PRIVACY POLICY

1. INTRODUCTION

SSS Training Academy Ltd (“SSSTA”, “we”, “us”, “our”) is committed to protecting personal data and respecting the privacy of learners, employers, partners, and website users.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access our website, learning platform, courses, assessments, certificates, employer dashboards, or related services.

This policy applies internationally and is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. DATA CONTROLLER

Organisation: SSS TRAINING ACADEMY LTD

ICO Registration Number: ZC072728

We are the data controller for the personal data processed through our services unless otherwise stated.

3. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

• Names and contact details
• Account registration and login information
• Course enrolments, progress, assessment attempts, results, and certificates
• Employer account data, allocations, and reporting information
• Reviews, testimonials, and feedback (where submitted)
• Device, browser, IP address, and security-related metadata

Payment information is processed by third-party payment providers. SSSTA does not store card details.

4. HOW WE USE PERSONAL DATA

Personal data is used only where necessary and proportionate to:

• Deliver courses, assessments, certificates, and reports
• Manage learner, employer, and partner accounts
• Maintain platform security and assessment integrity
• Meet awarding-body, audit, and quality-assurance requirements
• Provide customer support and service communications
• Send marketing communications where permitted
• Analyse anonymised and aggregated data to support quality improvement and industry insight

We do not sell personal data and do not use learner data for fundraising.

5. MARKETING COMMUNICATIONS

Marketing Emails

SSSTA may use the email address provided by learners, employers, and account holders to send information relating to our courses, services, updates, promotions, and related training communications.

The lawful basis for these communications is legitimate interests, where there is a relevant and appropriate relationship with the individual, such as course registration, account creation, enquiry, employer allocation, or prior engagement with our services.

We have assessed that such communications are proportionate, expected, and do not override individual rights and freedoms.

Right to Object and Unsubscribe

Individuals have the right to object to marketing communications at any time, without providing a reason.

Every marketing email includes a clear and accessible unsubscribe link. Unsubscribing takes effect immediately and does not require login or further action.

Alternatively, individuals may contact us directly to opt out.

Objecting to marketing does not affect access to courses, assessments, certificates, learner accounts, or employer dashboards.

6. REVIEWS, TESTIMONIALS & FEEDBACK

SSSTA may invite learners, employers, or partners to provide reviews, testimonials, or feedback relating to their experience of our courses or services.

Where an individual actively confirms permission, reviews or testimonials may be used:

• On the SSSTA website
• On social media platforms
• In marketing or promotional materials

Reviews and testimonials are used for promotional purposes only where clear permission has been given at the point of submission.

Lawful Basis for Testimonials

The lawful basis for processing reviews and testimonials for promotional use is consent.

Consent is obtained through a clear confirmation step and is never pre-selected or implied. Consent may be withdrawn at any time by contacting SSSTA.

Withdrawal of consent does not affect course access, assessment outcomes, certificates, or learner rights.

Identification and Removal

Where consent is provided, testimonials may be published using a first name and organisation or in anonymised form.

Full names or additional identifying details are not published unless explicitly agreed.

Individuals may request removal of testimonials from future use at any time. Reasonable steps will be taken to remove content from future publications. Content already published in historic or third-party materials may not be immediately removable, but no further use will be made.

7. SHARING PERSONAL DATA WITH PARTNERS

SSSTA may share limited personal data with trusted third-party partners or service providers where necessary to support the delivery, promotion, sale, or administration of our services.

This may include partners supporting:

• Marketing communications
• Sales and customer relationship management
• Affiliate or promotional activity
• Platform, IT, or operational services

Data shared is limited to what is necessary, relevant, and proportionate for the specific purpose.

Safeguards

Where personal data is shared:

• Processing is governed by written, GDPR-compliant agreements
• Data may only be processed for the agreed purpose
• Data may not be sold, reused, or shared onward
• Appropriate technical and organisational safeguards are applied

SSSTA remains responsible for ensuring lawful and secure processing.

Lawful Basis for Partner Sharing

The lawful basis for partner and service-provider processing is legitimate interests, where there is a relevant and appropriate relationship with the individual.

Where consent is required by law, appropriate consent will be obtained.

Individuals retain the right to object to marketing-related processing at any time.

8. DATA RETENTION

Personal data is retained only for as long as necessary to meet contractual, statutory, regulatory, awarding-body, audit, and quality-assurance requirements.

Retention periods are reviewed regularly.

9. DATA SECURITY

SSSTA applies technical and organisational measures aligned with Cyber Essentials principles to protect personal data, platform security, and assessment integrity.

Access to personal data is restricted to authorised personnel and partners operating under appropriate safeguards.

10. YOUR RIGHTS

Under UK GDPR, individuals have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request erasure where applicable
• Restrict or object to processing
• Withdraw consent where consent is relied upon
• Lodge a complaint with the Information Commissioner's Office (ICO)

Rights requests can be made by contacting us directly.

11. COOKIES

Cookies are used to support secure login, platform functionality, analytics, and security monitoring.

Disabling cookies may limit platform functionality.

12. INTERNATIONAL USE

Our services are provided internationally. Personal data is processed in accordance with UK data-protection law, subject to mandatory local consumer protections where applicable.

13. POLICY UPDATES

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes. The current version will always be available on our website.