Privacy Policy
1. Who We Are
Aberdeen Technical Training Ltd is the data controller for personal data collected through this website, our Learning Management System (Moodle), and in connection with our training services.
- Company: Aberdeen Technical Training Ltd
- Registered address: 2nd Floor, Provender House, 37 Waterloo Quay, Aberdeen AB11 5BS
- VAT number: 514398090
- Email: info@attraining.co.uk
- Phone: +44 7749 374 988
2. What Data We Collect
We may collect the following categories of personal data:
When you book a course or make an enquiry
- Full name
- Email address
- Phone number
- Company name and job title
- IWCF Candidate Registration (CR) number
- Delegate details (where booking on behalf of others)
- Learner account details for our Learning Management System (Moodle) — name, email address, username, and your course activity and assessment records
- Payment information (processed securely by our payment provider — we do not store card details)
When you use our Learning Management System (Moodle)
- Login and account activity (sign-in times, sessions)
- Course progress, completion status and assessment/quiz results
- Any files, forum posts or messages you submit within a course
When you visit our website
- IP address and browser type (via server logs)
- Pages visited and time spent on site
- Referral source, including whether you arrived from one of our online adverts
- Cookie data (see Section 8)
When you contact us directly
- Any personal information you include in your email or enquiry
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Processing course bookings and payments | Contract performance (Art. 6(1)(b)) |
| Sending booking confirmations and joining instructions | Contract performance (Art. 6(1)(b)) |
| Issuing IWCF certification and submitting results to IWCF | Contract performance (Art. 6(1)(b)) |
| Responding to enquiries and providing course information | Legitimate interests (Art. 6(1)(f)) |
| Sending course reminders and administrative communications | Contract performance (Art. 6(1)(b)) |
| Marketing communications about our courses (where consented) | Consent (Art. 6(1)(a)) |
| Maintaining financial and training records | Legal obligation (Art. 6(1)(c)) |
| Improving our website and services | Legitimate interests (Art. 6(1)(f)) |
| Creating and managing your learner account on our Learning Management System (Moodle), delivering course content, and recording your progress and assessment results | Contract performance (Art. 6(1)(b)) |
| Measuring the performance of our online advertising, including whether a visit or booking followed from an advert (where consented) | Consent (Art. 6(1)(a)) |
4. Who We Share Your Data With
We do not sell your personal data. We may share data with the following third parties where necessary:
- IWCF (International Well Control Forum) — to register candidates and submit assessment results for certification purposes
- Payment processors — to process course booking payments securely (e.g. Stripe or equivalent)
- Amelia Booking — our course booking software, used to manage event registrations
- WooCommerce / WordPress — our website platform, hosted securely
- Email service providers — to send transactional and marketing emails
- Google Analytics (Google LLC) — to understand how visitors use our website (only where you’ve consented to analytics cookies)
- Google Ads (Google LLC) — to measure the effectiveness of our online advertising and to record when an advert leads to a booking (only where you’ve consented to advertising cookies)
- Accountants and legal advisors — where required for financial or legal compliance
- Regulatory authorities — where we are legally required to disclose information
- Our Learning Management System (Moodle) — hosted at attraininglms.co.uk, where a learner account is created for each delegate to access course content; you will receive login details by email when your account is created. Moodle is our own learning platform, run by us for the sole purpose of delivering your training
All third-party processors are required to handle your data securely and in accordance with UK GDPR.
5. International Data Transfers
Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised under UK GDPR. Specifically, IWCF processes data in accordance with their own privacy policy and international data transfer mechanisms, and Google Analytics and Google Ads (Google LLC) process data in the United States under Google’s standard contractual clauses and its own data processing terms. Our Learning Management System (Moodle) is hosted within the UK.
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Course booking and delegate records | 7 years (HMRC financial record requirements) |
| IWCF certification records | 7 years from date of assessment |
| Enquiry and contact records | 2 years from last contact |
| Marketing consent records | Until consent is withdrawn |
| Website analytics data | 26 months |
| Advertising measurement data | Up to 90 days from your visit, in line with Google Ads cookie durations |
| Learning Management System (Moodle) accounts and activity records | Course access is withdrawn following course completion; account and training activity records are retained for 7 years in line with training records |
After these periods, data is securely deleted or anonymised.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data where there is no lawful reason to retain it
- Right to restrict processing — request that we limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — withdraw marketing, analytics or advertising consent at any time without affecting the lawfulness of prior processing
This includes data held in our Learning Management System (Moodle). To exercise any of these rights, contact us at info@attraining.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
Our website and our Learning Management System (Moodle) use a small number of cookies to make bookings, payments and course access work, plus — only with your consent — Google Analytics, so we can see which pages and courses are popular, and Google Ads, so we can tell whether our adverts are working. You can accept or reject these at any time using the cookie banner or the “Cookie Settings” link in our website footer.
Strictly necessary (cannot be disabled)
| Cookie | Purpose | Duration |
|---|---|---|
| WordPress / WooCommerce session | Keeps your cart and checkout working | Session |
__stripe_mid, __stripe_sid | Set by Stripe during checkout to help prevent fraud | Up to 1 year |
amelia_range_* | Remembers which dates you’re viewing in the course booking calendar | Session |
_tccl_visit, _tccl_visitor, _scc_session | Set by our hosting provider (GoDaddy) for basic site performance | 1 hour – 1 year |
MoodleSession | Keeps you securely signed in to our Learning Management System (Moodle) while you complete your course | Session |
Analytics (only with your consent)
| Cookie | Purpose | Duration |
|---|---|---|
_ga, _ga_* | Google Analytics — helps us see how visitors use the site | Up to 2 years |
Advertising (only with your consent)
| Cookie | Purpose | Duration |
|---|---|---|
_gcl_au, _gcl_aw | Google Ads — records whether your visit came from one of our adverts, so we can measure which adverts lead to course bookings | Up to 90 days |
We do not use advertising cookies to build profiles of individuals or to show you our adverts elsewhere on the internet. They are used only to measure whether our advertising is effective.
You can change your choice at any time via the “Cookie Settings” link in our website footer. For more general information about cookies, visit ico.org.uk/cookies.
9. Data Security
We take the security of your personal data seriously, across both our website and our Learning Management System (Moodle). We implement appropriate technical and organisational measures including:
- SSL/TLS encryption for all data transmitted through our website and our Learning Management System (Moodle)
- Secure hosting with access controls and regular updates
- Restricted access to personal data on a need-to-know basis
- Regular review of our data handling practices
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals where required.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website, our Learning Management System (Moodle), or our services after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: info@attraining.co.uk
- Post: Aberdeen Technical Training Ltd, 2nd Floor, Provender House, 37 Waterloo Quay, Aberdeen AB11 5BS
- Phone: +44 7749 374 988
