Last updated: 05/08/2026
This Privacy Policy explains how The Primary and Urgent Care Alliance (“Aceso Academy“, “we“, “us“, “our“), a company registered in England and Wales under company number 12599626, registered office at Office 5, The Windmill Ratcliffe Highway, Hoo, Rochester, England, ME3 8QB, collects, uses, and protects your personal data when you visit acesoacademy.com (the “Website“), enquire about or book a course, or otherwise interact with us.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, contact us at:
- Email: aaron@acesoconsult.com
1. Who this policy applies to
This policy covers personal data we collect from:
- Individuals booking or enquiring about first aid and emergency care courses (e.g. FAW, EFAW, PFA, EPFA, ABLSAED, FREC 3, FREC 4, ILS)
- Business contacts at organisations who book, or enquire about, corporate/group training on behalf of their employer
- General website visitors
2. Information we collect
Depending on how you interact with us, we may collect:
- Contact details — name, email address, phone number, job title, and employer/organisation name
- Booking and course information — course selected, dates, delegate names, certification/qualification details, dietary or access requirements you provide for a course
- Payment information — processed via our payment provider (see Section 6); we do not store full card details ourselves
- Enquiry/message content — anything you submit via a contact or booking enquiry form
- Technical data — IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies (see Section 7)
3. How we collect your information
We collect personal data when you:
- Submit an enquiry or contact form on the Website
- Book a course or make a purchase through our online store
- Email, call, or otherwise contact us directly
- Where you’re a business contact, we may also obtain your work contact details from publicly available sources such as your employer’s own website, professional networking sites, or business directories, in order to make initial contact about relevant training (see Section 5 below on B2B marketing)
4. How we use your information and our legal basis
| Purpose | What we use it for | Legal basis |
|---|---|---|
| Processing course bookings and payments | Fulfilling your order, issuing certificates, managing attendance | Performance of a contract |
| Responding to enquiries | Answering questions submitted via our forms or by email | Legitimate interests / pre-contractual steps |
| Sending booking-related communications | Confirmations, joining instructions, certificate delivery, course reminders | Performance of a contract |
| Marketing to individuals | Sending course offers/news, where you’ve opted in | Consent |
| Marketing to businesses (B2B) | Contacting organisations about relevant corporate/group training | Legitimate interests (see Section 5) |
| Legal and accounting obligations | Record-keeping, tax, and training-compliance records | Legal obligation |
| Website performance | Understanding how the Website is used, improving it | Legitimate interests |
5. B2B marketing and legitimate interests
Where we contact a business or organisation about our training courses (for example, corporate first aid training relevant to their staff), we rely on legitimate interests as our legal basis for that marketing, rather than requiring prior consent. This is permitted under UK data protection law provided the communication is relevant to the recipient’s professional role, and we have balanced our interests against the individual’s rights.
Transparency about the source of your details: If we contact you for the first time and did not obtain your details directly from you (for example, because we found your business contact details published on your employer’s own website), we will make this clear in that first message — for example, by telling you we found your details via your company’s website. You can find full information about the source and use of your data in this policy at any time.
Your right to object: You can object to B2B marketing at any time, free of charge, by using the unsubscribe link in any marketing email or by contacting us at aaron@acesoconsult.com. We will stop this type of processing promptly and will not require justification for your objection.
6. Third parties and service providers
We use the following trusted service providers to operate the Website and deliver our services. Each only receives the data necessary to perform its function.
- WooCommerce — powers our course booking/checkout system; processes order, billing, and course selection details necessary to fulfil your booking.
- WooCommerce Stripe Payment Gateway (Stripe) — processes card payments securely. Your card details are entered directly into Stripe’s secure system and are never stored on our servers. Stripe is a PCI-DSS compliant payment processor and may process data outside the UK/EEA (typically the US); such transfers are covered by appropriate safeguards, including Standard Contractual Clauses. See Stripe’s own privacy policy for details.
- WPForms — powers our contact/enquiry forms. Submissions (name, email, message, and any other details you provide) are stored on our website database and/or emailed to us for follow-up.
- Elementor (where used for on-site forms) — used to build and display website pages and, where applicable, forms; submitted form data is handled in the same way as described for WPForms above.
- Easy WP SMTP — used to reliably deliver transactional emails (booking confirmations, form notifications, certificate/joining instructions) via a third-party email-sending service, rather than through website hosting directly. This means your name and email address are passed to our email delivery provider solely to send you the relevant communication.
- Hosting provider — [HOSTING PROVIDER NAME], which stores Website data on our behalf.
We do not sell your personal data to third parties.
7. Cookies
The Website uses cookies to enable core functionality (such as the WooCommerce shopping basket and checkout), remember your preferences, and, where applicable, understand how visitors use the Website. You can control or disable cookies through your browser settings; note that some parts of the Website (such as booking a course) may not function correctly without essential cookies.
[If you run Google Analytics, a cookie consent banner (e.g. CookieYes/Complianz), or similar, add details here.]
8. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Booking and payment records — retained for [X years] to meet accounting, tax, and course-certification/compliance obligations
- Marketing contact details — retained until you unsubscribe or object, or until [X years] of inactivity
- Enquiry form submissions — retained for [X months/years] unless converted into a booking
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data, where applicable
- Restrict or object to certain processing (including marketing, at any time)
- Request a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at aaron@acesoconsult.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
10. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, restricted access to booking systems, and use of PCI-compliant payment processing via Stripe.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.
12. Contact us
If you have any questions about this Privacy Policy or how your data is handled, please contact us:
- Email: aaron@acesoconsult.com