Privacy Policy

This policy explains what TTS Training Services Ltd does with your personal information when you book a PAT testing course, buy something from our shop, ask us for a quote, or simply visit this website. It was last updated on 9 August 2026.

We have written it in plain English. If anything in it is unclear, or you want to know something it does not cover, please ring the office on 01793 497181 or email office@tts-uk.co.uk and we will answer.

Who we are

TTS Training Services Ltd is the data controller for the information described here. That means we decide what is collected and why, and we are responsible for looking after it.

• Address: Stratton Park House, Swindon, SN3 4HG
• Telephone: 01793 497181
• Email: office@tts-uk.co.uk
• VAT registration: GB 994 654658
• Company registration: 08368008 (registered in England and Wales)
• ICO registration: ZB530457

This policy covers www.pat-training-now.co.uk. Our other site, www.tts-uk.co.uk, is operated by the same company.

What we collect, and when

When you book a course or buy from the shop

We ask for the name, email address and telephone number of the person making the booking, a billing address, and the company name where there is one. If you are booking places for other people we will ask for each delegate’s name so that we can put it on their certificate. If anyone tells us about a dietary requirement, an access need or anything else we should know on the day, we record that too, and we use it only for running the course.

When you pay

Card payments are handled entirely by Stripe. Your card number, expiry date and security code are entered into Stripe’s own secure fields and go straight to Stripe — they never reach this website and we never see or store them. What we keep is the order itself: what was bought, when, for how much, and whether it was paid. Our invoices are raised in Xero.

When you ask for a quote or get in touch

For an on-site course we will ask for your name, your email address, a telephone number, the address where the training would take place and roughly how many people need training. For a general enquiry we keep whatever you choose to send us, along with our reply.

When you attend a course

We record who attended, which course, on what date, and the result of the assessment, because that is what a certificate of competence rests on. Assessments taken on our trainer system are stored against the delegate’s name. The names of delegates who pass are registered with UKRS, the body that accredits our certificates.

When you use the venue finder

Typing a postcode or town into the venue finder sends it to postcodes.io, a free UK postcode lookup service, so that we can work out which of our venues is nearest to you. We also keep a record of what was searched for, which venue it matched, how far away that was, and when — so that we can see which parts of the country are asking for courses we do not yet run nearby.

That record contains no IP address, no cookie and nothing else that could identify you. It is a list of place names and distances, and we cannot connect any entry in it to a person.

When you simply browse

Like every website, ours receives your IP address and browser information as a normal part of serving you a page. If you accept analytics cookies we also collect information about which pages you visit and how you arrived — see the cookies section below.

Why we use it, and our legal basis for doing so

• To provide what you have booked — taking the booking, confirming it, sending joining instructions and reminders, running the course and issuing the certificate. Our basis is that we need this to perform our contract with you.
• To answer enquiries and prepare quotes. Our basis is our legitimate interest in responding to people who contact us, and, once a booking follows, performing our contract.
• To keep proper business records — invoices, VAT records and accounts. Our basis is our legal obligations under tax law.
• To keep training records so that we can confirm a certificate or issue a replacement, sometimes years later. Our basis is our legitimate interest in standing behind the qualifications we award.
• To understand which parts of the country need courses, using the search records described above. Our basis is our legitimate interest in planning where to run training.
• To measure our advertising and improve the website, using analytics and advertising cookies. Our basis is your consent, which you give or refuse in the cookie banner and can change at any time.
• To keep the site secure and prevent fraud. Our basis is our legitimate interest in protecting our business and our customers.

We do not sell your information, we do not share it with anyone for their own marketing, and no decision affecting you is made by an automated system.

Who else sees your information

We share what is necessary, with organisations that process it on our behalf under contract:

• Stripe — card payments and refunds.
• Xero — invoicing and accounts.
• Microsoft — our email runs through Microsoft 365, so anything we send you passes through it, and a log of sent messages is kept.
• SiteGround — hosting for this website and its database, in London.
• Google — analytics and advertising measurement, if you have accepted those cookies.
• TeamUp — the calendar our trainers work from, which holds course dates, venues and delegate numbers.
• Our trainers, who receive the register for the course they are running.
• UKRS — to register the certificates we award, using the names of delegates who pass.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

Other companies’ files that load on our pages

Some parts of this site load files from other companies. When that happens your browser contacts them directly and they receive your IP address, because they cannot send you a file without knowing where to send it. They are:

• Google Fonts — the typeface used across the site.
• Cloudflare — the mapping library used by the venue finder.
• OpenStreetMap and CARTO — the map itself on the venue finder.
• Stripe — the payment form on the cart and checkout pages.

The Facebook and X icons in our footer are ordinary links. They load nothing and tell those companies nothing unless you click them.

Cookies

We use a small number of cookies that are strictly necessary — remembering what is in your basket, keeping you logged in if you have an account, and remembering your cookie choice. These are set whatever you decide, because the site cannot work without them.

Analytics and advertising cookies are only set if you accept them. Our banner offers Accept and Reject with equal prominence, remembers your answer for six months, and never assumes agreement from silence. If you reject them, our advertising measurement still receives an anonymous signal that a visit happened, but nothing is stored on your device and nothing identifies you.

You can change your mind at any time using the Cookies link in the footer of every page.

How long we keep it

• Orders, invoices and VAT records: six years after the end of the accounting period, as tax law requires.
• Training and certificate records: five years, so that we can verify a certificate or issue a replacement.
• Enquiries and quotes that do not lead to a booking: two years.
• Sent email logs: ninety days.
• Venue searches: kept as anonymous statistics, with nothing that identifies anyone.

Where your information is held

Our website and its database are hosted by SiteGround in London, and our trainer system runs on a server in Germany. Stripe, Google and Microsoft are international companies and some of your information may be processed outside the UK. Where it is, those transfers are covered by the safeguards UK data protection law requires, such as the UK’s approved data transfer terms or an adequacy decision.

Your rights

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct anything that is wrong;
• delete information we no longer have a good reason to keep;
• stop or limit what we do with it;
• send it to you, or to someone else, in a portable format;
• stop relying on legitimate interests where you object to it.

Where we rely on your consent — which is only for analytics and advertising cookies — you can withdraw it at any time, and that does not affect anything done beforehand.

Ask by emailing office@tts-uk.co.uk or ringing 01793 497181. We will respond within one month and we will not charge you.

If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use your information we will update this page and change the date at the top. Where a change is significant we will tell customers directly rather than rely on you noticing.