Who we are
Livingstone Training Limited is responsible for the personal information described in this policy. We are the data controller for our website enquiries and the training administration that we determine.
Livingstone Training Limited
Registered in England and Wales, company number 08613797
Registered office: 5 Brayford Square, London, E1 0SG
For privacy enquiries, requests or complaints, email info@livingstone.training, call +44 (0)20 3576 7527, or write to our registered office, marked “Privacy”.
This policy covers website visitors, people enquiring about our courses, delegates and client contacts. It does not cover employment or recruitment. If we handle information solely on an operator’s instructions, that operator’s privacy notice also explains its responsibilities and purposes.
Information we collect
We collect information relevant to your enquiry, booking or training. Depending on the service, this includes:
- Your name, email address, telephone number, job role and organisation.
- Course choices, preferred dates, booking correspondence and delegate details.
- Attendance, assessment results, training history, qualifications and certificate records.
- Identity or licence information where needed to check eligibility or identity. We limit any copies retained to those necessary for a stated purpose.
- Billing details, purchase order references, invoices and payment status. Where a payment provider processes card details, its own privacy information applies to that processing. Please do not email card details to us.
- Information you choose to provide about learning needs, reasonable adjustments or health relevant to safe participation, as explained below.
- Correspondence, feedback, complaints and your communication preferences.
- Technical connection information, such as IP address, browser information, requested pages and access times, that hosting and security services may process to deliver and protect the website.
We do not need your full medical history for a general course enquiry. Please contact the team first to arrange an appropriate way to discuss sensitive information.
Where information comes from
Most information comes directly from you when you contact us, book or attend training, provide feedback or exercise your rights. We may also receive delegate names, business contact details and relevant training requirements from your employer, aircraft operator or the person arranging your booking. Instructors provide attendance and assessment information, and payment providers provide payment confirmations.
Where someone provides your details on your behalf, we will make this privacy information available within the applicable legal timeframe, normally no later than our first communication with you or one month after receiving your information, whichever is earlier, unless a lawful exception applies.
Why we use information
We use personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended. The basis depends on the purpose and our relationship with you.
| Purpose | Lawful basis |
|---|---|
| Answer enquiries and arrange a booking you request | Taking steps at your request before a contract, or performing our contract with you. For enquiries on behalf of an organisation, our legitimate interest in responding to business enquiries. |
| Deliver training, administer attendance, assess learning and issue certificates | Our contract with you, where you are the contracting customer. Where your organisation books, our legitimate interests in delivering its training booking and maintaining accurate training records. |
| Manage invoices and payments | Contract, or our legitimate interest in administering an organisation’s booking; legal obligation for applicable accounting and tax records. |
| Maintain and verify training records, handle complaints and establish or defend legal claims | Our legitimate interests in reliable certification, resolving issues and protecting legal rights. Legal obligation where a specific record-keeping or disclosure requirement applies. |
| Operate and protect the website and business systems | Our legitimate interests in providing a reliable service and preventing misuse. |
| Measure website visits and course and enquiry activity using optional Google Analytics | Your consent. You can withdraw it using Cookie settings in the footer. |
| Send optional newsletters or promotional emails | Consent where required; otherwise legitimate interests only where the applicable electronic-marketing rules permit the communication. See Marketing below. |
When relying on legitimate interests, we consider the effect on your rights and reasonable expectations. You can ask about that assessment and object to the processing.
Some details are necessary to arrange training, verify eligibility or identity, issue an accurate certificate or meet a legal requirement. If you do not provide them, we may be unable to provide that part of the service. We will explain which information is required and why. Optional marketing consent is not a condition of booking.
Health and reasonable adjustments
Health information is special-category personal data and needs additional protection. We ask only for information needed to arrange appropriate support or safe participation, and explain its use when requesting it.
For optional health information used to arrange support, we seek your explicit consent before using it, relying on consent under Article 6(1)(a) and explicit consent under Article 9(2)(a) of the UK GDPR. You may withdraw that consent using the contact details above. Withdrawal does not affect processing that was lawful before withdrawal. We will discuss any effect on the support we can provide and consider alternatives.
If a different legal basis and special-category condition are needed for a particular situation, we will identify and explain them before processing, unless an emergency or another lawful exception prevents this. A contract or a general reference to legitimate interests is not, on its own, sufficient permission to use health information.
In a genuine emergency, we may use or share necessary information to protect someone’s vital interests. For health information, this condition applies only where the person is physically or legally incapable of giving consent. Necessary information may also be retained or used to establish, exercise or defend legal claims where the law permits.
Access is limited to those who need the information for the relevant support, safety or legal purpose. We do not routinely include medical details in certificates or training reports sent to an employer.
International transfers
Cloud, email, hosting or other service providers may process information outside the UK, including in the United States. The locations depend on the services used for your enquiry or booking.
Where this involves a restricted international transfer, we must ensure a valid UK transfer mechanism applies. This may be UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses, together with the assessment required by law. These safeguards apply to the providers we use, regardless of their size or reputation.
Contact info@livingstone.training for the destinations and transfer arrangements relevant to your information, including how to obtain a copy of applicable safeguards. We may redact confidential information while still explaining the protection provided.
How long we keep information
We keep information for its stated purpose and any applicable legal, accounting or claims requirements. Different records need different retention periods; completing a course does not mean every training or payment record can immediately be deleted.
- Enquiries that do not lead to a booking: normally up to 18 months after the last substantive contact, unless you ask us to keep an enquiry open or a complaint or legal matter requires longer retention.
- Financial records: normally seven years, with the starting point determined by the relevant accounting period and record type. This is our retention policy, not a claim that every financial record has the same statutory minimum.
- Booking, assessment and certificate records: for the period needed to evidence the training, support certificate verification, meet applicable course or operator record-keeping requirements and address relevant claims. The applicable requirements, certificate-verification needs and legal limitation periods determine the period. You can request the period applicable to your course.
- Health and adjustment information: only for as long as needed to arrange and deliver the relevant support, then deleted unless an incident, complaint or specific legal requirement justifies continued retention. Necessary incident records are handled separately from routine adjustment information.
- Marketing: until you withdraw consent, object, or the information is removed following a relevance review. We may retain a minimal suppression record to avoid contacting you again.
- Technical and security records: for the period necessary to operate the service and investigate security issues, taking account of the hosting provider’s retention arrangements.
Where a dispute, investigation or legal preservation requirement applies, relevant records may be kept longer for that purpose. When no longer needed, information is securely deleted or anonymised, including through the normal expiry of backup copies.
Marketing and your choices
An enquiry or course booking does not by itself enrol you in a newsletter. Where we send optional marketing to individuals, we obtain consent unless all conditions of a lawful exception, such as the existing-customer soft opt-in, are met. The soft opt-in requires an opportunity to opt out when details are collected and in every subsequent message, and applies only within its permitted scope.
You may unsubscribe using the link in a marketing email or contact us directly. We will stop using your information for direct marketing when you object. Necessary booking messages, joining instructions and certificate correspondence are service communications and are separate from marketing.
Website, cookies and security
This website provides course information and an enquiry form, as well as email and telephone contact options. Optional Google Analytics runs only after you accept analytics cookies, as explained below. Our Analytics installation disables Google signals and advertising personalisation. Our enquiry form sends the information you enter to FormSubmit (Devro LABS) for delivery to operations@livingstone.training. FormSubmit provides a Google reCAPTCHA security check on its own service after you continue from our form; no reCAPTCHA script is loaded on our pages before that step. Hosting and security services may process technical connection information to deliver pages and protect the service.
FormSubmit states that it retains form submissions for 30 days. Its processing, including its security check, may involve technical information and cookies. See FormSubmit’s privacy information and Google’s privacy policy. You can contact us by telephone or email if you prefer not to use the form. Please do not include sensitive information in it. Our own retention rules apply to the enquiry delivered to our inbox.
You can accept or reject optional analytics in the cookie notice and change your choice using Cookie settings in the footer. We store your choice on your device so that we can respect it. Changing browser cookie settings does not control all server-side processing of technical information.
We use proportionate technical and organisational measures to protect personal information and restrict access to those who need it. No website, email service or storage system can be guaranteed completely secure. Please do not send card details, unnecessary identity documents or detailed medical information in an initial email.
Following an external link, including to a payment provider, takes you to a service with its own privacy information. This website does not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Optional Google Analytics
If you accept analytics cookies, we use Google Analytics 4 to understand which pages and courses visitors use, referring websites, price-list downloads and enquiry activity. Google processes online identifiers and technical information, such as browser and device information, and derives approximate location from connection information. Analytics data is pseudonymous, not necessarily anonymous.
Our custom events record course identifiers and actions such as opening a course, starting an enquiry, attempting to submit the form, viewing the enquiry confirmation page and clicking telephone or email links. Our event code does not read or send names, email addresses, telephone numbers, company names or enquiry text. It removes query strings and fragments from the page address sent to Analytics and limits the referrer to its website origin. A confirmation-page view is a website activity measurement, not proof that an enquiry email was delivered.
We rely on your consent for these analytics cookies and the associated processing. Google Analytics is not loaded by our website until you accept. Rejecting does not prevent you from reading course information or making an enquiry. We have disabled Google signals and advertising personalisation in our installation.
| Name | Purpose and duration |
|---|---|
| lt_analytics_consent_v1 | Local storage on your device remembers your accept or reject choice and its date for 180 days. Used to respect your preferences. |
| _ga and _ga_* | Google Analytics cookies used, with your consent, to distinguish browsers and maintain session information. Our installation configures a maximum cookie lifetime of 180 days without automatic renewal. |
Use Cookie settings in any page footer, then Reject analytics, to withdraw consent. This stops our analytics collection and removes accessible Google Analytics cookies for this website. Withdrawal does not affect earlier lawful processing or automatically delete information already sent to Google. We will ask again after 180 days; clearing browser storage may make the notice appear sooner.
Google may process analytics information outside the UK, including in the United States; see International transfers above. For Google's processing and safeguards, see Google’s privacy policy and Google’s data processing terms. Cookie expiry is separate from the retention of information already collected: user and event data retention depends on the Analytics property settings, and aggregated reports may be retained longer. Contact us for the retention settings currently applied or to exercise your rights.
Your data protection rights
Depending on the circumstances and the lawful basis used, you may ask us to:
- Provide access to your personal information and information about its use.
- Correct inaccurate information or complete incomplete information.
- Erase information or restrict its use.
- Provide eligible information in a portable format or transfer it to another organisation where technically feasible.
- Stop processing based on legitimate interests where your circumstances justify an objection. Your right to object to direct marketing is absolute.
You can withdraw consent at any time without affecting the lawfulness of earlier processing. Some rights are subject to legal conditions or exemptions; if we cannot fulfil a request, we will explain why and tell you about your complaint rights.
Contact info@livingstone.training or use the telephone or postal details above. You do not need to use a special form or legal wording. We may request proportionate information to confirm identity or clarify a request where permitted.
Requests are normally free and answered without undue delay, within one month. Where the law permits an extension, pause, fee or refusal, we will explain the reason and applicable timing. For complex or numerous requests, an extension of up to two further months may apply, with notice within the initial month.
Questions and complaints
If you are concerned about how we use your information, email info@livingstone.training, call +44 (0)20 3576 7527, or write to our registered office. You can make a complaint through any of these routes.
We will acknowledge a data protection complaint within 30 days, investigate it without undue delay, keep you appropriately informed and communicate the outcome and any action taken.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. See ico.org.uk/make-a-complaint/ or call 0303 123 1113. You do not lose that right by contacting us first.
Changes to this policy
This policy was updated on 26 September 2026 for Livingstone Training Limited’s website and training services. We will update it when our services, practices or legal requirements change. Where a change materially affects how we use your information, we will provide further information as required before the new use begins.