Privacy Policy

1. Introduction

Welcome to Free Staff Training. We are committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our training platform.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

To provide our cyber security training platform effectively, we collect and process the following types of information:

• Account Information: Name, email address, and company details when you or your administrator create an account.
• Training Data: Your progress through training modules, quiz scores, policy acknowledgements, and completion certificates.
• Usage Data: Information about how you access and use the platform, such as login times, IP addresses, browser types, and device information.
• Communication Data: Any information you provide when you contact our support team (e.g., via the Garvey's Helpdesk).

3. How We Use Your Information

We use the data we collect strictly to operate, maintain, and improve our services. Specifically, we use your information to:

• Provide and maintain the training platform functionality.
• Track training completion and generate compliance reports for your company's administrators.
• Manage user authentication and account security.
• Send administrative emails, such as training invitations, password resets, and completion reminders.
• Respond to your support requests and customer service inquiries.

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We only share information in the following circumstances:

• With your employer/administrator: Training progress, policy signatures, and completion status are visible to your company's designated platform administrators for compliance purposes.
• Service Providers: We use trusted third-party service providers (such as hosting and email delivery services) to operate our platform. These providers have access to your data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security and Retention

The security of your data is paramount. We implement industry-standard security measures, including encryption in transit and at rest, to protect your personal information from unauthorized access, alteration, or destruction.

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by your employer to maintain their compliance records.

6. Your Rights

Depending on your location (e.g., under the GDPR or UK GDPR), you may have the following rights regarding your personal data:

• The right to access, update, or delete the information we have on you.
• The right of rectification if your information is inaccurate.
• The right to object to our processing of your personal data.
• The right to request data portability.

If you wish to exercise any of these rights, please contact your company's administrator first, as they are the data controller for your training records. You can also contact us directly using the details below.

7. Contact Us

If you have any questions about this Privacy Policy, the data we hold on you, or if you would like to exercise your data protection rights, please do not hesitate to contact us:

• Support: Garvey's Helpdesk