Privacy Policy
Last updated: June 2026
Health Education Humber ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website at healtheducationhumber.co.uk, book a course, or otherwise interact with us.
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Health Education Humber
Grimsby, Lincolnshire
Email: info@healtheducationhumber.co.uk
Phone: 01472 485400
Website: healtheducationhumber.co.uk
2. What personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identity & Contact Data
- First name and last name
- Email address
- Phone number
- Billing address (including postcode and country)
- Organisation name and job title
Booking & Transaction Data
- Course(s) booked and attendance dates
- Number of attendees and additional attendee names
- Payment method (card or invoice)
- Purchase order / invoice reference numbers
- Stripe payment session identifiers (we do not store full card details)
Technical & Usage Data
- IP address and browser type
- Pages visited and time spent on the website
- Referral source (how you found us)
- Device and operating system information
Account Data
- Login credentials managed securely via Clerk (we do not store passwords)
- Account preferences and booking history
Communications Data
- Messages sent via our contact form
- Enquiries, special requirements, or notes submitted with a booking
3. How we collect your data
- Directly from you — when you complete a booking form, create an account, or submit an enquiry via our contact form.
- Automatically — via cookies and analytics tools when you browse our website (see our Cookie Policy).
- From third-party services — Clerk (authentication), Stripe (payment processing), and Google Analytics (website analytics).
4. How and why we use your data
| Purpose | Lawful Basis |
|---|---|
| Processing your course booking and confirming your place | Performance of a contract |
| Processing payment (via Stripe) and issuing invoices | Performance of a contract |
| Sending booking confirmation and course information emails | Performance of a contract |
| Managing your online account and booking history | Performance of a contract |
| Responding to enquiries or contact form submissions | Legitimate interests |
| Improving our website using anonymised analytics data | Legitimate interests |
| Protecting our forms from spam using Google reCAPTCHA | Legitimate interests |
| Complying with legal or regulatory obligations | Legal obligation |
| Sending marketing or promotional communications (only with your consent) | Consent |
5. Who we share your data with
We do not sell your personal data. We share it only with trusted third-party processors who help us operate our services:
Stripe
Payment processing. Stripe is PCI-DSS compliant and processes card payments securely. We never store your full card details. — Stripe Privacy Policy
Clerk
Secure user authentication and account management. — Clerk Privacy Policy
Resend
Transactional email delivery (booking confirmations, enquiry responses). — Resend Privacy Policy
Google Analytics / Google Tag Manager
Website analytics to help us understand usage patterns. Data is anonymised where possible. — Google Privacy Policy
Google reCAPTCHA
Spam and bot protection on our booking and contact forms. — Google Privacy Policy
CookieYes
Cookie consent management platform. — CookieYes Privacy Policy
We may also disclose your data where required by law or to protect the rights, property, or safety of Health Education Humber or others.
6. International data transfers
Some of our third-party providers (including Google and Stripe) may process data outside the UK or EEA. Where this occurs, they rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement to ensure your data remains protected to the same standard.
7. How long we keep your data
| Data type | Retention period |
|---|---|
| Booking records and transaction data | 7 years (statutory accounting requirement) |
| Training attendance records | Up to 7 years (regulatory and accreditation requirements) |
| Account information | For the duration of your account, plus 2 years after last activity |
| Contact form enquiries | 2 years |
| Website analytics data | 26 months (Google Analytics default) |
8. Your rights under UK GDPR
You have the following rights in relation to your personal data:
Right to be informed: To know how your data is being used (this policy).
Right of access: To request a copy of the personal data we hold about you.
Right to rectification: To ask us to correct inaccurate or incomplete data.
Right to erasure: To request that we delete your personal data, subject to any legal obligations.
Right to restrict processing: To ask us to limit how we use your data in certain circumstances.
Right to data portability: To receive your data in a structured, machine-readable format.
Right to object: To object to processing based on legitimate interests or for direct marketing.
Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in Section 10 below. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Cookies
Our website uses cookies for analytics, authentication, payment processing, and spam protection. For full details of the cookies we use and your choices, please see our Cookie Policy.
10. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date. For significant changes, we will notify you by email or a prominent notice on our website.
11. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Health Education Humber
Grimsby, Lincolnshire
Email: info@healtheducationhumber.co.uk
Phone: 01472 485400