Privacy Policy

DM Learning Ltd ("DM Learning", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use this website, book a course, submit an enquiry, or hold an account with us, why we collect it, how we use it, and what rights you have over it.

Who we are

DM Learning Ltd is a private limited company registered in England and Wales, company number 14668124, registered office 18 Lawton Street, Congleton, England, CW12 1RP. We are the "data controller" for the personal data described in this policy, meaning we decide how and why it's used.

For any question about this policy or your data, contact us at danny@lifeandsoul.ltd or +44 7368 194055.

What personal data we collect

We collect different data depending on how you interact with us:

Booking a course through your account. Full name, email address, phone number, company name (if applicable), postal address, and the details of the booking itself: course date, time slot, venue, and number of people attending. If you book on-site training at your own premises, we also hold the address you provide for that visit.

Certificates. Once you've completed a course, we hold a copy of your certificate (issue date, expiry date, and the PDF itself) against your account, so you can download it at any time.

ID, and course photos/video. Two forms of ID are checked on the day of your course, and photos and video are taken during the course, for verification purposes (confirming who actually attended and completed the practical assessment). These are stored securely and are only ever accessible to DM Learning staff, never shown to you or any other customer through your account, and never shared outside DM Learning except where legally required.

Contact and group-quote enquiries. If you use the contact form or request a group training quote, we collect your name, email, phone number, company name (where given), and the content of your message or quote request.

Account and login. Your email address and a securely hashed password (we never store your password in readable form). We keep a record of failed login attempts purely to protect your account from unauthorised access attempts.

Technical data. When you submit an enquiry through our website, we briefly record the IP address the submission came from. This is used only to prevent automated spam and abuse of the enquiry form, and is not used to identify or track you for any other purpose.

We do not collect payment card details through this website. Course fees are paid by bank transfer or in person; we do not process or store card numbers.

Cookies

This website currently uses one essential cookie: a secure session cookie that keeps you logged in to your account. It's strictly necessary for the site to function and doesn't require consent under UK law, and it's deleted automatically when your session ends.

We plan to add Google Analytics / Google Tag Manager to this site to help us understand how visitors use it (for example, which pages are most viewed). A cookie consent banner is already in place ahead of this: no analytics or advertising cookie will ever be set unless you actively accept it, and this policy will be updated to describe exactly what Google collects and for how long once that's live. You can change your answer at any time using the "Cookie Preferences" link in the footer of any page.

Why we use your data, and our legal basis

We only use your personal data where we have a lawful basis to do so:

To provide a service you've asked for (performance of a contract): taking a course booking, issuing and storing your certificate, responding to an enquiry or quote request, and managing your account.

Where we have a legitimate business interest: preventing spam and abuse of our forms, keeping records to run our business properly, and improving our course and enquiry-handling processes.

Where the law requires it: our approved training centre agreement with Highfield Qualifications, our awarding body, requires us to keep certain learner and assessment records for a set period, described below.

Where you've given consent: this will apply once analytics cookies go live, see "Cookies" above, and you can withdraw that consent at any time.

Who we share your data with

We don't sell your personal data. We share it only where necessary:

Highfield Qualifications, our accrediting awarding body, where required to register or verify a qualification.

Our website hosting provider, which stores the database and files that make this site work, and is bound to only process that data on our instructions.

WhatsApp (Meta), if you choose to contact us via the WhatsApp link on our site. Messages sent that way are subject to WhatsApp's own privacy policy in addition to this one, since Meta processes that message content on its own platform, not something we control.

We do not use any other third party to process contact-form or booking enquiries; submissions go directly into our own system.

How long we keep your data

Booking records and certificates are kept for 3 years from the date of issue, in line with our record-keeping obligations as a Highfield approved training centre. ID checks and course photos/video are kept for the same 3-year period, for the same verification purpose. Account details are kept for as long as your account remains active; you can ask us to close your account and erase your data at any time, subject to the retention obligation above for any completed bookings, certificates, ID checks, or course photos/video.

Contact form and group-quote enquiries are kept for up to 2 years from the date of your enquiry, so we can refer back to previous conversations if you get in touch again, after which they're deleted unless they've led to an active booking.

How we protect your data

Passwords are never stored in readable form. Certificates are stored outside any publicly accessible part of our website and can only be downloaded by the account they belong to, or by us as the training provider. All data is transmitted over an encrypted (HTTPS) connection. Access to customer data within our own systems is limited to what's needed to run the business.

Your rights

Under UK data protection law, you have the right to:

Ask us what personal data we hold about you, and get a copy of it (right of access). Ask us to correct inaccurate data (right to rectification). Ask us to delete your data, subject to our record-keeping obligations described above (right to erasure). Object to or ask us to restrict certain processing. Ask for your data in a portable format. Withdraw consent at any time where processing is based on consent (for example, analytics cookies once live).

To exercise any of these rights, contact us at danny@lifeandsoul.ltd. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Children's privacy

Our courses have a minimum candidate age of 18. This website is not directed at children, and we don't knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time, for example as our use of analytics tools changes. The "Last updated" date at the top of this page will always reflect the most recent version. We encourage you to check back periodically.

Contact us

DM Learning Ltd, 18 Lawton Street, Congleton, England, CW12 1RP.
Email: danny@lifeandsoul.ltd
Phone: +44 7368 194055