Privacy Notice

Ian Cartwright Mental Health First Aid Training is a training organisation that delivers Mental Health First Aid (England) Training to business, charities and individuals.

Ian Cartwright Mental Health First Aid Training must process personal data (including sensitive personal data) so that it can provide services in doing so, the organisation acts as a data controller.

Please note, the Data Protection Officer for Ian Cartwright Mental Health First Aid Training is Mr Ian Cartwright.

Details of our data protection registration and that of the DPO can be viewed on the public register with the ICO (Information Commissioner’s Office) https://ico.org.uk/esdwebpages/search.

Ian Cartwright Mental Health First Aid Training is registered with the ICO, our reference number is C1377007

You may be required to provide your personal details to Ian Cartwright Mental Health First Aid Training directly, such as on a customer survey, a registration form or data base of customers.

In all instances, Ian Cartwright Mental Health First Aid Training have a legal basis for processing your personal data. We will only use your personal data in accordance with the terms and conditions as outlined in this policy.

1. Collection and use of personal data

a. Purpose of processing and legal basis

Ian Cartwright Mental Health First Aid Training will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes outlined in specific projects the legal bases Ian Cartwright Mental Health First Aid Training rely upon to offer you our services are as follows:

1. Consent of the individual for one or more specific purposes.
2. Processing is necessary for the performance of a contract with the individual or in order to take steps at the request of the individual to enter into a contract.
3. Processing is necessary for compliance with a legal obligation that the controller is subject to.
4. Processing is necessary to protect the vital interests of the individual or another person.
5. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
6. Processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the individual which require protection of personal data, in particular where the individual is a child.

b. Legitimate interest.

Where Ian Cartwright Mental Health First Aid Training has relied on a legitimate interest to process your personal data our legitimate interests are as follows:

1. In a data base of customers
2. In forming a mailing list
3. Any other that is deemed appropriate and indicated in a specific privacy notice.

c. Recipient/s of data

Ian Cartwright Mental Health First Aid Training will process your personal data and/or sensitive personal data with the following recipients.

d. Statutory/contractual requirement

Your personal data is required by law and (or) a contractual requirement (e.g. our client may require this personal data), and (or) a requirement necessary to enter into a contract. For example, a list of delegates at a training event.

2. Data retention

Ian Cartwright Mental Health First Aid Training will retain your personal data only for as long as is necessary. Different laws may require us to keep data for different periods of time.

In addition, we are required to keep payroll records, holiday pay, sick pay and pensions auto-enrolment records for a period of time as specified and is legally required by HMRC and associated national minimum wage, social security and tax legislation.

Upon the expiry or closure time period for consent provided, Ian Cartwright Mental Health First Aid Training will seek further consent. In any event where consent is not granted/indeed received, Ian Cartwright Mental Health First Aid Training, will cease in the processing of your personal data and sensitive personal data.

3. Your rights when it comes to consent and the processing of your personal data

Please note, that in relation to GDPR and DPA (2018) you have the following data protection rights:

• The right to be informed about the personal data Ian Cartwright Mental Health First Aid Training processes on you;
• The right of access to the personal data Ian Cartwright Mental Health First Aid Training processes on you;
• The right to rectification of your personal data;
• The right to erasure of your personal data in certain circumstances;
• The right to restrict processing of your personal data;
• The right to data portability in certain circumstances;
• The right to object to the processing of your personal data that was based on a public or legitimate interest;
• The right not to be subjected to automated decision making and profiling; and
• The right to withdraw consent at any time. Where you have consented to Ian Cartwright Mental Health First Aid Training processing your personal data and sensitive personal data, you reserve the right to withdraw that consent at any time by contacting Ian Cartwright on ian@iancartwrightmhfa.co.uk

4. Complaints or queries

In the event where you wish to complain about this privacy notice or any of its procedures as detailed above, please contact, Ian Cartwright on ian@iancartwrightmhfa.co.uk

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.