Privacy policy

For questions or requests about your information, contact TSO Training at info@tso-training.co.uk or call 01794 765888. Our centre and office are at Brighton Hill, Dean Farm Buildings, Ropley, Alresford, SO24 9SQ.

Account information includes your name, email address and basic profile details shared by your chosen login provider. Your course profile can include your phone number, home address, date of birth, National Insurance number, employer details, job role, interests and preference about course updates.

We also keep course assignments, registration invitations and their delivery status. Hosting and login services process technical request and security information needed to run and protect the service.

Information is used to provide your account, handle enquiries and invitations, manage course records, and help authorised staff administer the service. Registration reminders and account messages support the service you have been invited to use. Your optional preference for course updates is recorded separately.

The purpose and lawful basis depend on the activity: responding to a request or providing a service, legitimate interests in keeping the service secure and records accurate, or your choice to receive optional updates. Contact us if you need to understand why a particular field is requested before supplying it.

Linking a card sends its registration number and the surname you enter to NPORS. The checker does not send your date of birth or National Insurance number. The returned card details, categories, expiry dates and photograph are saved as an imported snapshot. Linked cards refresh after successful sign-in.

You, authorised administrators and assigned active trainers can access the record within their permitted roles. You can unlink the card from your account. This deletes its saved details and photograph from the active application and stops future login refreshes; it does not change the record held by NPORS.

The website uses Auth0 for login, Vercel for hosting, Resend for invitation emails and managed PostgreSQL storage for records. Google or Microsoft also process login information if you choose their sign-in options. These services process the information needed for their part of the service.

Staff access is role-controlled. Provider processing locations can differ and may include countries outside the UK. Contact us for details of the providers, locations and safeguards that apply to your records or course arrangements.

Essential session and login cookies keep you signed in and protect account actions. The website does not require advertising cookies for these features. External login pages have their own cookie and privacy notices.

The cookie notice remembers its dismissal in your browser's local storage under tso-cookie-notice-v1. It stores only the word "acknowledged", not a user identifier. The preference remains until you clear site data or the notice version changes. Dismissing it does not grant permission for analytics or advertising.

Home addresses, dates of birth, National Insurance numbers and saved NPORS details are encrypted before database storage. Access controls and security logs support protection of the service, but no online system can be guaranteed completely secure.

Retention depends on the purpose of the record, ongoing account and course administration, and any applicable legal or scheme requirements. Signing out or completing a course does not automatically delete your profile. Ask us about the period and criteria that apply to your particular records.

Copies may remain in provider backups or service logs until those are rotated. Unlinking NPORS data removes the active copy but does not delete your account or other course records.

You can update your profile, change your preference for course updates and unlink NPORS data through your account. You can also contact us to ask about access, correction, deletion, restriction, objection or portability where those rights apply. We may need to verify your identity before handling a request.

You can raise a concern with the UK Information Commissioner's Office at ico.org.uk.