Privacy Policy

Last updated: 6 October 2026

This policy explains what personal data MAC Training Solutions Limited ("MAC", "we", "us") collects, why we collect it, who we share it with and what rights you have. It covers this website, enquiries, course bookings and the training and testing we provide.

1. Who we are

MAC Training Solutions Limited is the data controller for your personal data. We are a private limited company registered in England & Wales, company no. 15148714. Our registered office is Bensgrove Lodge, Goring Heath, Reading, RG8 7RY, and our training centre is at Unit 1, Black Lakes, Aldermaston, RG7 4PG.

If you have any questions about this policy or your data, contact us:

• Email: info@macts.co.uk
• Phone: 07440 441940
• Post: MAC Training Solutions Limited, Bensgrove Lodge, Goring Heath, Reading, RG8 7RY

2. The personal data we collect

Information you give us

• Enquiries: when you use our enquiry form, email or phone us, we collect your name, email address, phone number, the course you're asking about and anything you put in your message.
• Bookings and payments: all bookings and payments are made through our booking and payment provider, Square. Square collects your name, contact details, the course and date you choose, and your payment details. Square processes your card payment. We do not see or store your full card number.
• Training and testing: to register you with an accrediting body and issue your card or certificate, we may collect your full name, date of birth, address, photograph, proof of identity, National Insurance number, existing card or registration numbers, CITB Health, Safety & Environment test details, and your training, assessment and test results.
• Health information: if you tell us about a medical condition, disability or other health matter that affects your safety, or the safety of others, when operating plant or machinery, or that needs reasonable adjustments, we will record it. This is "special category" data and we treat it with extra care.
• Company and group bookings: if your employer books training for you, they will give us your name and the details needed to register you. We will tell them whether you attended and passed.

Information collected automatically

Like any website, our hosting provider automatically processes basic technical information, such as your IP address, browser type and the pages you request, so it can deliver the site and keep it secure. We do not use analytics or advertising tracking on this website. See our Cookie Policy for details of cookies and similar technologies.

3. How we use your data and our lawful basis

We do not sell your data, we do not use it for automated decision-making, and we will not send you marketing without your permission.

4. Who we share your data with

We only share what is needed, with:

• Accrediting and awarding bodies such as NPORS, CPCS/CITB and EUSR (Energy & Utility Skills), to register you, record your results and issue cards and certificates. These bodies use your data under their own privacy policies.
• Square, our booking and payment provider, which handles all course bookings and payments (Square privacy notice).
• Netlify, which hosts this website and receives submissions from our enquiry form (Netlify privacy policy).
• Our email, IT and accountancy providers, who handle data for us under contract.
• Your employer, if they booked or paid for your training.
• Regulators, the police or other authorities, where the law requires it, for example the Health and Safety Executive after an incident.

5. International transfers

Some of our providers, including Netlify and Square, may process data outside the UK, for example in the United States. Where this happens, the transfer is protected by UK adequacy regulations (including the UK–US Data Bridge) or by the International Data Transfer Agreement or Addendum approved by the Information Commissioner.

6. How long we keep your data

• Enquiries that don't lead to a booking: up to 12 months.
• Training, assessment and test records: for 6 years after your course, or longer if an accrediting body requires it, so that we can confirm your qualifications and deal with any claims.
• Financial and booking records: 6 years from the end of the financial year they relate to, as required by HMRC.
• Health information: only for as long as it is relevant to your training, and no longer than your training record.

After that, we securely delete or anonymise it.

7. Keeping your data secure

We use appropriate technical and organisational measures to protect your data, including access controls, secure providers and encrypted connections (HTTPS) on this website. Only people who need your data to do their job can see it.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct inaccurate or incomplete data
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data where we rely on legitimate interests
• ask us to transfer your data to you or another organisation (data portability)
• withdraw your consent at any time, where we rely on consent

Some of these rights only apply in certain circumstances. To use any of them, contact us at info@macts.co.uk. There is normally no charge, and we will reply within one month.

9. Complaints

If you're unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.