Fair Processing & Privacy Notice

Anstey James Ltd provides Driver CPC periodic training for individuals who drive professionally in the LGV and/or PCV sector. At Anstey James Ltd we are committed to protecting and respecting your privacy. This Notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure. By attending this training, you are agreeing to be bound by this policy. The data controller for this training is Anstey James Ltd (Company registration number: ZA052234). A data controller determines the reasons and how personal data is processed. For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register.

We will collect data from you today by asking for your driving licence, DQC card or Digital driver's card.

— Full name, date of birth, and home address — Photographic image — Driver Licence Details — Course payment details (collected prior to the course)

We need your personal data to: — Send you details of the course and process payments — Confirm your identity and log your course attendance — Issue an attendance certificate — Upload completed periodic training hours to the Government’s Recording and Evidencing (R&E) database

We collect, use and store the data you give us for the reasons set out in this policy. We strictly enforce that we will not sell or rent your data to third parties, nor share your data with third parties for marketing purposes. Your personal information may be shared with the Driver and Vehicle Standards Agency (DVSA) and/or the Driver Vehicle Agency (DVA) for the purpose of managing and monitoring approved training providers and periodic training courses. Where necessary, it may be shared with member state authorities to confirm Driver CPC entitlement abroad. It may also be shared with Competence Assurance Solutions (CAS), who conduct external audits on behalf of the Competent Authorities to ensure ongoing quality assurance and compliance with regulatory standards. We will also share your data if required to do so by law — for example, by court order, or to prevent fraud or other crime.

We’ll only keep your personal data for as long as it is needed for the reasons set out in this policy or as long as is required by law. We are legally required to hold data about your periodic training to fulfil our statutory obligations for up to 6 years. This information is stored securely in our system to prove attendance. After 6 years, it will be securely destroyed.

Our IT infrastructure and technology has been checked to make sure it’s safe, secure, and resilient against unauthorised access.

By law under data protection legislation, you have certain rights including: — Be informed: You should know and understand what happens with your data and why. — View your data: You can access your personal data free of charge and in a digital format. — Make changes to your data: You can update any data about you that’s out of date or false, without delay. — Limit how your data is used: You can block and put restrictions on how your data is used if it’s inaccurate or unnecessary. — Say no: You can stop direct marketing and data processing when there’s no ‘compelling reason’ to do it. If you wish to exercise any of these rights, please contact us using the details provided below.

We may change this privacy notice at our discretion at any time. When we change this notice, the date on the page will be updated. Any changes to this privacy notice will be applied to you and your data as of the revision date. We encourage you to periodically review this privacy notice to be informed about how your data is protected.