The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to data subjects. These are more detailed and specific than in the Data Protection Act (DPA) and place an emphasis on making privacy notices understandable and accessible. Data controllers are expected to take ‘appropriate measures’.
The GDPR says that the information you provide to people about how you process their personal data must be:
Concise, transparent, intelligible and easily accessible
Written in clear and plain language, particularly if addressed to a child
Free of charge.
These requirements are about ensuring that privacy information is clear and understandable for data subjects.
C J Bee Training shall comply with the GDPR requirements by ensuring our privacy statement includes:
Identity and contact details of C J Bee Training and the data protection officer
Purpose of the processing and the lawful basis for the processing
The legitimate interests of C J Bee Training or third party, where applicable
Categories of personal data/ any recipient or categories of recipients of the personal data
Retention period or criteria used to determine the retention period
The existence of each of data subject’s rights
The right to withdraw consent at any time, where relevant
The right to lodge a complaint with a supervisory authority
The source the personal data originates from and whether it came from publicly accessible sources
Whether the provision of personal data is part of a statutory or contractual requirement or obligation and possible consequences of failing to provide the personal data
The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences
The Data Protection Officer is responsible for ensuring that this notice is made available to data subjects prior to C J Bee Training collecting/processing their personal data. All Employees/Staff of C J Bee Training who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and their consent to the processing of their data is secured.
Identity and contact details
If you would like to discuss anything in this privacy notice, please contact: The data Protection Officer at:
C J Bee Training
1 South Farm Cottages
Purpose of the processing
C J Bee Training take your privacy seriously and will only use your personal information to administer your account, personalise your use of the website, and to provide the products and services you have requested from us.
In order for ‘users’ to use some of our online services and to respond to enquiries we need to collect and process various personal data. Users may be asked to complete an online form(s) which request, name, address, e-mail and telephone number. The personal data we collect is used to process your request for our services.
All information provided will be treated as confidential and will only be used for the purpose intended. Anyone can contact C J Bee Training to correct or update personal information in our records.
What information do we collect?
We collect information that you provide to us via our registration forms you complete at your training sessions. For example, we hold information on your names and addresses and contact details in order to send your certificates out to you, contact you again to remind you of refresher training, to give you information on other courses and for any other important notices. If you contact us, we may keep a record of that correspondence.
We will never hold unnecessary information and you have the option to ‘opt out’ on the registration forms.
We will endeavour to ensure that all personal data held in relation to all data subjects is accurate. Data subjects must notify C J Bee Training of any changes to information held about them.
The lawful basis
C J Bee Training will process data for the specific and lawful purpose for which it is collected and not further process the data in a manner incompatible with this purpose.
We collect and use information for general purposes where:
the data subject has given consent to the processing of his or her personal data for one or more specific purposes
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
the data subject has given explicit consent to the processing of those personal data for one or more specified purposes
Categories of personal data
We will ensure that the reason for which it collected the data originally is the only reason for which it processes those data, unless the individual is informed of any additional processing before it takes place. We will ensure that the data is adequate, relevant and not excessive in relation to the purpose for which it is processed
We may collect ‘personal data’ relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This may include the data subjects name, identification number, location data or online identifier.
Sensitive Personal Data
We may, from time to time, be required to process sensitive personal data. Sensitive personal data includes photographic images of learners and data relating to gender, religion, race, sexual orientation, and criminal records and proceedings.
Disclosure to third parties
We will not sell or license your personal information to any third party. However, we may disclose your personal information:
to any member of C J Bee Training
contractors engaged by us to provide services on our behalf;
in order to provide you with any products or services you have purchased or requested;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation to do so.
Details of transfers to third country
We will not transfer your personal information to countries outside of the European Economic Area that do not have adequate data security law.
C J Bee Training may retain data for differing periods of time for different purposes as required by statute or best practices, for more information please contact us.
Data subject’s rights
You have the right to request access to information about you that we hold. You also have the right to:
object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed
Any data subject wishing to access their personal data should put their request in writing to the Data Protection Officer at email@example.com who will endeavour to respond to any such written requests as soon as is reasonably practicable and, in any event, within 40 days.
The right to withdraw consent
Withdrawal of consent shall be without effect to the lawfulness of processing based on consent before its withdrawal.
We make it easy for individuals to withdraw their consent at any time.
We act on withdrawals of consent as soon as we can.
We don’t penalise individuals who wish to withdraw consent.
You may withdraw consent at any time by putting your request in writing to the Data Protection Officer at firstname.lastname@example.org will endeavour to respond to any such written requests as soon as is reasonably practicable and, in any event, within 40 days.
The right to lodge a complaint
Data subjects are able to complain to C J Bee Training about:
how their personal data has been processed
how their request for access to data has been handled
how their complaint has been handled
appeal against any decision made following a complaint.
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance by emailing the Data Protection Officer email@example.com. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/
The source of the Personal Data
All personal information provided to us is either stored on our secure servers located in the UK, or on the secure servers of sub-contractors that we have engaged to provide services on our behalf.
Statutory or contractual requirements
We will make you aware if we need to collect data for the purpose of statutory or contractual requirements. We will keep this data and use it to enable us to run our business and manage our relationship with you effectively, lawfully and appropriately.
We do use automated decision making (including profiling) in limited circumstances.
You may unsubscribe from our marketing communications at any time by putting your request in writing to the Data Protection Officer at firstname.lastname@example.org
Websites and cookies
This section applies to anyone accessing cjbeetraining.co.uk’s website.
A cookie is a small file, typically of letters and numbers, downloaded on to your device (e.g. your PC) when you access cjbeetraining.co.uk. Cookies allow the website to recognise your device and so distinguish between the different users that access the site.
Session cookies will remember your selections as you browse the site. These cookies are for the browsing session and not stored long term. No personal information is collected by these cookies.
Google Analytics cookies help us to make the website better for you by providing us with user statistics, for example: which pages are the most visited; how a user navigates the site. No personal information is collected by these cookies.
To find out more about cookies and what cookies might be stored on your device, visit or