In short
We collect only what we need to register you, deliver your course and issue your certificate. We never sell your data. You can access, correct or delete it at any time by writing to trainers@quest-training.com.
1. Who is responsible for your data
Quest Training is the data controller. We process personal data in line with the data protection laws that apply to us and our clients, including, where relevant, the EU and UK GDPR, the UAE Personal Data Protection Law, the Saudi Personal Data Protection Law, and Turkey's KVKK.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, job title, organisation, email, phone, country | You or your employer's nominating department |
| Booking and billing | Course, dates, invoice details, PO number, payment status | You, your employer, our payment provider |
| Training records | Attendance, assessments, feedback, certificate number | Generated during the course |
| Travel support | Passport name and nationality, only when you request an invitation letter | You |
| Website usage | IP address, browser, pages visited, referring site | Cookies and analytics tools |
We do not store card numbers; card payments are processed directly by our PCI-DSS certified payment provider.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Register you, deliver the course, issue and verify certificates | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Answer enquiries and send course confirmations | Contract / legitimate interest |
| Improve our courses using feedback | Legitimate interest |
| Send course calendars and offers | Consent (you can unsubscribe in one click) |
4. Who we share it with
We share data only as needed: with the trainer and venue delivering your course; with your employer when it made the booking; with service providers (hosting, email, CRM, payment, video-conferencing) bound by data processing agreements; with accreditation bodies when a course carries external credits; and with authorities when the law requires it. We never sell or rent personal data.
5. International transfers
Because we deliver courses in several countries, your data may be processed outside your country. We protect such transfers with contractual safeguards such as standard contractual clauses.
6. How long we keep it
- Training records and certificate data: 10 years, so we can verify and reissue certificates.
- Invoices and financial records: as required by tax law (typically 5–10 years).
- Marketing contacts: until you unsubscribe, or 3 years without engagement.
- Invitation-letter documents: deleted 6 months after the course.
7. Your rights
You may ask to access, correct, delete or receive a copy of your data, restrict or object to its processing, and withdraw consent at any time. We reply within 30 days. You may also complain to the data protection authority in your country.
8. Security
We use encrypted connections (HTTPS), access controls and regular backups, and limit access to staff who need it. No system is fully secure, and we will notify you and the authorities of a breach where the law requires.
9. Cookies
| Type | Purpose | Consent needed |
|---|---|---|
| Strictly necessary | Security, forms, remembering your cookie choice | No |
| Analytics | Understanding how visitors use the site | Yes |
| Marketing | Measuring ads and showing relevant course ads | Yes |
You can change your choice at any time through the Cookie Settings link in the footer.
10. Children
Our services are intended for professionals aged 18 and over. We do not knowingly collect data from children.
11. Changes and contact
We will post any update on this page with a new date and, for significant changes, notify registered clients by email. Questions about this policy or your data: trainers@quest-training.com.