Contact
Login

Effective Date: September 2024 

  1. Introduction

R3 Safety and Rescue (“R3 SAR”, “we”, “us”, “our”) is committed to ensuring that your privacy is protected and complies with the General Data Protection Regulations (GDPR). This privacy policy explains how we use the information we collect about you, how you can instruct us if you prefer to limit the use of that information, and the procedures we have in place to safeguard your privacy. 

By submitting your information to R3 SAR by email, use of the R3 SAR website, or otherwise, you consent to the use of that information as set out in this policy. R3 SAR may modify the terms of this policy from time to time, and any changes will be posted on this page. 

  1. Information Collection and Use

Should you provide R3 SAR with your contact information (such as name, company, address, and email address), this information will only be used to contact you for the purpose for which you have expressed an interest. 

Where your contact information has been provided to R3 SAR for training, consultancy, or services, your information may also be passed to a third party, including accrediting bodies. 

  1. Cookies

A cookie is a piece of data sent to a website user’s browser and stored on a user’s hard drive, tied to session information about the user. On the R3 SAR website, cookies are used to store navigation settings. No personally identifiable information is stored in the cookie, and once a browser is closed, the cookie terminates, except for recalling your navigation settings when you return to the site. 

  1. Security

While R3 SAR takes all reasonable precautions to protect personally identifiable information from loss, misuse, alteration, or destruction and complies with the Data Protection Act, the sender may not adequately secure data transmission over the Internet. As a result, R3 SAR cannot ensure the secure receipt of any information sent to us by this medium, and any such information is sent at your own risk. 

  1. Updating and Deleting

If the contact information held by R3 SAR changes, or if you wish R3 SAR to delete certain contact information from our records, please notify us via email. 

  1. What Personal Data Do We Collect?

R3 SAR may collect your name, date of birth, email address, relevant medical conditions, next of kin name and contact number, and employer details. Candidates or the person making the course booking provide this personal data. 

How Do We Use Personal Data? 

R3 SAR may use personal data where necessary to undertake administration in relation to training completed, provide certificates or other records of learning, or to contact candidates directly in relation to quality assurance processes, investigations, appeals, and complaints. 

We may also process your personal data if required by law, including to respond to requests by government or law enforcement authorities, or for the prevention of crime or fraud. 

Who Do We Share Personal Data With? 

R3 SAR may share personal data with awarding organisations or other bodies to achieve certification and fulfill course delivery. (e.g. Rescue 3 Europe). 

We take all reasonable steps to ensure that our staff protect personal data and know their information security obligations. We limit access to candidate personal data to those with a genuine requirement to know. 

We may also share personal data with law enforcement or other authorities if required by applicable law. 

How Long Will We Keep Personal Data? 

R3 SAR will retain personal learning, assessment, and certification data to provide information about a candidate’s learning or replacement certificates. 

We will retain personal data relating to quality assurance processes, appeals, or investigations for a minimum period of 3 years and a maximum of 7 years to ensure compliance with any contractual, legal, audit, and other regulatory requirements. 

  1. Personal Data Protection

R3 SAR takes reasonable steps to protect personal data from loss or destruction. We also have procedures in place to deal with any suspected data security breach. We will notify candidates and any applicable regulator of a suspected data security breach where legally required to do so. 

  1. Candidate Rights

Under the GDPR, course candidates have various rights with respect to R3 SAR’s use of personal data: 

Right to Access 

Candidates have the right to request a copy of the personal data that R3 SAR holds about them by contacting the data controller at the email or postal address given below. Any request should include information that will enable R3 SAR to verify the candidate’s identity. We will respond within one month of the request.  

Note: There are exceptions to this right. We may be unable to make all information available if, for example, it would reveal personal data about another person, if we are legally prevented from disclosing such information, or if there is no basis for the request, or if it is excessive. 

Right to Rectification 

We aim to keep personal data accurate and complete. We encourage candidates to make contact using the contact details provided below to update any personal data that is not accurate or changes, so that personal data is up-to-date. 

Right to Erasure 

Course candidates have the right to request the deletion of their personal data where, for example, the personal data is no longer necessary for the purposes for which it was collected. 

  1. Contact

If you have any queries about this Policy, how R3 SAR processes personal data, or about exercising any of their rights, they can contact the Data Controller by sending an email to info@r3sar.com or writing to: 

R3 Safety and Rescue 
The Old School 
Glyndyfdwy 
LL21 9HH 

  1. Complaints

If you believe that your data protection rights may have been breached, and R3 SAR has been unable to resolve your concern, you may complain to the applicable supervisory authority or seek a remedy through the courts. Please visit https://ico.org.uk/make-a-complaint/ for more information on reporting a concern to the UK Information Commissioner’s Office.