Last updated: 9 October 2026
This policy explains how Passion First Aid Ltd collects and uses personal information when you contact us, book a course, attend training or use this website.
Who we are
Passion First Aid Ltd is the data controller for the personal information described in this policy. We are registered in England and Wales, company number 10483445, at 7 Colethrop Way, Hardwicke, Gloucester GL2 4AZ.
Contact: Jim Jones, Director. Email enquiries@passionfirstaid.co.uk or call 07811 025169.
We are registered with the Information Commissioner’s Office (ICO), registration number ZA926224.
What information we collect
- Enquiries: your name, email address, phone number (optional), organisation and the details of your enquiry, when you use our contact forms, email or call us.
- Bookings and payments: the booking contact’s name, email address, phone number and billing address, and the names of the people attending. Card payments are processed by Stripe; we never see or store your full card details.
- Training records: the details we need to deliver your course and issue certificates, such as candidate names, attendance and assessment results. For accredited courses, our awarding organisations (Qualsafe Awards and Highfield) also require each candidate’s date of birth and sex, and require us to check each candidate’s identity on the day of the course, for example with photo ID or a bank card. We only look at it as proof of identity; we do not copy or keep it.
- Health information: if you tell us about a medical condition, pregnancy or special requirement so that we can support you safely during practical work, we use it only for that purpose and treat it in confidence.
- Marketing preferences: whether you have asked to receive articles and updates from us.
- Website use: information collected by cookies and similar technologies, such as pages visited and the device used. See “Cookies” below.
How and why we use it
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Replying to enquiries and sending quotes | Legitimate interests (responding to people who contact us) or steps before entering a contract |
| Taking bookings and payments, delivering training and issuing certificates | Contract |
| Registering candidates with our awarding organisations for accredited courses | Contract and legal obligation (awarding body requirements) |
| Supporting candidates with health conditions or special requirements | Explicit consent, or where necessary for health and safety |
| Keeping accounting and tax records | Legal obligation |
| Following up with organisations about training they have asked about | Legitimate interests |
| Sending articles and updates by email | Consent, which you can withdraw at any time |
| Understanding how our website is used | Consent (analytics cookies) |
Who we share it with
We do not sell your information. We share it only with organisations that help us run our business, under contracts that require them to protect it:
- Awarding organisations – Qualsafe Awards (QA) and Highfield, to register candidates and issue accredited certificates.
- Payment processing – Stripe.
- Website hosting and management – Hostinger, and Pink Elephant Media, which builds and maintains our website and sends website emails on our behalf.
- Customer records and email – Pipedrive, HubSpot and Microsoft 365.
- Website analytics – Google Analytics, through Google Site Kit.
- Reviews – Trustindex, which displays our Google reviews on this website.
Some of these providers may store data outside the UK. Where they do, they use safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum.
We may also share information where the law requires it.
How long we keep it
- Enquiries that do not lead to a booking: 3 years from our last contact.
- Booking, training and certificate records: 3 years from the date of the course, in line with the three-year certification and requalification cycle.
- Financial records: 6 years from the end of the financial year they relate to, as required by HMRC.
- Marketing preferences: until you unsubscribe, after which we keep a record so that we do not contact you again.
Cookies
Our website uses cookies that are needed for it to work, such as the booking basket and checkout. With your consent, we also use Google Analytics cookies to understand how visitors use the site. When you first visit, a cookie banner lets you accept or refuse analytics cookies. You can change your choice at any time using the “Manage consent” link at the bottom of every page.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information, or restrict how we use it
- object to our use of your information where we rely on legitimate interests, including for direct marketing
- withdraw your consent at any time, where we rely on consent
- ask us to transfer your information to another organisation, where this applies
To use any of these rights, email enquiries@passionfirstaid.co.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first so that we can try to put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.