Privacy Policy

Anstey James Ltd ("we", "us", "our") is a company registered in England and Wales. Our registered address is 11 Oak Way, Lufton Trading Estate, Yeovil, BA22 8HS. We are the data controller for personal data collected through this website and in connection with our training and assessment services. If you have any questions about this policy or how we handle your data, please contact us: Email: info@ansteyjames.co.uk Phone: 01935 709031 Post: 11 Oak Way, Lufton Trading Estate, Yeovil, BA22 8HS

We may collect and process the following personal data: — Contact information: name, email address, telephone number and postal address when you submit an enquiry or contact form. — Booking information: name, employer, job role, and any relevant licence or certification details when booking a course or assessment. — Communication records: copies of emails, messages or correspondence you send us. — Website usage data: IP address, browser type, pages visited, and time spent on pages, collected via cookies and analytics tools (see Section 8). — Payment information: we do not store card details. Payments are processed securely by third-party providers.

We use your personal data to: — Process course bookings and assessments and communicate with you about them. — Respond to enquiries and provide information about our services. — Issue certificates, reports and other documents relating to training completed. — Send administrative communications (booking confirmations, reminders, invoices). — Send course availability updates or newsletters where you have opted in. — Comply with legal obligations (e.g. JAUPT reporting requirements for Driver CPC). — Improve our website and services through anonymised analytics.

We rely on the following lawful bases under UK GDPR: — Contract: processing is necessary to perform a contract with you (e.g. delivering a booked course). — Legitimate interests: where we have a genuine business reason that does not override your rights (e.g. responding to enquiries, fraud prevention, improving our services). — Legal obligation: where we are required to process data to comply with the law (e.g. JAUPT reporting for Driver CPC periodic training). — Consent: where you have actively opted in, such as subscribing to course alerts. You may withdraw consent at any time.

We do not sell your personal data. We may share it with: — JAUPT (Joint Approvals Unit for Periodic Training): as required to record and verify Driver CPC periodic training hours. — DVSA: where required for approved test administration. — Somerset Council: where training is delivered under contract and reporting is required. — IT and software providers: hosting, email and booking platforms that process data on our behalf under data processing agreements. — Professional advisers: accountants, solicitors or insurers, where strictly necessary. All third parties are required to handle your data securely and in accordance with UK GDPR.

We retain personal data only for as long as necessary: — Booking and training records: 6 years from the date of training, in line with Driver CPC and general business record requirements. — Enquiry and contact records: 2 years from the date of last contact. — Financial records: 6 years, as required by HMRC. — Marketing opt-in records: until you withdraw consent. After the relevant retention period, data is securely deleted or anonymised.

Under UK GDPR you have the right to: — Access: request a copy of the personal data we hold about you. — Rectification: ask us to correct inaccurate or incomplete data. — Erasure: ask us to delete your data where there is no lawful reason to continue holding it. — Restriction: ask us to limit how we use your data while a dispute is resolved. — Portability: receive your data in a structured, machine-readable format. — Objection: object to processing based on legitimate interests or for direct marketing. — Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at info@ansteyjames.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our website uses cookies to improve your experience. These include: — Strictly necessary cookies: required for the website to function (e.g. session management). These cannot be disabled. — Analytics cookies: used to understand how visitors use the site (e.g. Google Analytics). These are only set with your consent. You can manage cookie preferences through your browser settings. Disabling analytics cookies will not affect your use of the site.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website is served over HTTPS. Access to personal data within our organisation is restricted to those who need it to perform their role. While we take all reasonable precautions, no data transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately.

Our website may contain links to third-party websites (including our training partners). This privacy policy applies only to our website. We are not responsible for the privacy practices of external sites and encourage you to read their policies before submitting any personal data.

We may update this privacy policy from time to time. The current version will always be available on this page. We will notify you of material changes where we hold your contact details.