Privacy notice

Golden Key Services Limited, which trades as Golden Key Training Centre, is the data controller for the information described here. That means we are the ones who decide what is collected and what happens to it, and we are the ones you hold responsible for it.

The company is registered in England and Wales, company number 16154479, and its registered office is 164 Brammas Close, Slough, England, SL1 2TR. For anything in this notice, write to the centre rather than the registered office:

Golden Key Training Centre
Regal Court Business Centre
42 to 44 High Street
Slough, Berkshire SL1 1EL
United Kingdom

Telephone 01753 247705. You can use that number, or the postal address above, for anything in this notice.

We are on the Information Commissioner's Office register of fee payers, under registration reference ZC230195.

This notice is written under the UK GDPR and the Data Protection Act 2018.

Two things, and they are the only places on this website where you can hand us information about yourself:

• The enquiry form on our admissions page.
• The Stage 1 Appeals Log, which is how you start an appeal against an assessment decision under our assessment appeals policy.

Neither form is connected to anything yet. Today neither one delivers your details anywhere, and both pages say so above the send button. This notice describes what will happen once they are switched on. Nothing described here will start happening before this notice is updated to match.

Most of what follows is written about the enquiry form. Where the appeals form is different, and it is different in two important ways, it says so.

There is no account area, no login and no learner portal on this website, so there is nothing else here that could be collecting anything about you.

• Your name.
• Who you are. Whether you are the learner, a parent or guardian, an employer or venue, or someone else.
• The learner's name. Optional, and only if you are enquiring for someone else.
• The learner's age band. Optional. Under 16, 16 or 17, or 18 or over, because the two qualifications have minimum ages of 16 and 18. We do not ask for a date of birth.
• Your email address.
• Your phone number. Optional. Leave it blank and the form still sends.
• Which qualification you are asking about.
• What you would like us to do. Either register your interest so we can tell you when enrolment opens, or ask us a question.
• How you heard about us. Optional.
• Anything else you want to tell us. Optional, and a free text box, so what goes in it is up to you. Please do not put health details or anything else sensitive in there. If you need to tell us something like that, ring us instead.
• Whether you want to hear from us about course dates and news. Optional. The box is never ticked for you, and the form sends whether you tick it or not.

Two technical values travel with the form as well: the time the page finished loading, which we compare against the time the enquiry arrives so we can spot automated submissions, and any campaign tags that were in the link you followed to reach us. They are part of the same enquiry record and are deleted on the same schedule as the rest of it.

• The learner's full name, and a learner ID or reference if one has been issued. The reference is optional.
• An email address, so we can send you the Stage 1 outcome, and a phone number, which is optional.
• Which qualification the decision relates to, which unit or criteria is disputed, and the assessor's name.
• The date the assessment was conducted and the date you received the decision. The second one matters: the 5 working days you have to appeal run from it.
• Your grounds for appeal: procedural irregularity, assessor bias, mitigating circumstances, or more than one of them.
• Your rationale, in a free text box. What goes in it is up to you.

The same two technical values travel with it as with the enquiry form: the time the page finished loading, compared against the time the appeal arrives so we can spot automated submissions, and nothing else from the address you arrived on.

Health information, and why this form is different. One of the grounds for appeal is mitigating circumstances, and the policy gives a medical emergency as an example. So if you choose that ground you may want to describe something about your health, and health data is special category data under Article 9 of the UK GDPR, which is protected more strictly than ordinary contact details.

You do not have to give us any of it. The form says so above the send button. Tell us only as much as you want the assessor to take into account, and if you would rather say it out loud than write it down, ring us on 01753 247705 and we will note it.

What we have not settled yet. Because this form is not switched on, two things about it are still open, and we would rather say so than write something we might have to take back. The first is the precise legal condition we will rely on for any health information, which will be either your explicit consent or the handling of a legal claim. The second is how long we keep an appeal record: an appeal is evidence in a regulated assessment process, so the awarding organisation may set that period rather than us. Both will be written into this notice before the form accepts a single submission.

For answering your enquiry, our lawful basis is Article 6(1)(b) of the UK GDPR: taking steps at your request before entering into a contract. You have asked us about a qualification you might enrol on, and replying to you is a step towards that.

We are not relying on your consent for this, and that matters in a practical way. You do not have to agree to anything to get an answer from us, and there is nothing for you to withdraw afterwards. Sending the enquiry is the request. Answering it is the whole purpose.

The marketing box is the one exception. If you tick it, our lawful basis for sending you course dates and news is your consent, under Article 6(1)(a). You can withdraw that consent at any time by ringing us or writing to us, and we will stop. Withdrawing it does not undo anything we sent before you asked, and it has no effect at all on our answer to your enquiry.

The appeals form is not covered by any of the above. Running an appeal you have raised is us meeting an obligation we set ourselves in a published policy, and where the appeal carries health information a second condition under Article 9 applies on top. Neither is settled while the form is switched off, and both are set out under what the appeals form asks for.

We keep enquiries for 12 months from the day you send them. Then we delete them.

Twelve months is there so an enquiry made before one intake is still to hand at the next one. If you would rather we deleted yours sooner, ask us and we will.

If you ticked the marketing box, we keep your name and email address for that purpose until you tell us to stop, along with a record that you ticked it and when. That record is the only thing that outlives the 12 months, and it exists so we can show we had your permission.

Appeals are not kept to this schedule. An appeal is evidence in a regulated assessment process, so how long it has to be kept may be set by our awarding organisation rather than by us. We have not settled that period yet, and we will not invent one: it is written into the appeals section above before the appeals form accepts a single submission.

At the moment, nobody outside Golden Key Training Centre. The form does not deliver anywhere yet, so there is no other company in the chain to name.

When the form is switched on, your enquiry will pass through at least one other company on its way to us. We will name each of them here, say what each one does with it, and say whether it acts on our instructions or on its own account. We will do that before the form starts sending, not afterwards.

We do not sell your details, and we do not pass them to anyone else for their own marketing.

• The typeface. The font is served from this website itself, not from Google. Loading a page of this site does not, on its own, send anything to Google.
• The map in the footer. What you see before you press the button is not a map. It is a plain panel we drew ourselves. No map data is loaded, and no request is made to Google, until you press Load the map. The button says as much on its own face. If you never press it, Google never hears from you on account of the map. If you do press it, the map arrives from Google at that moment, Google receives your IP address, and Google can set its own cookies in your browser.
• Server logs. This website is hosted by Cloudflare, on Cloudflare Pages. Cloudflare keeps standard server logs, which include IP addresses, for a short period. They exist to keep the site available and to deal with attacks on it.

The Get directions link in the footer is an ordinary link to Google Maps. Following it takes you to Google's website, where you are on Google's terms rather than ours.

This website sets no cookies. It stores nothing else in your browser either, which is why you were never asked to accept anything.

The single exception is the map in the footer, and only if you press its button. The map then arrives from Google inside Google's own frame, and Google can set its own cookies there. That is Google's doing rather than ours, and it cannot happen unless you press it.

If that ever changes, this section changes with it, and anything that is not strictly necessary will be put to you before it is set rather than afterwards.

You have rights over the information we hold about you. In plain terms, you can ask us to do any of the following.

• Show you what we hold. A copy of your information, and an explanation of what we are doing with it.
• Correct it. If something is wrong or out of date, tell us and we will fix it.
• Delete it. You do not have to wait for the 12 months to run out.
• Restrict it. Ask us to keep your information but stop using it, while something is being sorted out.
• Object to it. Tell us to stop using your information. We then have to justify carrying on, or stop.
• Hand it over. Receive what you gave us in a common, machine readable format, or have us send it to someone else.
• Withdraw your consent. This one applies to the marketing box. Nothing else on the form runs on consent.

Ask by phone on 01753 247705, or by post to the address at the top of this page. It costs you nothing, and we will answer within one month.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You can go to them directly without coming to us first, although we would rather have the chance to put it right ourselves.

If we change what we collect, what we do with it, how long we keep it, or who else is involved, we will change this notice and change the date at the top of the page.

Two changes are already expected: naming the companies that will carry your enquiry to us once the form is switched on, and confirming our registration position with the Information Commissioner's Office. Both are left open rather than guessed at, because a privacy notice that states something nobody has checked is worse than one that is still short.