Privacy and Cookie Policy

Natural Touch Training Limited is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.

This Privacy and Cookie Policy explains how we collect, use, store and protect personal information when you visit our website, make an enquiry, book a training course, access online learning or otherwise interact with our services.

This policy applies to our website at https://naturaltouchtraining.co.uk/ and the services provided by Natural Touch Training Limited.

1. Register and Data Protection Notice

This document is the privacy and data protection notice for the customer, student, enquiry and website visitor information processed by Natural Touch Training Limited.

We process personal information in accordance with applicable UK data protection legislation, including:

  • The UK General Data Protection Regulation (UK GDPR).
  • The Data Protection Act 2018, as amended.
  • The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended.

These laws govern how organisations collect, use, retain, share and protect personal information and provide individuals with rights over their personal data.

We aim to collect only the information reasonably necessary to operate our website, deliver our training services, communicate with customers and fulfil our legal responsibilities.

2. Data Controller

The organisation responsible for deciding how and why personal information is processed is:

Natural Touch Training Limited
Valley Suite
Union Mill Business Centre
Watt Street
Sabden
BB7 9ED
United Kingdom

Email: [email protected]
Website: naturaltouchtraining.co.uk

For questions about this policy, requests relating to personal information or concerns about how your data is handled, please contact us using the email address above.

3. Register Name

For the purposes of this notice, our personal data records are collectively described as the Natural Touch Training Customer, Student, Enquiry and Website Visitor Register.

This is a descriptive name for the personal information we process in connection with our business activities. It is not a separate public register or a claim of registration with a regulatory authority.

The records covered by this notice include information relating to:

  • Website visitors and users.
  • Prospective students and people making enquiries.
  • Customers purchasing training courses or other services.
  • Students undertaking practical or online training.
  • Individuals subscribing to marketing communications.
  • Tutors and other individuals involved in delivering or administering training.

4. Legal Basis and Purpose of Processing Personal Data

We collect and process personal information only where we have a valid lawful basis under the UK GDPR.

4.1 Providing training and fulfilling contracts

We process information where necessary to enter into or perform a contract with you. This includes:

  • Processing training course bookings and purchases.
  • Registering students and managing training arrangements.
  • Providing access to online learning materials and student accounts.
  • Monitoring learning progress, assessments and course completion.
  • Arranging practical training with tutors.
  • Issuing certificates and maintaining appropriate training records.
  • Processing payments, refunds and booking changes.
  • Responding to requests relating to purchased services.

Lawful basis: Performance of a contract or taking steps at your request before entering into a contract.

4.2 Meeting legal obligations

We process certain information where necessary to comply with legal responsibilities, including accounting, taxation, consumer protection and data protection requirements.

Lawful basis: Compliance with a legal obligation.

4.3 Operating and improving our services

We may process information where reasonably necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms.

These activities may include:

  • Responding to enquiries and providing customer support.
  • Managing and improving our training services.
  • Maintaining website security and preventing fraud or misuse.
  • Investigating technical problems.
  • Maintaining appropriate administrative and training records.
  • Managing business relationships and resolving disputes.

Lawful basis: Legitimate interests in operating a secure, efficient and responsible training business.

4.4 Marketing and promotional communications

Where permitted by law, we may contact you with information about training courses, offers, events and other services that may interest you.

We rely on consent where required for electronic marketing. Where legally permitted, we may also contact existing customers about similar products or services under the applicable soft opt-in rules, provided the relevant conditions are met and an opportunity to opt out is available.

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us directly.

Lawful basis: Consent or legitimate interests, as appropriate and subject to applicable electronic marketing rules.

4.5 Website analytics and optional technologies

We use website analytics and may use advertising or campaign measurement technologies to understand website performance and improve our communications.

Where consent is legally required for these technologies, we request it through our cookie consent system before activating them.

Lawful basis: Consent for the use of non-essential cookies and similar technologies where required, with subsequent personal data processing carried out on an appropriate lawful basis.

5. Data Content — Information We Collect

Depending on your relationship with Natural Touch Training, we may collect and process the following categories of information.

5.1 Personal and contact information

  • Full name.
  • Email address.
  • Telephone number.
  • Billing address and other contact details.
  • Account username and relevant account information.
  • Information you voluntarily provide when contacting us.

5.2 Booking and payment information

  • Courses purchased or booked.
  • Booking references, dates, locations and training arrangements.
  • Order histories, invoices and payment records.
  • Payment status, instalment arrangements and refund information.
  • Discounts, vouchers and training credits associated with purchases.
  • Relevant correspondence about your bookings.

Payments may be processed by third-party payment service providers. We do not need to store complete payment card numbers or card security codes to maintain records of transactions.

5.3 Student and training information

  • Course enrolments and attendance records.
  • Online learning progress and course activity.
  • Assessment results and examination outcomes.
  • Case study submissions and completion records.
  • Qualifications or prerequisite training information where required.
  • Certificates issued and relevant certification details.
  • Communications concerning progress, course requirements and deadlines.

Where you voluntarily provide additional information relevant to your training arrangements, we will handle it in accordance with applicable data protection requirements. We request that you do not submit sensitive personal information unless it is genuinely necessary.

5.4 Technical and website information

When you use our website, certain technical information may be collected automatically, including:

  • Internet Protocol (IP) address.
  • Browser type and version.
  • Device type and operating system.
  • Pages visited and website interaction information.
  • Referral sources and campaign information.
  • Approximate geographical information derived from technical data.
  • Cookie identifiers and consent preferences.
  • Technical logs relating to security and website performance.

The availability and extent of analytics or marketing information depends on your consent choices and the technologies operating on the website.

6. Data Sources — Where We Obtain Information

We obtain personal information from several sources, including:

  • Information provided directly by you: Through enquiry forms, registration forms, checkout pages, course bookings, emails and other communications.
  • Customer accounts: Information provided when creating an account, purchasing courses or managing your details.
  • Online learning systems: Information generated through learning activities, assessments and course completion.
  • Training tutors: Relevant attendance, assessment, progress and completion information supplied by tutors delivering training on our behalf.
  • Payment providers: Transaction confirmations and payment status information received from payment processing services.
  • Cookies and similar technologies: Information collected through website functionality, analytics and optional marketing technologies.
  • Website hosting and security services: Technical information recorded as part of maintaining and protecting our website.

Where personal information is requested to complete a booking, provide access to training or comply with a legal requirement, failure to provide the necessary details may prevent us from delivering the relevant service.

Information requested solely for optional marketing or non-essential cookies is not required to purchase or access our training services.

7. Data Retention — How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting, contractual and administrative obligations.

Retention periods vary according to the type of information and why we need it.

  • Customer orders and financial records: Generally retained for at least six years, or longer where required by applicable tax, accounting or legal obligations.
  • Student training and certification records: Retained for an appropriate period to verify course participation, qualifications and certification, meet relevant awarding or accreditation requirements, and respond to reasonable future enquiries.
  • Online learning accounts: Retained while needed to provide account access, training services and associated administration, and subsequently where continued retention is justified.
  • Enquiries and correspondence: Retained for as long as reasonably necessary to respond, manage any ongoing relationship and maintain appropriate records.
  • Marketing information: Retained while there is a valid basis to send communications, subject to periodic review. Following an unsubscribe request, limited information may be retained to ensure the preference continues to be respected.
  • Technical, security and analytics information: Retained according to the relevant operational requirements, service settings and applicable retention controls.
  • Cookie preferences: Retained as necessary to remember and evidence your consent choices, subject to the consent management system’s settings.

We periodically review the personal information we hold and delete, anonymise or securely archive information when it is no longer required.

Where information must be retained to comply with legal obligations, establish or defend legal claims, or maintain legitimate certification records, it may not be possible to delete it immediately on request.

8. Data Disclosure and International Transfers

We do not sell your personal information.

We may share information with trusted organisations and service providers where necessary to operate our business, deliver our training services or meet legal obligations.

These may include:

  • Training tutors: Relevant student contact details, booking information, prerequisite information and training records needed to arrange and deliver courses.
  • Website and hosting providers: Services responsible for hosting, maintaining, securing and supporting our website.
  • Payment processors: Providers that securely process payments, refunds and related financial transactions.
  • Online learning and administrative platforms: Systems used to manage enrolments, learning progress, communication and student records.
  • Email and communication providers: Services used to deliver booking confirmations, training reminders, essential notifications and permitted marketing communications.
  • Analytics and advertising providers: Providers that support website measurement and marketing activity, where the relevant technologies are permitted and any required consent has been obtained.
  • Professional advisers and public authorities: Accountants, legal advisers, regulators and other authorities where disclosure is reasonably necessary or required by law.

We share only the information reasonably necessary for the relevant purpose and require appropriate safeguards where third parties process personal information on our behalf.

8.1 International data transfers

Some external technology providers may process or store personal information outside the United Kingdom.

Where a transfer of personal information outside the UK is subject to international transfer restrictions, we will ensure that an appropriate legal mechanism is available. This may include UK adequacy regulations or suitable contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, as applicable.

For further information about relevant international transfers and safeguards, please contact [email protected].

8.2 Data security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures include appropriate access restrictions, account security controls, secure website connections and the use of reputable technology service providers.

Although we take reasonable steps to protect information, no internet-based system can be guaranteed completely secure.

9. Rights of the Data Subject

Under the UK GDPR, you have a number of rights concerning your personal information. These rights are subject to applicable conditions and legal exceptions.

9.1 Right of access

You may request confirmation of whether we process your personal information and ask for a copy of that information.

9.2 Right to rectification

You may request that inaccurate or incomplete personal information be corrected or completed.

9.3 Right to erasure

You may request the deletion of personal information in certain circumstances, including where it is no longer necessary for the purpose for which it was collected.

This right is not absolute, and we may need to retain certain information to meet legal obligations or establish, exercise or defend legal claims.

9.4 Right to restrict processing

You may ask us to restrict the processing of your personal information in certain circumstances, such as while the accuracy of information is being checked.

9.5 Right to object

You may object to processing based on our legitimate interests in certain circumstances.

You have an absolute right to object to the processing of your personal information for direct marketing purposes. If you exercise this right, we will stop processing your information for direct marketing.

9.6 Right to data portability

Where applicable, you may request personal information you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller where technically feasible.

9.7 Right to withdraw consent

Where we rely on your consent to process information, you may withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9.8 Rights relating to automated decision-making

Where applicable, you have rights concerning certain decisions made solely through automated processing that produce legal or similarly significant effects.

9.9 Exercising your rights

To exercise any of your data protection rights, please email [email protected].

We may request reasonable information to verify your identity before responding to a request.

We will normally respond within one calendar month, subject to any extension permitted by data protection law. Most requests are handled without charge, although fees may be permitted in limited circumstances.

9.10 Complaints

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can investigate and respond.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office
Website: https://ico.org.uk/

10. Cookies

Necessary

These cookies are essential for the website to function and cannot be switched off.

CookieProviderPurposeDuration
kncc_consentKansleri Cookie ConsentStores your cookie consent preferences.1 year
wp_consent_functionalWP Consent APIWP Consent API: stores your consent choice for necessary cookies. Synced from your consent banner.30 days
wp_consent_statisticsWP Consent APIWP Consent API: stores your consent choice for analytics cookies. Synced from your consent banner.30 days
wp_consent_statistics-anonymousWP Consent APIWP Consent API: stores your consent choice for anonymous statistics. Synced from your consent banner.30 days
wp_consent_marketingWP Consent APIWP Consent API: stores your consent choice for marketing cookies. Synced from your consent banner.30 days
wp_consent_preferencesWP Consent APIWP Consent API: stores your consent choice for preference cookies. Synced from your consent banner.30 days
wp_consent_consented_servicesWP Consent APIWP Consent API: stores per-service consent overrides used by integrated plugins.30 days
wp-settings-1WordPressWordPress: stores admin personalisation settings.1 year
wp-settings-time-1WordPressWordPress: stores admin settings timestamp.1 year
woocommerce_items_in_cartWooCommerceWooCommerce: stores cart and session data.Session
woocommerce_cart_hashWooCommerceWooCommerce: stores cart and session data.Session
__stripe_midStripeUsed by Stripe to identify potentially fraudulent payments and support secure payment processing.1 year
eucookielawJetpackStores the visitor's previous acknowledgement of the Jetpack cookie notice.180 days
__stripe_sidStripeUsed by Stripe for payment security and fraud prevention during a browsing session.30 minutes
litespeed_tab_litespeed-page_optmLiteSpeed CacheRemembers the selected LiteSpeed Cache administration settings tab.180 days

Analytics

These cookies help us understand how visitors interact with the website by collecting and reporting information anonymously.

CookieProviderPurposeDuration
_gaGoogleGoogle Analytics: distinguishes unique users.2 years
_gidGoogleGoogle Analytics: distinguishes users for 24 hours.24 hours
tk_orJetpackJetpack Stats: measures site traffic and visitor activity.Session
tk_aiJetpackJetpack Stats: assigns an anonymous identifier used to measure site traffic.Session
_ga_2BJ4XKE8G0GoogleGoogle Analytics: stores and counts page views.2 years
tk_r3dJetpackJetpack Stats: measures site traffic and visitor activity.Session
tk_lrJetpackJetpack Stats: measures site traffic and visitor activity.Session
tk_qsJetpackJetpack Stats: records referral and navigation data for analytics.30 minutes
_ga_2QE000DX8DGoogleGoogle Analytics: stores and counts page views.2 years

Marketing

These cookies are used to deliver relevant advertisements and track ad campaign performance.

CookieProviderPurposeDuration
sbjs_migrationsWooCommerce Order Attribution (Sourcebuster)Order attribution: keeps traffic-source tracking data compatible across updates.6 months
sbjs_current_addWooCommerce Order Attribution (Sourcebuster)Order attribution: records how you reached the site on your current visit.6 months
sbjs_first_addWooCommerce Order Attribution (Sourcebuster)Order attribution: records how you first reached the site.6 months
sbjs_currentWooCommerce Order Attribution (Sourcebuster)Order attribution: stores the traffic source and campaign of your current visit.6 months
sbjs_firstWooCommerce Order Attribution (Sourcebuster)Order attribution: stores the traffic source and campaign of your first visit.6 months
sbjs_udataWooCommerce Order Attribution (Sourcebuster)Order attribution: stores visitor/session data used for marketing attribution.6 months
sbjs_sessionWooCommerce Order Attribution (Sourcebuster)Order attribution: links page views within a visit for attribution.30 minutes
mailerlite_checkout_tokenMailerLiteIdentifies a checkout session to manage email subscription preferences through MailerLite.2 days

11. Cookie Consent Management

Our website uses a cookie consent banner and preference management system to give visitors control over the use of cookies and similar technologies.

When you first visit our website, you are given the opportunity to accept or reject non-essential cookies and manage your preferences.

Our cookies are organised into the following categories:

11.1 Necessary cookies

These cookies are required for essential website functions, such as maintaining secure sessions, supporting shopping basket and checkout functionality, remembering essential settings and protecting the website.

Strictly necessary cookies do not require consent and cannot be disabled through our cookie preference system. You may be able to block them using your browser settings, although doing so could prevent parts of the website from working correctly.

11.2 Analytics cookies

Analytics cookies help us understand how visitors use our website, including which pages are visited and how visitors interact with our content.

This information helps us improve website usability, performance and the services we provide.

Analytics cookies that require consent are used only where the necessary permission has been obtained.

11.3 Marketing cookies

Marketing cookies may be used to measure advertising campaigns, understand the effectiveness of promotional activity and help deliver more relevant advertising.

Some marketing technologies may involve third-party services and the collection of information about website interactions.

Marketing cookies are optional and are used only where the necessary consent has been obtained.

11.4 Preferences cookies

Preferences cookies help the website remember choices you make, such as selected settings or other optional preferences, to provide a more convenient and personalised experience.

Where preferences cookies are not strictly necessary, they are controlled through the consent management system.

11.5 Changing or withdrawing your cookie consent

You can change your cookie preferences or withdraw your consent at any time using the cookie settings control available on our website.

Changing your preferences will affect the future use of optional cookies and similar technologies. It will not affect any processing that was lawful before consent was withdrawn.

You can also manage or remove cookies using your web browser settings. Please be aware that disabling certain cookies may affect website functionality, including account access, shopping baskets and checkout services.

Where optional third-party content or services are used, their operation may also be subject to the privacy and cookie policies of the relevant provider.

12. External Websites and Third-Party Content

Our website may contain links to external websites or content provided by third parties.

We are not responsible for the privacy practices of independently operated third-party websites. We recommend reviewing their privacy policies before providing personal information or using their services.

Where third-party content involves optional cookies or similar tracking technologies on our website, these will be subject to applicable consent requirements.

13. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our services, website functionality, legal requirements or data protection practices.

Any updated policy will be published on this page. Where changes are significant, we will take appropriate steps to bring them to your attention.

We recommend reviewing this page periodically to remain informed about how your personal information is handled.

14. Contact Us

If you have any questions about this policy, the information we hold about you or how your personal data is processed, please contact:

Natural Touch Training Limited
Valley Suite
Union Mill Business Centre
Watt Street
Sabden
BB7 9ED
United Kingdom

Email: [email protected]
Website: https://naturaltouchtraining.co.uk/

We are committed to handling your information fairly, respecting your privacy choices and responding appropriately to data protection enquiries.