Privacy Notice for Driver CPC Training Courses

R3 Road Risk Reduction Ltd. registration number: ZB302132

1. About this training

R3 Road Risk Reduction Ltd. provides Driver CPC periodic training for individuals who drive professionally in the LGV sector.

We are committed to protecting and respecting your privacy. This notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure. By attending this training, you are agreeing to be bound by this policy.

The data controller for this training is R3 Managing Director. A data controller determines the reasons and how personal data is processed. For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register.

2. What data we need

The personal data we collect about you will include:

• Contact details
  • Name
  • Address
  • Telephone number
  • Email address
• Photographic image of drivers (remote delivery only to evidence attendance)
• Driver licence details
  • Photographic image of entitlements
  • Partial driving licence number
• Payment details
• CCTV (if applicable)

3. Why we need it

We need your personal data to:

• Send you details of the course
• Take payment for the course
• Confirm your identity
• Enable you to attend the course
• Issue an attendance certificate
• Upload completed periodic training hours on the Government’s Recording and Evidencing (R&E) database. You can find out more about how your data is used at the DVSA Personal Information Charter.

4. What we do with it

We collect, use and store the data you give us for the reasons set out in this policy.

The data is held digitally secure only by R3 Road Risk Reduction Ltd. at their base in Milton Keynes.

We will not:

• Sell or rent your data to third parties
• Share your data with third parties for marketing purposes

Your personal information may be shared with the Driver and Vehicle Standards Agency (DVSA) and/or the Driver Vehicle Agency (DVA) for the purpose of managing and monitoring approved training providers and periodic training courses. Where necessary, it may be shared with member state authorities to confirm Driver CPC entitlement abroad.

It may also be shared with Competence Assurance Solutions (CAS), who conduct audits on behalf of the Competent Authorities to ensure ongoing quality assurance and compliance with regulatory standards.

We will share your data if required to do so by law, for example by court order, or to prevent fraud or other crime.

5. How long we will keep your data

We will only keep your personal data for as long as it is needed for the reasons set out in this policy or as long as is required by law.

We are legally required to hold some types of information, for example data about your periodic training, to fulfil our statutory obligations for up to six years.

We will hold your personal data for:

• Six years for licence and attendance data

6. Where it might go

Our IT infrastructure and technology has been checked to make sure it’s safe and secure.

7. Your rights

By law, you have the right to:

• View your data: you can access your personal data free of charge and in digital format.
• Be informed: you should know and understand what happens with your data and why.
• Limit how your data is used: you can block and put restrictions on how your data is used, if it’s inaccurate or unnecessary.
• Say no: you can stop direct marketing and data processing when there’s no compelling reason to do it.
• Make changes to your data: you can update any data about you that’s out of date or false, without delay.

You have certain rights under data protection legislation, including the right to access, correct, or request the deletion of your personal data. If you wish to exercise any of these rights, please contact us using the details provided below.

8. Changes to this notice

We may change this privacy notice at our discretion at any time.

When we change this notice, the date on the page will be updated. Any changes to this privacy notice will be applied to you and your data as of the revision date.

We encourage you to periodically review this privacy notice to be informed about how your data is protected.

9. How to contact us

If you have any questions about anything in this document or if you consider that your personal data has been misused or mishandled, you can contact the Data Protection Officer at: