Privacy policy
This Privacy Policy explains how HESTIA Fire Safety Ltd collects, uses and protects personal data when individuals use the HESTIA online training portal.
HESTIA is committed to protecting personal data and handling information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how HESTIA Fire Safety Ltd collects, uses and protects personal data when individuals use the HESTIA online training portal.
HESTIA is committed to protecting personal data and handling information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
HESTIA Fire Safety Ltd provides fire safety consultancy and training services.
When you access training through the HESTIA training portal, HESTIA Fire Safety Ltd acts as the data controller for the personal data collected and processed in connection with your training account.
2. Personal Data We Collect
When you register for or access a course on the HESTIA training portal, we may collect the following information:
• Name
• Email address
• Username and login credentials
• Organisation or employer (where provided)
• Course enrolment details
• Course progress and completion records
• Assessment results
• Certificates issued
Technical information may also be collected automatically, including:
• IP address
• Browser type
• Device information
• Date and time of access
This information is collected in order to operate the training portal and manage course participation.
3. How We Use Personal Data
HESTIA uses personal data for the following purposes:
• Creating and managing training accounts
• Providing access to online courses
• Recording course progress and completion
• Issuing training certificates
• Managing course administration
• Communicating with learners about their training
• Maintaining the security and functionality of the training portal
Personal data will only be used for legitimate training and business purposes.
4. Legal Basis for Processing
Personal data is processed on the following lawful bases:
Contractual necessity
Where personal data is required to provide access to training services.
Legitimate interests
Where processing is necessary to manage training delivery, maintain records, and operate the training platform effectively.
5. Data Storage and Security
HESTIA takes reasonable technical and organisational measures to protect personal data from unauthorised access, misuse, loss, or disclosure.
Personal data is stored securely within the training portal and associated website hosting systems.
Access to training data is restricted to authorised personnel where necessary to administer training services.
6. Data Retention
Training records may be retained for a reasonable period to allow learners or organisations to verify training completion.
Where certificates are issued, records may be retained to allow verification of certification.
Personal data will not be retained longer than necessary for the purposes for which it was collected.
7. Sharing of Data
HESTIA does not sell or rent personal data to third parties.
Personal data may be shared with service providers where necessary to operate the training portal, such as website hosting providers or learning platform services.
These providers are required to handle personal data securely and in accordance with applicable data protection laws.
Training Records
These records may be retained for a reasonable period to allow confirmation of training completion and replacement certificates where necessary.
HESTIA Fire Safety Ltd may retain records of course enrolment, completion and certification in order to verify training history where requested by learners, employers or other authorised parties.
8. Your Data Protection Rights
Under UK data protection law, individuals have rights regarding their personal data, including the right to:
• Request access to personal data held about them
• Request correction of inaccurate information
• Request deletion of personal data where appropriate
• Object to certain types of processing
Requests relating to personal data should be submitted using the contact details below.
9. Cookies
The HESTIA training portal uses cookies to ensure the website functions correctly and to support essential features such as user login sessions, course access and progress tracking.
These cookies are necessary for the operation of the training platform and do not collect personal data for advertising or marketing purposes.
By using the training portal, users acknowledge that these essential cookies are required for the platform to function.
10. Changes to This Privacy Policy
HESTIA may update this Privacy Policy from time to time to reflect changes in legal requirements or improvements to training services.
The latest version will always be published on the training portal.
11. Contact
If you have any questions regarding this Privacy Policy or the handling of personal data, please contact:
HESTIA Fire Safety Ltd
Email: office@hestiafire.co.uk