Login
GET CSCS CARD

Privacy Policy

Book test for CSCS Crad

Privacy Policy

1. Overview of GDPR

The UK GDPR, which replaces the Data Protection Act 1998 and aligns with EU GDPR requirements, strengthens individuals’ control over their personal data. It applies to any organisation that collects or processes personal information and enforces strict standards to prevent data breaches and misuse.

We adhere to all GDPR requirements to ensure your data is processed lawfully, fairly, and securely.

2. What is Personal Identifiable Information (PII)?

Personally Identifiable Information (PII) is any data that can identify an individual either on its own or when combined with other information. Examples include:

  • Full name

  • Address

  • Date of birth

  • Contact details (email, phone)

  • IP address

  • Unique CITB reference numbers

Special Category Data includes more sensitive information such as:

  • Racial or ethnic background

  • Health information

  • Political or religious beliefs

  • Trade union membership

  • Biometric/genetic data

  • Sexual orientation

We only collect special category data where necessary and with your explicit consent.

3. Information We Collect

To provide our services, we collect the following information:

  • Name

  • Address

  • Date of Birth

  • Email address

  • Telephone number

  • IP address

  • CITB unique identifiers

4. Your Rights Under GDPR

As a data subject, you have several rights under the UK GDPR:

  • Right to be informed – You have the right to know how your data is being used.

  • Right of access – You can request a copy of your data at any time.

  • Right to rectification – You may request corrections to inaccurate or incomplete data.

  • Right to erasure – You can ask us to delete your data under certain conditions.

  • Right to restrict processing – You may limit how your data is used.

  • Right to data portability – You can request your data in a structured, electronic format.

  • Right to object – You may object to the use of your data for specific purposes.

To exercise these rights, please email:
📧 info@constructionscheme.co.uk

Requests are typically handled within 30 days. We do not charge fees unless the request is unfounded, excessive, or repetitive.

5. Payment Information

We do not collect or store payment details directly. All payments are processed via a secure third-party payment gateway. Construction Scheme has no access to your financial information.

Refer to the payment provider’s privacy policy for more details on how they handle your data.

6. Data Sharing & Processing

We process your information to fulfil the services you have requested. This includes:

  • Booking and delivering training or assessments

  • Communicating with you regarding your services

  • Providing required data to authorised providers

We only share data with third parties directly involved in service delivery:

We do not sell, rent, or share your information for marketing or advertising purposes.

7. Data Retention

We retain your data only as long as necessary. Once our contract with you is completed, we keep your records for 6 months for administrative purposes or to handle any follow-up queries.

After this retention period:

  • Your data is automatically deleted from our system.

  • Any related emails are manually removed from our records.

8. Data Storage & Security

Your data is stored on secure, encrypted servers. We use Secure Socket Layer (SSL) technology to encrypt data transfers, as shown by the padlock symbol in your browser.

Our data processors operate under strict contracts, preventing them from accessing or using your data without authorisation. Regular security checks are conducted to ensure your information remains protected.

9. Cookie Policy

Yes, our website uses cookies.

Cookies are small text files placed on your device to improve your experience. They help us:

  • Remember your preferences

  • Improve website functionality

  • Track website performance

  • Process items in your cart

You can control cookies through your browser settings. Disabling them may impact your experience on our site.

10. Third-Party Links

Occasionally, our website may include links to third-party sites. These sites operate independently and have their own privacy policies. We do not accept responsibility or liability for the content or practices of these external websites.

11. Google Advertising

We use Google AdSense and Google Analytics for advertising and performance tracking.

Google uses cookies, including the DART cookie, to show ads based on past visits to our site and others. You can opt-out through:

We honour Do Not Track (DNT) browser settings and do not enable third-party behavioural tracking.

12. Children’s Privacy (COPPA)

Our services are not directed to children under 13 years old. We do not knowingly collect or process personal data from children, and we do not allow third parties to do so through our website.

13. Data Breach Notification

In accordance with Fair Information Practices, if a data breach occurs, we will:

  • Notify affected users via email within 7 business days

  • Provide an in-site notification within 7 business days

We also support the Individual Redress Principle, which gives you the right to seek legal recourse if your data is mishandled.

14. CAN-SPAM Compliance

We collect your email to:

  • Provide service updates

  • Confirm bookings

  • Respond to customer enquiries

To comply with the CAN-SPAM Act, we agree to:

  • Never use false or misleading subjects/emails

  • Clearly identify marketing messages

  • Include our physical address in emails

  • Offer an easy opt-out option

  • Honour unsubscribe requests promptly

To unsubscribe, email us at:
📧 info@constructionscheme.co.uk

15. Contact Us

If you have any questions about this policy or wish to exercise your data rights, please get in touch:

Construction Scheme
Lynn Lane,
Staffordshire,
WS14 0ED,
United Kingdom
📧 info@constructionscheme.co.uk
🌐 www.constructionscheme.co.uk