Privacy Policy

Information We Collect

Lantra processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never request any unnecessary personal data from you and will not process your information in any way, other than as specified in this notice.

All data collected will be for legitimate business interest.

The fullest extent of personal data we will collect from you is: 

• Name
• Date of Birth
• Home Address
• Personal Email
• Business Email
• Home Telephone Number
• Mobile Telephone Number

How We Use Your Personal Data

Lantra takes your privacy very seriously and will only share your information with third parties where there is a legitimate business interest.

If you participate in a project funded by a third party, we may share your data with the funder and bulk mailing organisations.

We will never disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice and other guidance provided by Lantra. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time. To withdraw consent, please contact Sandie Absalom Data Controller, telephone 02476 696996.

The purposes and reasons for processing your personal data are detailed below:  

• We collect your personal data in the performance of a contract
• We will process your personal data as part of the programme guidelines
• As part of our contractual terms and conditions, individuals will receive regular updates regarding Lantra products and services and items of interest to our industry. Such information will be non-intrusive.

How Long Will You Keep My Data?

Lantra only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. Our policy is to keep your personal data for a minimum of seven years after which time it will be destroyed.

Sharing and Disclosing Your Personal Information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement.

Will I be contacted for marketing purposes?

We will only send you marketing emails relevant to the industry and the programme.

Your Rights

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

Please note: Lantra do not participate in automated decision making or profiling

You have the right to object to: 

If you exercise this right it may mean that Lantra will not be able to continue to provide the expected service delivery

• You have the right to be informed of any information Lantra processes and why we are processing this information
• You have the right to access any personal information that Lantra holds about you
• You have the right to rectification. If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so within 20 working days; unless there is a valid reason for not doing so, at which point you will be notified. Lantra will also advise any third parties holding your data to update as notified.
• You have the right to have data erased, however in doing so Lantra may not be able to continue to provide the expected service delivery, at your request data will be erased within 20 working day

You have the right to restrict processing of your personal data when:

• Direct marketing which is absolute, you do not need to demonstrate grounds for your objection, there are no exceptions which will allow processing to continue.
• Processing based on legitimate interests or performance of a task in the public interest/ exercise of official authority
• Processing for research or statistical purposes.
• The accuracy of the data is contested (for a period of time to enable the controller to verify the accuracy)
• The processing is unlawful and you object to the erasure of the data and request restrictions of its use instead
• You object to processing based on the grounds of legitimate business interests
• Where Lantra as the controller no longer requires the data but you do to exercise or defend a legal claim
• You have the right to data portability allowing you to obtain and reuse your personal data for your own purpose across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

Safeguarding Measures

Lantra takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including: 

• SSL/TLS for email encryption and SSL for website encryption
• Full live network protection through our firewall
• Network level protection between the secured and unsecured networks with centralised user authentication on our wireless network.
• Full antivirus scanning across all systems.

Transfers outside of the EU (if applicable)

Personal data in the European Union is protected by the General Data Protection Regulation DPA (2018) and UK GDPR but some other countries may not necessarily have the same high standard of protection for your personal data.

Lantra transfers personal data outside of the EU for the below purposes: 

• Email addresses to providers or organisations Lantra contracts with for legitimate business objectives to further our charitable objectives

Where we transfer personal information for the above reasons, we utilise the aforementioned safeguarding measures and mechanisms to ensure that your personal data is always safe and secure.

Making a Complaint

Lantra only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to make a complaint with the supervisory authority.

Make the complaint in the first instance to:

Lantra

Sandie Absalom – Data Controller (sandie.absalom@lantra.co.uk)

Lantra House, Stoneleigh Park, Coventry, CV8 2LG

Telephone: 02476 696996. 

Report a Concern

Information Commissioners Office (ICO) – Supervisory Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SKP 5AF

Telephone: 0303 123 1113

Visit: www.ico.org.uk

Cookie Notice

A ‘cookie’ is a piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. When you visit a site that uses cookies for the first time, a cookie is downloaded onto your computer/mobile device so that the next time you visit that site, your device will remember useful information such as items added in the shopping cart, visited pages or logging in options.

Cookies are widely used in order to make websites work, or to work more efficiently, and our site relies on cookies to optimise user experience and for features and services to function properly.

Most web browsers allow some control to restrict or block cookies through the browser settings, however if you disable cookies you may find this affects your ability to use certain parts of our website or services. For more information about cookies visit www.aboutcookies.org.

Changes to Lantra’s privacy policy

This Privacy Policy will be updated from time to time and therefore you may wish to revisit each time you are requested to provide us with information.

[1] Lantra Articles of Association July 2015 – Clause 3 “Objects.”

Lantra will always advise:

• Why we require your data
• With whom your personal data may be shared
• How long we intend to hold your data for and means of storage and disposal
• If we did not collect the data directly from you, information concerning the source.

We will share data with Welsh Government as our contractor and successful Training Providers who will deliver the training for you.

Your details may be passed on to other projects such as Project Helix and Cywain if this support is deemed the best option for your business. However, we will always seek permission from the business before sharing data.