Version 5.0 – Last updated: 13/10/2025
Lifetime Training is committed to protecting your personal data. This Privacy Policy explains how and why we use your personal data, your rights, and how you remain in control of your information.
We will only process your personal data fairly, lawfully and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we use your personal data, please contact our Data Protection Officer (DPO):
· Email: DataProtectionOfficer@Lifetimetraining.co.uk
· Post: Data Protection Officer, Lifetime Training Group, 291 Paintworks, Arnos Vale, Bristol, BS4 3AW
· Telephone: 0333 0143 669 (Mon–Fri: 9am–5.30pm)
You may also contact the Information Commissioner’s Office (ICO) if you are not satisfied with our response (see section 14).
Lifetime Training Group Ltd is a private limited company, Company No. 03263608, registered in the UK. For the purposes of data protection law, we are the Data Controller (ICO Registration No. Z5165342).
We collect the following categories of personal data:
We may also receive data from other organisations (e.g., referral agencies, government departments).
4. Legal bases for processing
We only process your personal data when we have a lawful basis. The main bases we rely on are:
Where we process special category data (e.g., ethnicity, learning needs), we do so under Article 9(2)(b) UK GDPR (employment, social security and social protection law) or with your explicit consent.
We use personal data to:
We do not sell your personal data.
Some assessments may be marked using AI software. If automated decision-making is used:
Please contact the DPO if you wish to exercise these rights.
As an education provider, we regularly process the personal data relating to young people who enquire about courses and training opportunities.
We only share your data where necessary to deliver our services, with:
Funding bodies, regulators and government agencies (where legally required).
All third-party processors are bound by contracts that require them to keep your information secure and confidential.
We share personal data with the following organisations who provide services to us:
Data Processor |
Purpose of Processing |
Location of Data |
Aptem Ltd |
Saas Provider for Learner Management System |
Hosted in Microsoft Azure Data Centres |
Babble Cloud Limited |
Cloud telephony contact system |
Hosted in the UK |
Backupify |
Back-up solution for Lifetime’s Microsoft 365 data |
Data is hosted in the UK. |
Booking Live Software Ltd |
Booking Platforms for virtual classrooms |
Amazon Web Services (AWS), hosted in London |
Century Tech |
AI-driven platform which provides initial assessments and self-directed learning functions |
Data processed within the UK, EEA and the USA |
Click Dimensions |
Contact system for integrations with Dynamics 365 CRM |
Hosted in Microsoft Azure, Amsterdam (EU) |
Commify UK Ltd (Text Marketer) |
Processes telephone numbers and message content for communicating with learners |
Hosted in UK data centres |
Contact Systems |
Provider of cloud telephony systems to Lifetime Training |
Hosted in UK data centres. |
Delaware |
Provider of advanced ICT solutions and services to Lifetime with access to Lifetime's personal data.
|
Data is hosted in Microsoft CRM in UK based data centres. |
Forsta |
Surveying of learners on programme for quality purposes |
Data is processed mainly in the UK and EU but may also be processed in Bosnia, Australia and Singapore. |
J2 Research |
Telephone survey platfom, used for assessing learners for quality purposes |
Hosted in the UK |
Lockhart Hawkins |
To conduct compliance reviews in relation to ESFA funding rules and provide quality improvement for Lifetime |
Hosted in the UK |
Logic Melon |
Job applications platforms for apprenticeships |
Microsoft Azure, London |
Mercury XRM Limited |
Job applications platform integrations with Dynamics 365 CRM |
Hosted in the EEA |
Microsoft |
Data analysis, business intelligence and data forecasting; cloud computing environment. |
UK hosted Microsoft Azure. |
Microsoft |
Microsoft 365, including Office and Copilot. |
Microsoft Data Centres in London, Durham and Cardiff; data may be replicated to Data Centres in the EU (e.g. Amsterdam) for resilience. |
SCC Ltd |
Managed service provider and UK Hosted Data Centre for Lifetime Training |
Hosted in Birmingham, UK. Some processing takes place in Romania (EU). |
Thinkology |
Third-party IT website support for Lifetime Training |
Does not routinely process personal data but will have access to personal data in the course of its role supporting Lifetime Training. |
Twilio / SendGrid |
Cloud-based email distribution server for learner contact |
Hosted in the USA in Amazon Web Services |
ZenDesk |
Helpdesk SaaS service for learner support |
Hosted in Amazon Web Services in Dublin, Ireland |
Data Controller |
Purpose of organisation |
Location of Data |
City & Guilds |
Training organisation |
Please see City & Guild's Privacy Policy for details. |
Innovate Awarding |
End-point awarding organisation and part of the Lifetime Group |
Please see Innovate's Privacy Policy. |
International transfers: Some providers store data outside the UK/EEA (e.g., USA). Where this occurs, we use the UK International Data Transfer Agreement (IDTA) or other approved safeguards to protect your data.
We keep personal data only for as long as necessary. Typical retention periods are:
After retention periods, data is securely deleted or anonymised.
*If you withdraw consent for marketing, we will retain minimal details on file for the purposes of ensuring that unwanted marketing communications are not sent to you and for associated reporting purposes. This information will be retained for 6 years.
We will only send you marketing communications if you have opted in.
You can change your preferences or withdraw consent at any time by contacting us or using the preference management option in our communications.
You can unsubscribe from marketing communications by emailing hello@lifetimetraining.co.uk.
We use cookies and similar technologies to:
You can manage your cookie preferences on our Privacy Preferences page.
We use appropriate technical and organisational measures to keep your data safe, including:
You have the following rights under UK GDPR:
To exercise any of these rights, please contact our DPO.
If you are unhappy with how we handle your personal data, please contact our DPO in the first instance.
If you remain dissatisfied, you can complain to the ICO:
Website: www.ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We may update this Privacy Policy from time to time. The most recent version will always be available on our website.