Privacy policy
Effective date: 13 November 2026. Last updated: 13 November 2026.
This policy explains how Experienced Training Ltd (we, us, our) collects, uses, stores and protects personal data when we deliver business-to-business training and consultancy services, and through our website https://experiencedtraining.co.uk.
1. Who we are
| Data controller | Experienced Training Ltd |
| Company number | 12549529, registered in England and Wales |
| Registered office | 9 Windhill Crescent, Staincross, Barnsley, S75 5BN, United Kingdom |
| Contact | chrisw@experiencedtraining.co.uk |
2. Our services and our role
We provide facilitated training, workshops, consultancy, eLearning development and learning materials for systems implementation and change programmes. Training is delivered on client premises or through client-controlled systems. We do not operate, manage, monitor or administer client IT systems.
For website visitors, enquiries and our own business records, we are the controller. Where a client organisation gives us delegate details to deliver training, that organisation is usually the controller and we act as its processor, following its instructions.
3. Personal data we collect
Information you give us
Through the contact form: your first name, last name, email address and what is changing in your organisation. By email or phone: your name, job title, organisation, contact details, the content of your messages, booking and administration details, and any feedback you choose to give.
Please do not include health or other sensitive personal information in an enquiry.
Information a client organisation gives us
Delegate names, business contact details and role or team information needed to deliver training, and attendance or participation records where agreed.
Information collected when you use the website
Technical data (IP address, device and browser type) used to keep the site and form secure. If you accept analytics cookies: pages visited and interactions. Your cookie choice. See our cookie notice.
4. How we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Reply to an enquiry sent through the form, email or phone | Legitimate interests: responding to business enquiries |
| Arrange, deliver and administer training and services | Contract, or legitimate interests where the contract is with your employer |
| Billing, invoicing and contract administration | Contract and legal obligation |
| Keep the site and form secure and stop spam | Legitimate interests |
| Understand how the site is used (analytics cookies) | Consent, which you can withdraw at any time |
| Meet legal and tax duties | Legal obligation |
We do not use automated decision-making that has legal or similarly significant effects on you.
5. Who we share it with
We use these service providers to run the business and the website. They act on our instructions.
| Provider | What they do for us |
|---|---|
| HubSpot | Contact form, customer records (CRM) and the cookie banner. Our HubSpot account is hosted in HubSpot's EU data centre in Germany. |
| Website analytics (only if you accept) and reCAPTCHA spam protection on the form | |
| Hostinger | Website hosting |
| Microsoft 365 | Email and document storage |
| Professional advisers | Accountants and legal advisers, where needed |
| Regulators and authorities | Only where the law requires it |
We do not sell personal data.
6. International transfers
HubSpot stores our account data in the EU (Germany), which the UK recognises as providing adequate protection. Some processing by HubSpot and Google can take place in the United States. Where this happens, they rely on recognised safeguards set out in their data processing terms, such as the UK Extension to the EU-US Data Privacy Framework or approved contractual clauses.
7. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Experienced Training Ltd holds Cyber Essentials certification.
8. How long we keep it
| Record | Kept for |
|---|---|
| Contact form enquiries | Up to 24 months |
| Client training records | 6 years |
| Website analytics | Up to 26 months |
| Marketing communications | Until you unsubscribe |
| Financial records | 6 years |
After these periods, data is securely deleted or anonymised.
9. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent where we rely on consent. To use any of these rights, email chrisw@experiencedtraining.co.uk.
10. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
11. Children
Our services and website are not intended for children under 16, and we do not knowingly collect their data.
12. Client systems and regulated environments
We do not keep access to client systems after training or monitor how they are used. Training is delivered on client-provided equipment, accounts and networks unless agreed otherwise, and we are not responsible for faults in those systems. In regulated environments, including the NHS, defence, banking and government, the client remains responsible for its own internal policies and statutory duties.
13. Changes
We may update this policy. The date at the top shows the current version.