Privacy Policy

Company Policies

Nicholas Hill Academy Ltd takes personal data seriously. Our Privacy Policy explains how information is collected, stored, and protected, giving Clients and Participants confidence that their details remain secure and under their control. By following GDPR principles and using secure systems, we ensure data is handled lawfully and transparently. This reinforces our reputation for professionalism and supports our mission to provide trusted training solutions within a safe and respectful environment.

Definitions

Company: means Nicholas Hill Academy Ltd of which company number 6613294

Staff:  means an employee or representative of the Company

Client: means a Company client or a user of the Products

Participant: means a participant of Company courses, programmes, workshops, seminars, keynotes

Contractor: means a supplier of external products or services

Product: means a Company product or service supplied, including those chargeable, complimentary, digital, and physical

Purpose

The Company treats privacy and confidentially with the highest regard to uphold human dignity, safety, and independence. The Company recognises that individuals reserve the right to determine when, how, and for what purpose others manage their personal information. Therefore, this privacy policy defines how the Company uses and protects any information Staff, Clients, Participants, and Contractors share. While the Company occasionally makes reasonable policy changes, it always aims to protect personal information.

GDPR

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR). Everyone responsible for holding personal data must follow strict GDPR rules called data protection principles. They must ensure the information is:

  • Used fairly, legally, and openly
  • Used for specific, stated objectives
  • Used in an adequate, pertinent, and limited manner to only what is required
  • Precise and, where required, up to date
  • Held for no longer than required
  • Managed in a manner that guarantees adequate security, including protection against unauthorised or illegal handling, access, degradation, or deletion

 

While there are separate precautions for personal data relating to criminal convictions and offences, there is robust legal protection for extremely sensitive data, such as:

  • Race
  • Ethnicity
  • Political stance
  • Creed
  • Trade union membership
  • Genetics
  • Biometrics
  • Health
  • Sexual orientation

Data Gathering

The Company requires Client and Participant information to understand needs and provide a better service. Therefore, the Company may collect such information for sponsors, managers, and colleagues for the following purposes:

  • Bank and credit card details for Product payments*
  • Contact names for correspondence
  • Telephone numbers, email addresses, postal addresses for correspondence
  • Dates of Birth for ILM account registration
  • Sensitive data for diversity and equality requirements
  • Client requirements following a needs-analysis for solution development
  • Participant requirements following a needs-analysis for solution development
  • Demographics for marketing analysis
  • Product feedbacks for quality control

*The Company retains Client credit or debit card details during checkout only, which its systems then automatically delete from records following receipt of the Client’s order.

Data Security

The Company has suitable procedures to secure Staff, Client, Participant, and Contractor information and prevent unauthorised access. The Company protects such information using encrypted customer relationship management (CRM) software and password-protected computers. The Company does not sell, distribute, or lease such information to third parties unless the Company is required legally.

Data Management

Staff, Clients, Participants, and Contractors may choose to include or exclude personal information in the following ways:

  • Whenever the Company asks Staff, Clients, Participants, and Contractors to complete a form, they can withhold certain aspects of personal information should they not want to disclose them.
  • Clients and Participants can contact the Company to communicate with an agent who can take down only the details they want to share.
  • If Clients and Participants no longer want to receive correspondence, they can email the Company at www.nicholashill.com/contact. Clients and Participants may also click the unsubscribe button in the footer of Company newsletter emails. They must allow up to ten working days for the Company to process these requests.

Staff, Clients, Participants, and Contractors can request details of personal information the Company holds in its files under the Data Protection Act 1998. The Company charges a small admin fee to Clients and Participants for this service. To order a copy of this information, Clients and Participants can contact the Company at any time. Clients and Participants can also contact the Company if they believe it holds incorrect or incomplete personal or organisational information. Staff must contact their manager for the same reasons. The Company will correct any information found to be incorrect as soon as possible.

Queries

If Staff, Clients, Participants, and Contractors have queries regarding this policy, they can contact the Company by emailing www.nicholashill.com/contact, calling +44 (0)345 678 9900, or writing to:

Managing Director

Nicholas Hill Academy Ltd

The Mount

72 Paris Street

Exeter

Devon

EX1 2JY

England

United Kingdom

Scroll to Top