Privacy Notice

Last updated: 1 October 2026

GAPTC (“we”, “us”, “our”) respects your privacy. This Privacy Notice explains when and why we collect personal data, how we use it, how we protect it, and your rights in relation to it.

1. Who we are

GAPTC is the data controller for the personal data processed via this website and related services (e.g. sign-up forms, communications). If you have questions about how we handle your personal data, or wish to exercise your rights, you can contact us at:

Email: info@gaptc.org.uk

Address: Cranham House, Falcon Close, Quedgeley, Gloucester GL2 4LY

We also have a Data Protection Officer (or designated person) whose contact details are: Chris Haine, CEO

2. What personal data we collect and why

We collect and use different types of personal data depending on how you interact with us. If you contact us directly, for example through our website or by email, we will collect your name, contact details and any other information you choose to provide. We need this information in order to respond to your enquiry and provide the services you request.

When you complete forms on our website, such as training bookings or sign-ups for updates, we will collect the details you provide, such as your name, email address and telephone number. This is done on the basis of your consent.

We also collect limited technical information automatically when you use our website. This includes your IP address, the type of browser you use and details about which pages you visit. We use this information to ensure our website is secure, to monitor performance, and to help us improve how the site works. Cookies are used for these purposes, and more detail is provided in Section 3 below.

If you communicate with us by email or other means, we may keep a record of that correspondence to ensure good service, keep track of progress, and for administrative purposes.

We only collect the information that is necessary for the purposes set out here, and we will not retain it for longer than we need to.

3. Cookies and related technologies

We use cookies and similar technologies on our website. Cookies are small files stored on your device that allow us to recognize your browser and capture/or remember certain information.

Essential cookies: needed for core functionality (e.g. session management).

Analytical/performance cookies: to measure and analyse site usage, help us improve.

You can configure your browser to reject all or some cookies or notify you when cookies are being used. However, disabling cookies may affect your ability to use certain website features.

4. How we use your data

We use personal data for purposes such as:

  • Managing your requests, enquiries or use of our services.

  • Sending you updates, newsletters, or notices you have signed up for.

  • Administering membership, events, training, or services you engage with.

  • Ensuring site security and preventing abuse, fraud or misuse.

  • Statistical and analytical purposes to improve our website and services.

  • We do not share your data with third parties for marketing purposes without your consent.

5. Third-party sharing and disclosures

In some cases, we may need to share your personal data with trusted third parties (e.g. service providers, IT hosts, mailing systems) to deliver our services. These parties are obliged to protect your data and may only use it for the purposes we specify.

If we engage in joint projects with other organisations (e.g. councils, associations), in some limited cases we may act as joint data controllers for specific processing. In those cases, we will clearly identify that relationship with you.

We do not sell or rent your personal data to third parties.

6. International transfers

If we transfer your personal data to countries outside the European Economic Area (EEA) or outside the UK, we will ensure that appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions) to protect your rights.

7. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected (including legal, accounting, or reporting requirements). Once it is no longer needed, we will securely delete or anonymize it.

In some cases, we may retain certain data for longer periods where required by law (e.g. financial records) or to defend legal claims.

8. Your rights

Under applicable data protection laws (such as the UK GDPR and Data Protection Act 2018), you have the following rights regarding your personal data:

  1. Right of access – you can request a copy of the personal data we hold about you.

  2. Right of correction – you can ask us to update or correct inaccurate or incomplete data.

  3. Right to erasure (“right to be forgotten”) – you can request deletion of your personal data in certain circumstances.

  4. Right to restrict processing – you may request we limit how we use your data.

  5. Right to data portability – you can request your data in a portable format, where applicable.

  6. Right to object – you can object to processing (especially for direct marketing or profiling) where applicable.

  7. Right to withdraw consent – where processing is based on consent, you may withdraw it at any time (without affecting past processing).

  8. Right to lodge a complaint – if you believe we are not handling your data lawfully, you can complain to the relevant data protection authority.

To exercise any of these rights, please contact us (see contact details above). We may require proof of identity before acting on the request. We will respond within the timeframes set by law (typically one month).

9. Security

We maintain appropriate technical and organisational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. This includes encryption, access controls, secure storage, and staff awareness training.

10. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be published on our website, and the “Last updated” date above will reflect the revision date.

11. Contact and complaints

If you have any questions, concerns or requests about your personal data or this Privacy Notice, please get in touch via:

Email: info@gaptc.org.uk

Postal address: Cranham House, Falcon Close, Quedgeley, Gloucester GL2 4LY

If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (or relevant data protection authority in your jurisdiction).