Legal & Data Protection
Privacy Policy
Data Controller: ETAA Forklift Training Ltd (Company No. 12114459)
ETAA Forklift Training Ltd ("we", "us", "our") is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Data We Collect
- Booking & Quote Enquiries: Contact name, company name, email address, phone number, site postcode, and machinery/course requirements submitted via our quote form or calendar booking scheduler.
- Candidate Registration & Assessment Data: Candidate full name, date of birth, mobile number, email address, photograph, and optional National Insurance number required for official NPORS registration and card issuance.
2. How We Use & Share Your Data
We process personal data under contractual necessity and legal/accreditation compliance to:
- Provide tailored training quotations, schedule instructors, and send calendar invitations.
- Register candidates and submit assessment results electronically through the official My NPORS portal so NPORS operator cards can be issued.
- Route form enquiries and calendar bookings securely via our trusted processors (Formspree, Cal.com, and Cloudflare).
3. Data Security & NPORS Audit Retention
Digital records are stored on encrypted, passcode-protected devices. In accordance with mandatory NPORS accreditation and audit requirements, candidate assessment records and sign-in sheets are securely retained for 5 to 7 years, after which physical documents are confidentially shredded and digital records purged.
4. Your Rights
Under UK GDPR, you have the right to request access to, correction of, or erasure of your personal data (subject to statutory and NPORS regulatory retention rules), and the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).