Privacy Policy

  1. Introduction

    1. We are committed to safeguarding the privacy of our website visitors and people who communicate with us.
    2. This policy explains how we collect, use, disclose, retain and protect personal data in connection with the website at www.atscotland.com and related communications.
    3. We act as the data controller in relation to the personal data described in this policy, except where another party is identified as the controller.
    4. We use cookies and similar technologies on our website. Where consent is required, you can accept, reject or customise available categories through the consent controls provided.
    5. In this policy, “we”, “us” and “our” refer to Advance Training (Scotland) Limited. For more information about us, see the section headed Our details.

  2. Personal data we collect

    1. We may process contact and communication data when you contact us by email, telephone, post or another published contact method. This may include your name, contact details, organisation, the contents of your communication and related correspondence.
    2. We may process information that you submit through an enquiry, contact, callback, quote-request or similar form on our website. The fields shown on the relevant form determine the information collected.
    3. We may process technical and usage data about visits to our website. This may include an IP address, approximate location, browser type and version, device and operating-system information, referral source, pages viewed, visit duration, interactions and navigation information.
    4. We may process records of your cookie and consent preferences, together with technical identifiers used to remember or demonstrate those choices.
    5. Our website may retrieve and store review content and associated public reviewer information made available by third-party review platforms, then display that content locally on our website.
    6. We may also process information reasonably necessary to establish, exercise or defend legal claims, comply with legal obligations, prevent misuse and maintain the security of our website and business systems.

  3. How and why we use personal data

    1. Enquiries and communications - We may process contact, form and communication data to receive, assess and respond to enquiries, provide requested information, maintain correspondence and take steps at your request before entering into a contract. The legal bases are our legitimate interests in communicating with people who contact us and, where applicable, steps taken at your request before entering into a contract.
    2. Website operation and security - We may process technical, usage and security data to operate, maintain, troubleshoot, protect and improve our website and systems. The legal basis is our legitimate interests in the proper administration and security of our website and business.
    3. Analytics - We may process usage data through Google Analytics to understand how visitors use our website, measure performance and improve content and usability. The legal basis is consent where required.
    4. Legal compliance and claims - We may process relevant personal data to comply with legal obligations and to establish, exercise or defend legal claims. The legal bases are compliance with a legal obligation and our legitimate interests in protecting our legal rights.
    5. Where we rely on legitimate interests, those interests include responding to people who contact us, administering our business and website, improving our services, maintaining security and protecting legal rights. We consider whether those interests are overridden by your interests, rights and freedoms.
    6. We do not use the personal data described in this policy for solely automated decision-making that produces legal or similarly significant effects unless we tell you otherwise at the relevant time.

  4. Providing personal data to others

    1. We may disclose personal data to website hosts, developers and support providers; email and communications providers; analytics, security and consent-management providers; professional advisers; insurers; and other suppliers insofar as reasonably necessary for the purposes described in this policy.
    2. Google Maps or another mapping service may receive technical and usage information when map content is loaded or used, subject to the provider's own privacy terms and the consent controls available on our website.
    3. We may disclose personal data where necessary to comply with a legal obligation, protect vital interests, or establish, exercise or defend legal claims.
    4. We may disclose relevant personal data to a prospective purchaser, purchaser or successor in connection with a proposed or completed sale, transfer or reorganisation of all or part of our business, subject to appropriate safeguards.
    5. Our service providers may act as processors on our instructions or, in some circumstances, as separate controllers under their own privacy information.

  5. International transfers

    1. Some service providers used by our website or business may process personal data outside the United Kingdom.
    2. Where a restricted transfer takes place, we will use an applicable adequacy regulation, appropriate contractual safeguards or another lawful transfer mechanism, and carry out any assessment required by data protection law.
    3. You may contact us for further information about the safeguards relevant to your personal data.

  6. Retaining and deleting personal data

    1. We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and reporting requirements.
    2. We may retain enquiry and communication data for as long as needed to deal with the enquiry, maintain an appropriate business record and manage related legal rights.
    3. Technical, usage, security, analytics and consent records are retained in accordance with our operational needs and the settings of relevant technology providers.
    4. We may retain personal data for longer where required by law or reasonably necessary for the establishment, exercise or defence of legal claims.

  7. Security of personal data

    1. We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
    2. Data transmitted between your browser and our website may be protected using encryption technologies.
    3. No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
    4. You are responsible for keeping any account credentials confidential and for telling us promptly if you suspect unauthorised use.

  8. Your rights

    1. Subject to applicable limitations and exceptions, your principal data protection rights may include:
      1. access - to ask for confirmation of processing and copies of your personal data;
      2. rectification - to ask us to correct inaccurate data and complete incomplete data;
      3. erasure - to ask us to delete personal data in applicable circumstances;
      4. restriction - to ask us to restrict processing in applicable circumstances;
      5. objection - to object to processing based on legitimate interests and to object at any time to direct marketing;
      6. data portability - to receive or transfer certain data where the right applies;
      7. withdrawal of consent - to withdraw consent at any time where processing is based on consent, without affecting processing before withdrawal; and
      8. complaint - to complain to the Information Commissioner's Office or another competent supervisory authority.
    2. You have the right to object at any time to the processing of your personal data for direct marketing. You may also object to processing based on legitimate interests, although we may continue where the law permits and compelling legitimate grounds apply.
    3. Rights vary according to the circumstances and lawful basis. We may need to verify your identity and may request information needed to respond.
    4. You may exercise your rights using the contact details in this policy. You are not usually required to pay a fee, but the law permits a reasonable fee or refusal in limited circumstances.

  9. Third-party websites, services and data sources

    1. Our website may include links to third-party websites or use third-party services such as analytics, maps, embedded content, security, communications and consent-management tools.
    2. Third parties may collect information directly from your device or receive information from us, depending on the service and your consent choices. Their handling of personal data is governed by their own privacy information where they act as separate controllers.
    3. Review content displayed on our website may originate from Google or another third-party review platform and may be retrieved or synchronised using Business Review Bundle. The originating platform is responsible for how it collected and made that review information available.
    4. Because synchronised review content is displayed from our website, its local display does not by itself mean that a visitor's personal data is sent to the originating review platform when the page is viewed. Other services or links on the page may operate separately as described in this policy.
    5. We are not responsible for the privacy practices of third-party websites that you choose to visit.

  10. About cookies and similar technologies

    1. Cookies are small text files or identifiers stored on or accessed from your device. Similar technologies include local storage, pixels, tags and scripts.
    2. These technologies may be used for essential website operation and security, remembering preferences, providing functionality, measuring use and supporting third-party services.
    3. Some technologies are session-based and expire when the browser closes; others remain for a defined period or until deleted.
    4. Strictly necessary technologies may be used without consent where the law permits. Non-essential technologies are used only with consent where consent is required.
    5. Google Analytics may use cookies or similar technologies to collect usage information and produce reports about website activity. Analytics technologies are treated as non-essential where consent is required.
    6. Google Maps or another mapping service may use cookies or similar technologies when map content is loaded or used.

  11. Consent controls

    1. Our website provides controls through which you can accept, reject or customise available categories of non-essential cookies and similar technologies.
    2. You can change or withdraw a consent choice using the consent control made available on the website. Withdrawal does not affect processing that took place before the change.
    3. The categories and choices shown by the consent tool depend on the technologies configured on the website. The tool does not replace the information provided by relevant third parties.
    4. The standard website-theme consent interface is used to present and manage these choices.

  12. Browser and device controls

    1. Most browsers allow you to view, delete, block or restrict cookies and other website storage through their privacy settings.
    2. You may also be able to block third-party cookies, clear data when the browser closes or use private-browsing features.
    3. Browser and device controls operate separately from our website consent tool. Blocking all cookies or scripts may affect website functionality.

  13. Complaints

    1. If you have concerns about how we process personal data, please contact us first using the details in this policy so that we can try to resolve them.
    2. You also have the right to complain to the Information Commissioner's Office. Information about making a complaint is available at ico.org.uk/make-a-complaint/.

  14. Amendments

    1. We may update this policy from time to time by publishing a new version on our website.
    2. Where appropriate, we may notify you of material changes through the website or another suitable communication method.
    3. You should review this page occasionally to remain informed about how we use personal data.

  15. Our details

    1. The controller responsible for this website is Advance Training (Scotland) Limited, trading as Advance Training Scotland.
    2. We are registered in Scotland under company number SC643144, and our registered office is at Caldergrove House, 4 Linnet Way, Strathclyde Business Park, Bellshill, Lanarkshire, ML4 3RA.
    3. Our principal place of business is at 10 Caputhall Road, Deans Industrial Estate, Livingston, EH54 8AS.
    4. You can contact us by post at the address above, by telephone on 01506 353999, or by email at training@atscotland.com.
    5. These privacy arrangements should be read alongside our Terms & Conditions of Use.