Privacy Notice
Produced: 13/04/2026
Version: 1
1. Introduction
1.1. BML Clinical Resuscitation Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
1.2. This Privacy Notice explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1.3. This Notice applies to all individuals who engage with our services, including delegates, clients, website users, and organisational contacts.
2. Data Controller
2.1. BML Clinical Resuscitation Ltd is the data controller responsible for your personal data.
2.2. Contact details can be found in section 20.
3. Definitions
3.1. “Personal Data” means any information relating to an identified or identifiable individual.
3.2. “Special Category Data” includes information relating to health or physical condition.
3.3. “Processing” means any operation performed on personal data, including collection, storage, use, and deletion.
4. Principles of Data Processing
We process personal data in accordance with the UK GDPR principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
5. Personal Data We Collect
5.1. Identity Data
- Full name
- Job title / professional role
5.2. Contact Data
- Email address
- Telephone number
- Postal address
5.3. Booking and Training Data
- Course bookings and attendance records
- Assessment outcomes
- Certification status and history
- Pre-course learning completion
5.4. Payment Data
- Billing address
- Payment transaction records (we do not store full card details)
5.5. Technical Data (Website Use)
- IP address
- Browser type and version
- Device and usage data
5.6. Special Category Data
- Health or physical information voluntarily disclosed to ensure safe participation in
practical training (e.g. CPR)
6. How We Collect Your Data
6.1. Directly from you (e.g. booking forms, emails, phone calls)
6.2. From your employer or organisation (for corporate bookings)
6.3. From online systems (e.g. booking platforms, e-learning portals)
6.4. Automatically through website usage (cookies and analytics)
7. How We Use Your Personal Data
We use your data for the following purposes:
7.1. To process and manage Bookings
7.2. To deliver Courses, including practical training and assessments
7.3. To issue and maintain certification records
7.4. To communicate with you regarding Courses and related services
7.5. To comply with legal and regulatory obligations
7.6. To maintain health and safety standards during training
7.7. To improve our services and training delivery
8. Lawful Bases for Processing
We rely on the following lawful bases:
8.1. Contract – to fulfil our obligations in delivering Courses
8.2. Legal Obligation – for compliance with legal and regulatory requirements
8.3. Legitimate Interests – for business operations, record-keeping, and service improvement
8.4. Consent – for processing Special Category Data (e.g. health information)
9. Special Category Data
9.1. We only process health-related information where necessary to ensure safe participation in training.
9.2. Such data is:
- Collected only when voluntarily provided
- Used solely for safety and accessibility purposes
- Stored securely and accessed only where necessary
9.3. You may withdraw your consent at any time; however, this may affect your ability to
participate safely in the Course.
10. Data Sharing
10.1. We may share your data with:
- Employers or booking organisations (where applicable)
- External trainers or assessors delivering Courses on our behalf
- IT service providers (e.g. booking systems, cloud storage)
- Professional advisors (e.g. legal, accounting)
- Regulators or authorities where required by law
10.2. Where Courses are delivered in alignment with clinical guidelines from Resuscitation Council UK, personal data is not routinely shared with that organisation, unless explicitly stated.
10.3. We do not sell or rent your personal data.
11. Data Security
11.1. We implement appropriate technical and organisational measures to safeguard your
data, including:
- Secure electronic storage systems
- Password-protected access
- Restricted access to personal data
- Secure disposal of data
11.2. We take reasonable steps to protect data from loss, misuse, unauthorised access, or disclosure
12. Data Retention
12.1. We will retain personal data for as long as necessary to fulfil our purposes set out in this Privacy Notice, or to comply with the law.
13. Certification and Verification
13.1. We may retain your data for the purpose of:
- Verifying training completion
- Responding to employer or third-party verification requests
14. Your Rights
Under UK GDPR, you have the right to:
14.1. Access your personal data
14.2. Request correction of inaccurate or incomplete data
14.3. Request erasure of your data (where applicable)
14.4. Restrict processing
14.5. Object to processing based on legitimate interests
14.6. Request data portability
14.7. Withdraw consent (where processing is based on consent)
Requests should be made using the contact details in Section 20.
15. Cookies and Website Usage
15.1. Our website may use cookies and similar technologies.
15.2. These are used to:
- Improve user experience
- Analyse website performance
- Support functionality
16. International Data Transfers
16.1. We do not routinely transfer personal data outside the UK.
17. Third-Party Links
17.1. Our website or communications may contain links to third-party websites.
17.2. We are not responsible for the privacy practices of those websites.
18. Complaints
18.1. If you have any concerns about our use of your personal data, you can make a
complaint to us using the contact details contained within this privacy notice.
18.2. If you remain unhappy with how we’ve used your data after raising a complaint with us,
you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
19. Updates to This Privacy Notice
19.1. We may update this Privacy Notice periodically.
19.2. The latest version will always be available upon request or on our website.
20. Contact Information
BML Clinical Resuscitation Ltd
10 High Street,
Ammanford,
Carmarthenshire,
SA18 2LY
RhysWilliams@BMLclinicalresuscitation.co.uk
07971373813
www.BMLclinicalresuscitation.co.uk
21. Acceptance
By engaging with our services, you acknowledge that you have read and understood this Privacy Notice.