Privacy Policy

1. Introduction & Legal Framework

The Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) require RTI Training, as a data controller, to inform you in a transparent and easily accessible format how we process your personal data.

This privacy notice sets out how we collect, use, store, and protect any personal information held about you, whom we share it with, and your statutory rights under data protection law.

What is Personal Data?

Personal data is any information relating to an identified or identifiable living individual (e.g., name, contact details, email address, IP address).

Special Category Data: The law gives extra protection to particularly sensitive information (such as health data, trade union membership, race, or ethnicity). RTI Training does not actively collect special category data through general website interactions unless explicitly required for course booking accommodations or health and safety prerequisites.

2. Data Controller & Contact Details

Data Controller: RTI Training
Address: 3 Lloyd Road, Broadstairs, Kent, United Kingdom, CT10 1HY
Email: alexwellard@rti-training.co.uk / jonmoore@rti-training.co.uk
Phone: 07367 210856 / 07367 210255
Data Protection Officers: Alex Wellard / Jonathan Moore
Data Protection Officers Email: alexwellard@rti-training.co.uk / jonmoore@rti-training.co.uk

3. Cookie Statement

Essential Cookies: Necessary for basic site functionality, including securing our contact forms (Google reCAPTCHA) and facilitating course bookings/login sessions.
Non-Essential Cookies: Analytics cookies (Google Analytics) used to measure visitors.

Cookies We Use

We use both essential and non-essential cookies to ensure our website functions correctly and to improve user experience.

Cookie / Service	Provider	Type / Category	Purpose
Usercentrics for Wix	Usercentrics GmbH	Essential	This is a consent management service. Usercentrics for Wix is used on the website as a processor for the purpose of consent management.
Google Analytics	Google LLC	Non-Essential (Analytics)	Collects anonymous visitor interaction data (pages visited, time on site) to help us improve website user experience.
Session & Cart Cookies	Wix.com	Essential	Keeps you logged in during your session and enables course booking cart functionality.

4. What Information We Hold & How We Collect It

We collect and process personal data in the following ways through our website:

Course Bookings & Account Administration: Full names, email addresses, phone numbers, job titles, and company details provided when setting up an authorised client login or booking candidates onto rail training courses.
Website Enquiries: Names, email addresses, and message content supplied via our "Contact Us" or online booking enquiry forms.
Automated Interaction Data (Cookies & Analytics): IP addresses, browser types, and navigation paths collected via Google Analytics to help us evaluate and enhance site performance.
Spam Prevention: Technical data processed via Google reCAPTCHA to prevent automated spam submissions through our messaging systems.

5. How We Use Your Data & Who Uses It

Purpose: Data provided via the website is strictly used to process course bookings, fulfil your specific enquiries, manage client account logins, and administer training services.
Internal Access: Personal data is only accessible by RTI Training staff members and authorised management who have a genuine business need to process it.
Third Parties: RTI Training will not sell, rent, or pass your personal information to third parties for marketing purposes. Analytics data is shared only with our website development team to optimise user experience.

6. Data Storage & International Transfers

Your data is held securely under the control of RTI Training in accordance with UK data protection legislation.

Website Platform (Wix.com): Data collected via our online forms and member accounts is securely hosted on Wix servers for administrative purposes in compliance with our internal Data Protection Policy. For details on how Wix manages data, visit wix.com/about/privacy.
Cloud & Email Infrastructure (Microsoft 365): We use Microsoft 365 services (including Outlook, OneDrive, and SharePoint) to store and manage operational data and email communications. Data in transit is encrypted using Transport Layer Security (TLS), and data at rest in Microsoft cloud services is protected using BitLocker 256-bit Advanced Encryption Standard (AES) encryption.

Where data hosted by Microsoft or Wix is processed outside the UK/EEA, it is safeguarded using Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) and European Commission, alongside Microsoft's UK GDPR Data Boundary commitments. You can review Microsoft’s privacy compliance at microsoft.com/trust-centre/privacy.

7. Retention Period

We retain your personal information only for as long as necessary to fulfil the operational purpose for which it was collected (including meeting any legal, accounting, or course certification reporting requirements). When no longer required, electronic records are securely deleted or anonymised.

8. Your Statutory Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to be Informed: Transparent information on how your data is used (this policy).
Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal requirement for us to keep it.
Right to Object / Restrict Processing: Object to or restrict processing based on legitimate interests.
Right to Data Portability: Request transfer of your data to another provider in a structured format.
Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent.

9. Complaints & Policy Updates

Complaints: If you have concerns about how RTI Training handles your personal data, please contact us first at [Insert DPO/Company email]. You also have the right to lodge a complaint directly with the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to This Policy: We keep this policy under regular review. Any significant changes to how we process personal data will be posted clearly on our website.