Privacy Notice & Cookies Policy
On this page
1. Who we are
This site, safeservefirstaid.co.uk, is operated by Andrew Holland, a sole trader trading as SafeServe First Aid (part of The SafeServe Group). For the purposes of UK data protection law, Andrew Holland is the data controller for personal data collected through this site.
Contact: andrew.holland@safeservefirstaid.co.uk · 01733 855359 · Trading address: Peterborough, Cambridgeshire, United Kingdom.
2. What personal data we collect
We collect personal data only when you interact with us. Specifically:
When you submit the enquiry form
- Your name and (if provided) organisation
- Email address and phone number
- Course of interest, approximate number of learners, delivery postcode, preferred date
- Any free-text details you choose to share in the "needs" field
- Your consent confirmation
When you book a call (Calendly)
- Your name and email address
- Your selected appointment time
- Any meeting context you add
When you contact us by phone, WhatsApp or email
- The contact details and content you choose to share
When you simply browse the site
- Standard server logs (your IP address, browser type and pages requested) for security and troubleshooting - these are essential and are not used to identify you personally.
- Analytics data via Google Analytics (Google Tag Manager) only if you have consented - see Cookies, below.
3. How we use your data and the legal basis for it
| What we do | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Respond to your enquiry and provide a quote | Legitimate interest (responding to enquiries received via our site); or steps prior to entering a contract where you are looking to book |
| Deliver a booked course, issue your certificate via ProTrainings, and provide aftercare | Performance of a contract for course delivery |
| Send you certificate-expiry reminders (with your prior consent) | Consent, which you can withdraw at any time |
| Keep accounting records for HMRC | Legal obligation (UK tax law) |
| Analytics & site improvement via Google Tag Manager / Analytics | Consent, given through our cookie banner |
We do not use your data for marketing to third parties, and we never sell personal data.
4. Who we share data with
We share personal data only where necessary, with these categories of recipient:
| Recipient | Purpose | Location |
|---|---|---|
| Netlify, Inc. | Website hosting and form submissions | USA (with UK GDPR-compliant safeguards) |
| Google LLC (Tag Manager & Analytics) | Anonymised site usage analytics - only if you consent | USA (Standard Contractual Clauses + UK addendum) |
| Calendly | Scheduling free 15-minute consultation calls | USA (UK GDPR-compliant safeguards) |
| ProTrainings UK | Issuing your accredited first aid certificate after course completion | UK |
| Our email provider, accountant, and any other service provider strictly necessary to deliver our services | Operational and statutory record-keeping | Mostly UK / EU |
We do not pass your data to anyone else, including for marketing purposes, unless we are legally required to do so (for example, in response to a court order or HSE / Ofsted investigation).
5. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiry form submissions and email correspondence (where no course was booked) | Up to 2 years from your last contact, then deleted |
| Course-delivery records (booking, certificate, invoice) | 6 years from the end of the relevant accounting year, to meet HMRC requirements |
| Certificate records held by ProTrainings | Per ProTrainings' retention policy - typically the lifetime of the certificate plus 3 years |
| Analytics data (anonymised / aggregated) | Up to 14 months in Google Analytics, then aggregated only |
| Marketing-consent withdrawals | Indefinitely, to honour your withdrawal of consent |
6. International transfers
Some of our service providers (notably Netlify, Google and Calendly) are based in the United States. Where personal data is transferred outside the UK, we rely on the safeguards approved by the UK Information Commissioner's Office - either the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum. You can request a copy of the safeguards by emailing us.
7. How we protect your data
We use industry-standard measures to protect your personal data, including:
- HTTPS / TLS encryption for all traffic to and from this site
- Hosting on a reputable provider with built-in DDoS protection and platform-level security
- Strong, unique passwords with two-factor authentication on all admin accounts
- Restricting access to personal data on a need-to-know basis
- Promptly reporting any personal data breach to the ICO within 72 hours where required
8. Your data protection rights
Under UK GDPR you have the right to:
- Be informed about how we use your data (this notice).
- Access the personal data we hold about you.
- Rectify any inaccurate data we hold about you.
- Erase ("right to be forgotten") your data, subject to our legal record-keeping obligations.
- Restrict how we use your data in certain circumstances.
- Data portability - receive your data in a structured, machine-readable format.
- Object to our processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
- Complain to the UK supervisory authority (the ICO).
To exercise any of these rights, email andrew.holland@safeservefirstaid.co.uk. We will respond within one month.
9. Children's data
Our courses are sometimes about first aid for children (Paediatric First Aid), but our site and services are aimed at adults - nursery managers, parents, sports coaches and employers. We do not knowingly collect personal data from children under 13. If you believe we have, please contact us and we will delete it.
10. Cookies
Cookies are small text files saved on your device that help websites function and gather information. We use a very limited set:
| Cookie / storage | Purpose | Type | Lifetime |
|---|---|---|---|
sss_consent (localStorage) |
Remembers your cookie consent choice so we don't ask again on every page | Essential | Until you clear browser storage |
| Netlify session cookies | Required for the contact form to work and to protect against form spam | Essential | Session |
_ga, _ga_* (Google Analytics via GTM) |
Anonymised analytics - how visitors find and use the site so we can improve it | Analytics (consent required) | Up to 14 months |
| Calendly cookies (only set if you open the booking widget) | Loading the booking widget and confirming your appointment | Functional | Session – 12 months |
Analytics cookies are blocked by default. They only fire if you choose "Accept analytics" on our cookie banner. If you choose "Essential only" (or take no action), no analytics cookies are set.
You can change your choice any time by clicking Manage cookie settings, or by clearing the site's local storage in your browser.
You can also disable cookies entirely in your browser. The main browsers' guides:
11. Changes to this notice
We may update this notice from time to time - for example to reflect new services, changes in technology, or changes in UK data protection law. The "last updated" date at the top of this page shows when the current version was published. Material changes will be highlighted clearly on this page.
12. Contact & complaints
If you have a question or concern about how we use your personal data, please contact us first - we'll do our best to resolve it quickly.
Andrew Holland (Data Controller)
SafeServe First Aid
Peterborough, Cambridgeshire, United Kingdom
andrew.holland@safeservefirstaid.co.uk
01733 855359
You can also complain to the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · Website: ico.org.uk
We'd appreciate the chance to put things right first, but you are entitled to go straight to the ICO if you prefer.