Last updated: 14 September 2026
Who we are
IMPACT Compliance Solutions Limited (“we”, “us”, “our”) provides health, safety and compliance training. We are the data controller for the personal information described in this notice.
- Company: IMPACT Compliance Solutions Limited, registered in England and Wales, company number 10512121
- Registered office: 1 Bridge House Cottage, The Ash, Little Hadham, Ware, Hertfordshire SG11 2DG
- Email: info@impactcompliance.co.uk
- Telephone: 01279 744407
This notice explains what personal information we collect through this website and in the course of our training and consultancy work, why we collect it, who we share it with, and what rights you have. It applies to impactcompliance.co.uk.
The information we collect
When you book a course
When you book a place on a course through this website, we collect the details you enter on the booking form. This will usually include your name, email address, telephone number, the employer or organisation you are booking on behalf of where relevant, and the course and date you have chosen.
We do not take card payments through this website. Payment for courses is arranged separately with us. No card or bank details are collected by this website.
When you contact us
If you use our contact form, email us or call us, we collect the information you give us — typically your name, contact details and whatever you tell us about your enquiry — so that we can respond and, where it leads to a booking, arrange your training.
When you use our website
Like most websites, ours can collect information about your visit using cookies and similar technologies. This includes analytics information about which pages are viewed, and — where you have given permission — marketing and visitor-analysis information. Some of these technologies record how you move through and interact with pages.
None of this happens unless you agree to it. Analytics, marketing and session-recording technologies are blocked until you accept them on our cookie banner. Cookies that are strictly necessary to make the site work do not require your consent. Our Cookie Policy sets out the detail.
Why we use your information, and our lawful basis
| What we use it for | Lawful basis under UK GDPR |
|---|---|
| Taking and managing your course booking, and delivering the training | Performance of a contract with you, or taking steps at your request before entering into one |
| Arranging certificates or cards issued by an awarding body following your course | Performance of a contract, and compliance with the requirements of the relevant scheme |
| Responding to enquiries you send us | Our legitimate interests in answering people who contact us |
| Keeping training, attendance and assessment records | Our legitimate interests in running our business properly, and our legal obligations |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Website analytics, marketing, session recording and visitor identification | Your consent, which you can withdraw at any time |
Who we share your information with
We do not sell your personal information. We share it only where we need to:
- Awarding bodies. Where your course leads to a certificate or card issued by an awarding body — for example CITB, IOSH or a first aid awarding organisation — we pass that body the delegate details it requires in order to register you and issue your certificate. Without this we cannot certificate your course.
- Your employer. Where an employer books and pays for your place, we confirm attendance and course outcome to them.
- Our suppliers. Our website hosting and content delivery provider, and our email provider, process information on our behalf under contract.
- Analytics and marketing providers, where you have consented. These are set out in full, with links to their own privacy information, in our Cookie Policy. They currently include Google (Google Analytics and Google Tag Manager), Meta Platforms (the Meta Pixel), Microsoft (Clarity, which records how pages are used) and TheLeadCatcher (which identifies organisations visiting the site).
- Professional advisers and authorities. Our accountants and insurers, and any regulator, court or authority where we are required by law to disclose information.
Transfers outside the UK
Some of the providers named above are based outside the United Kingdom, or process information on servers outside it. Where personal information is transferred outside the UK, we rely on the UK Government’s adequacy regulations where they apply, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more detail using the contact details above.
How long we keep your information
We keep personal information only for as long as we need it. In practice that means:
- Enquiries that do not lead to a booking — kept only as long as needed to deal with the enquiry and for a short period afterwards.
- Booking and training records — kept for as long as your certification remains valid and for a period afterwards, so that we can confirm your training history, deal with queries from you, your employer or an awarding body, and defend any claim.
- Accounting records — kept for the period required by tax law.
- Consent records — a record of the cookie choice you made is kept so that we can demonstrate that consent was given.
When we no longer need information, we delete it or anonymise it.
Your rights
Under the UK GDPR you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete information, where there is no good reason for us to keep it;
- ask us to restrict how we use your information while a concern is resolved;
- object to us using your information where we rely on legitimate interests;
- ask us to transfer certain information to you or another organisation in a machine-readable format; and
- withdraw your consent at any time, where we rely on consent. Withdrawing consent does not affect anything we did before you withdrew it.
To change or withdraw your cookie choices at any time, use the cookie settings control on this site:
To exercise any of your other rights, email info@impactcompliance.co.uk or write to us at the address above. We will respond within one month. We do not make decisions about you by automated means that have legal or similarly significant effects.
How to complain
If you are unhappy with how we have handled your personal information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, which regulates data protection in the UK:
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- Helpline: 0303 123 1113
- ico.org.uk/make-a-complaint
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. If we make a significant change we will make that clear on this page.