Privacy Policy

BCP First Aid (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you have. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and we handle cookies in line with the Privacy and Electronic Communications Regulations (PECR).

On this page:

1. Who we are
2. Information we collect
3. How and why we use it
4. Course bookings & certification
5. Cookies
6. Who we share it with
7. International transfers
8. How long we keep it
9. Your rights
10. Complaints & the ICO
11. Children’s data
12. Security
13. Changes
14. Contact us

1. Who we are

BCP First Aid provides first aid training courses across Bournemouth, Christchurch, Poole and the surrounding area. For the purposes of data protection law, we are the “controller” of the personal information we hold about you — meaning we decide how and why it is processed. If you would like our full registered business details, or wish to raise anything about this policy, please see Contact us below.

2. The information we collect

Depending on how you interact with us, we may collect:

• Contact & booking details — your name, email address, telephone number, postal/billing address and, where relevant, your employer or organisation.
• Course & certification information — the course(s) you book, attendance, assessment results, and the certificates or qualifications issued to you.
• Health, accessibility & dietary information — only where you choose to tell us about a medical condition, disability, learning need or requirement so we can make reasonable adjustments and run the course safely. This may be “special category” data, which we process only with your explicit consent or where otherwise permitted by law.
• Payment information — details needed to take payment. Card payments are handled by our payment provider; we do not store full card numbers.
• Website & technical data — information collected automatically when you use our site, such as your IP address, device and browser type, and the pages you view (see Cookies below).
• Messages & correspondence — anything you send us via our contact form, by email, phone or social media.

3. How and why we use your information

We only use your personal information where the law allows us to. Our lawful bases under the UK GDPR are:

• Contract — to take and manage your course booking, deliver training, assess you and issue certificates.
• Legal obligation — to meet record-keeping, health & safety, tax and awarding-organisation requirements.
• Legitimate interests — to operate, secure and improve our website and services, respond to enquiries, and run our business — provided your rights do not override these interests.
• Consent — for optional marketing communications and for non-essential cookies. You can withdraw consent at any time.

4. Course bookings & certification

When you complete a regulated or accredited course, we may need to share your details (such as your name and assessment outcome) with the relevant awarding organisation or certification body so your qualification can be registered and your certificate issued. We keep training and certification records for the period required by the awarding organisation and by health & safety guidance.

5. Cookies and similar technologies

Cookies are small files stored on your device. We use essential cookies to make the site work and, only with your consent, analytics and other non-essential cookies to understand how the site is used. When you first visit, our consent banner lets you accept all, reject non-essential, or choose by category — and you can change your choice at any time using the “Cookie settings” option. Non-essential cookies are blocked until you consent, and are deleted if you opt out.

The table below lists the cookies currently detected on this site, including their provider, purpose and how long they last. It is generated automatically and updates as our cookie scan runs.