Privacy Policy

PRIVACY POLICY

Introduction

At Clinical Skills Ltd (“we,” “us,” or “our”), we take the protection of your personal data seriously. This privacy notice explains how we collect, use, and protect your personal data in compliance with the principles of the General Data Protection Regulation (GDPR).

Who we are

Clinical Skills Ltd is a company registered in England and Wales under company number 05105852. Our registered address is Sundial House, High Street, Horsell, Woking, Surrey, GU21 4SU. We are the data controller for personal data that we process in connection with our business activities.

Personal data we collect and process

We collect and process personal data about our clients, their representatives, students using our services where we act as a data controller, suppliers and their representatives, and visitors to our website. This personal data includes:

  • Basic identifiers, such as name, address, phone number, and email address.
  • Communication data, such as email correspondence and call logs.
  • Work and education data, such as job titles and qualifications.
  • Online behaviour data, such as website usage information and IP addresses.

We do not regularly process personal data of individuals under the age of 18. There may be occasions where a student is between the ages of 16-18.

We do not process special category data (sensitive personal data) as part of our normal business activities. In the event that we do need to process special category data, we will ensure that such processing is carried out lawfully and with appropriate security measures in place to protect the confidentiality and integrity of the data.

Purposes of processing personal data

We process personal data for the following purposes:

  • To provide an online training experience, including the management and administration of our training systems and platforms.
  • To manage and respond to enquiries and complaints.
  • To defend and pursue legal claims.
  • To conduct demos of our services.
  • To communicate with clients and representatives of clients about our services.
  • To send marketing and advertising communications (subject to consent).
  • To improve and manage our services.

Lawful basis for processing personal data

We process personal data on the following lawful bases:

  • Performance of a contract: where we need to process personal data to provide our services and fulfill our contractual obligations.
  • Legitimate interests: where we have a legitimate interest in processing personal data, such as to protect our business interests, improve and manage our services, and respond to claims, complaints, and enquiries.
  • Consent: where we have obtained consent to process personal data, such as for marketing and advertising communications.

Sharing personal data with third parties

We may share personal data with third parties, such as IT providers, professional consultants and advisors, and representatives of the businesses you work for. We will only share personal data when we have a lawful basis and carry out such sharing securely.

Transferring personal data outside of the EEA

We may transfer personal data outside of the European Economic Area (EEA). If we transfer personal data outside of the EEA, we will ensure that the transfer is subject to adequate safeguards, such as standard contractual clauses or an adequacy agreement.

Retention period for personal data

We will retain personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, regulatory, or administrative requirements. Where we act as a data processor, data is deleted or returned as per the instructions of the data controller.

Individual rights

You have the following rights with respect to your personal data:

  • The right to access your personal data and request that it be rectified or erased.
  • The right to restrict the processing of your personal data.
  • The right to object to the processing of your personal data.
  • The right to data portability.
  • The right to withdraw your consent to the processing of your personal data (where we have obtained your consent).
  • The right to lodge a complaint with a supervisory authority.

If you wish to exercise any of these rights, please contact our Data Protection Officer by emailing dpo@clinicalskills.net.

GDPR Principles

We process your personal data in accordance with the principles of the GDPR, including:

  • Lawfulness, fairness, and transparency: We process your personal data lawfully, fairly, and in a transparent manner. We only collect personal data that is necessary for the purposes described in this privacy notice and ensure that we have a lawful basis for processing your personal data.
  • Purpose limitation: We process your personal data for specified, explicit, and legitimate purposes. We do not process your personal data in a manner that is incompatible with these purposes.
  • Data minimization: We process your personal data in a manner that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure that your personal data is accurate and kept up-to-date. We also take reasonable steps to correct inaccurate or incomplete personal data.
  • Storage limitation: We do not store your personal data for longer than is necessary for the purposes for which it was collected.
  • Integrity and confidentiality: We process your personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
  • Accountability: We take appropriate measures to ensure that we are in compliance with the UK GDPR, including maintaining records of our processing activities and ensuring that our data protection practices are documented and communicated to our staff and other stakeholders.

Contact information

If you have any questions or concerns about our processing of your personal data or this privacy notice, please contact our Data Protection Officer, Adrian Dray (externally appointed), by writing to him at the following address:

Clinical Skills Ltd, Sundial House, High Street, Horsell, Woking, Surrey GU21 4SU.

You can also contact our Data Protection Officer by email at dpo@clinicalskills.net or by calling 020 8995 3336. Please mark or state your enquiry is for the Data Protection Officer.

Website visitors

We collect and process personal data from website visitors in accordance with our website terms and conditions and cookie policy. Our website uses cookies and similar technologies to collect website usage data, such as IP addresses, browser types, and device types. This website data is used to analyze and improve the user experience and to provide marketing and advertising communications (subject to consent). Our cookie policy provides more information on our use of cookies and similar technologies.

Updates to this privacy notice

We may update this privacy notice from time to time to reflect changes in our data processing practices or legal requirements. We encourage you to review this notice periodically for any changes.

Skip to content