with our site. We also collect technical data automatically when you use the site (cookies, server logs).
Yes. Cookies are small files placed on your device that enable site functionality and remember preferences. We use cookies to:
You can set your browser to warn you when a cookie is sent or to disable cookies completely. Disabling cookies may affect site functionality. To opt out of Google personalised ads visit Google Ad Settings or use the Network Advertising Initiative opt-out tools.
Other than the data we share with NCS Pearson Inc and HSS Training to fulfil services, we do not sell, trade or otherwise transfer your Personally Identifiable Information to outside parties.
Occasionally we may include links to third-party products or services on our website. These third parties have separate privacy policies. We do not accept responsibility for their content or practices. We recommend you review any third-party privacy policy before sharing personal data with them.
We use Google AdSense and Google Analytics. Google, as a third-party vendor, uses cookies to serve ads on our site and to compile data about user interactions. You can set preferences for how Google advertises to you via the Google Ad Settings page. For more information about Google’s advertising policies see Google Advertising Principles.
We respect Do Not Track (DNT) browser settings where technically feasible. If DNT is enabled we will avoid tracking or advertising where possible.
We do not authorise third-party behavioural tracking beyond the advertising and analytics services described above. Any third-party trackers used are subject to their own privacy controls and opt-out mechanisms.
We do not specifically market to children under 13 and do not knowingly collect PII from children under 13. If we become aware that we have collected such information we will take prompt steps to delete it.
We follow Fair Information Practice Principles. In the unlikely event of a data breach we will:
Individuals retain the right to pursue enforceable rights against data collectors and processors under applicable law.
We comply with the CAN-SPAM Act for commercial emails. If you no longer wish to receive marketing emails from us, you may unsubscribe by emailing info@constructionscert.co.uk and we will promptly remove you from our mailing list.
If you have questions about this policy or wish to make a SAR / exercise your rights, contact our Data Protection Representative at:
ConstructionsCert.co.uk Sandford Street Staffordshire West Midlands WS14 0ED United Kingdom Email: info@constructionscert.co.uk
Data Protection Representative / DPO: Privacy Officer — dpo@constructionscert.co.uk