Created on 1st April 2023
Next review date: 1st April 2024
Forklift Training Scotland, trading as Direct Lifting Solutions, is fully committed to protecting, storing and ensuring the accuracy of individuals’ data collected to meet the requirements set out under GDPR 2018.
How will we use the information we collect and store about you? We will use it to process your course registration and produce and submit (where applicable) registration numbers of individuals who have attended and passed a course. On an annual basis, in line with our accrediting body’s monitoring policy, we will share data relating to certificates we issue.
Information given to us will be given to our accrediting body solely for the purpose of registration.
Consent We will only collect and process your data with your consent. This would happen when you register on a course.
How we protect your personal data We know how much data security matters to all our customers. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it.
We will comply with these seven important principles of GDPR when processing personal data:
1. Lawful, fair and transparent processing – data will be processed fairly, with transparency and in line with the law
2. Purpose limitation – only for specific and lawful purposes
3. Data minimisation - be adequate, relevant and not excessive
4. Accuracy - be accurate and where necessary kept up to date
5. Storage limitations – not be held for any longer than necessary. If advised that an employee has left a customer’s employment, we will delete personal data from our system if requested. Under requirements of our accrediting bodies, copies of course assessment paperwork and certificates must be held for a period of 6 years. Unless we receive a request to delete your data, we will hold your data for 6 years.
6. Integrity and confidentiality– data will be processed in accordance with the rights of data subjects and protected in appropriate ways
7. Transferring the data outside the EEA – not to be transferred outside the European Economic Area
Individual data is generally stored electronically and if we suffer a data breach, we will notify the ICO and those affected within 72 hours.
Individuals may request access to the information that we store on them at any time. Please contact us at
directliftingsolutions@yahoo.com with the subject line: GDPR request.
Disposal of personal dataAs previously stated, personal data will be kept for a maximum of 6 years. At the expiry of 6 years personal data will be destroyed both electronically and physically. All outdated data will be deleted from any electronic files Direct Lifting Solutions hold and all physically held data (paper form) will be cross shredded. Once shredded, all remains will be disposed through the local authority recycling centre or incinerated.