Privacy Policy

Privacy Policy

Effective Date: 1st  October 2024

Introduction

Williams Medical and Safety  is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data when you use our web-based Health and Safety training services ("Services"). It applies to all users of our website and Services, in compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts.

Please read this Privacy Policy carefully to understand our views and practices regarding your personal data and how we will treat it.

1. Data Controller

For the purposes of the GDPR and Irish Data Protection Acts, George Williams is the data controller responsible for the processing of personal data described in this policy.

2. Data We Collect

We may collect and process the following personal data from you:

• Personal Information: Name, email address, phone number, job title, and employer details.
• Training Information: Records of the courses you have taken, your performance in training sessions, and certifications achieved.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our Services, including pages accessed and actions taken.

3. How We Use Your Data

We use the personal data we collect to:

• Provide you with access to our Health and Safety training courses.
• Manage and monitor your training progress and certifications.
• Respond to inquiries and provide customer support.
• Maintain and improve the functionality and security of our website and Services.
• Ensure compliance with legal obligations, including health and safety regulations.

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: When you provide clear and explicit consent for us to process your personal data (e.g., when subscribing to our newsletter).
• Performance of a Contract: Processing is necessary to deliver our Services and meet contractual obligations.
• Legal Obligation: We may process personal data to comply with legal obligations, such as maintaining health and safety records.
• Legitimate Interests: We process personal data to improve our Services, monitor their use, and ensure security, provided such interests are not overridden by your rights.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Training records will be retained in line with applicable health and safety regulations, typically for 3–6 years after course completion.

6. Data Sharing and Transfers

We do not sell, trade, or rent your personal data to third parties. However, we may share your data with:

• Service Providers: Trusted third-party providers who assist us in operating our Services (e.g., hosting, data storage, or customer support) and who process your data under strict confidentiality and data security agreements.
• Regulatory Authorities: To comply with legal obligations, we may share your personal data with regulators or government bodies, such as the Health and Safety Authority (HSA), if required.

When transferring personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses.

7. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or damage. These include encryption, secure servers, and access controls.

However, no online transmission of data is entirely secure. While we do our best to protect your personal data, we cannot guarantee the security of your data transmitted through our website, and any transmission is at your own risk.

8. Your Rights

As a data subject, you have several rights under the GDPR and Irish Data Protection Acts, including:

• Right to Access: You have the right to request access to your personal data.
• Right to Rectification: You can ask us to correct or update inaccurate personal data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data under certain circumstances.
• Right to Restriction of Processing: You can ask us to restrict processing of your data in certain situations.
• Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
• Right to Object: You can object to the processing of your personal data where we rely on legitimate interests as the legal basis.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of your rights, please contact us at [insert contact email]. We will respond to your request within one month.

9. Cookies

Our website uses cookies to distinguish you from other users. This helps us provide you with a better user experience. For detailed information on the cookies we use and the purposes for which we use them, please refer to our Cookie Policy [link to Cookie Policy].

10. Third-Party Links

Our website may contain links to external websites. If you follow a link to any of these websites, please note that they have their own privacy policies, and we do not accept any responsibility for their content or practices.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, technology, or our practices. Any changes will be posted on this page, and where appropriate, notified to you by email.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please contact us at:

Williams Medical and Safety
Sligo
info@williamsmedicalandsafety.com
0860108785

If you are not satisfied with how we process your personal data, you also have the right to lodge a complaint with the Data Protection Commission in Ireland:
Data Protection Commission
Phone: +353 57 868 4800

This Privacy Policy is drafted in accordance with the GDPR and Irish Data Protection Acts, ensuring the protection of personal data while using our Services.