Privacy Policy

---

General Data Protection Regulation GDPR

PRIVACY POLICY

The information in this privacy policy relates to EXL Training

We are registered at:

• 2 Havant Road
• Emsworth
• Hants
• PO10 7JE

As a UK based business, our handling of your information is controlled by GDPR. We, therefore, take great care to protect your personal information or anything which might identify you personally such as:

1. First name and last name and      D.O.B
2. Email address
3. Organisation information      (e.g. Name, Address, Telephone number)

For the purposes of this document, “personal data”, ” processing “, “data controller” and ” data processor ” have the meanings ascribed to them in the GDPR. To the extent that EXL Training is deemed to be a data processor.  In respect of personal data processed under the contractual agreement we shall:

1. process personal data lawfully, fairly, and transparently, in accordance with the GDPR;
2. provide full details of what data is needed, why it’s needed, and for how long it will be kept, and this information shall be given at the point it is collected;
3. never take more data than is necessary for EXL Training to fulfil its contractual obligations, and to delete it when it is no longer needed;
4. make all data available foralteration, transfer, deletion, or restriction upon request by the data subject;
5. implement appropriate technical and organisational measures to safeguard the personal data from unauthorised or unlawful processing, accidental loss, destruction or damage
6. obtain, use, process and disclose personal data in the performance of its obligations under the Agreement only.

In particular, but without limitation, each party shall:

1. only carry out processing of such data in accordance with the others instructions
2. only disclose it to or allow access to it by those of its employees (or agents or subcontractors) who  are familiar with data protection requirements and whose use of such data relates to their job or function
3. assist the other with all subject information requests received from data subjects.

For the avoidance of doubt, neither party (or its agents or subcontractors) shall acquire any rights in any of the other’s personal data or sensitive personal data and shall only be entitled to process it in accordance with its contractual obligations. On termination of the contract each party (or its agents or subcontractors) shall immediately cease to use the same and shall arrange for its safe return or destruction as shall be agreed with the other at the relevant time. 

Each party confirms that it owns, or has all necessary rights in the use of, all intellectual property in relation to the Services and each acknowledges that such intellectual property shall remain the property of, or the rights in the use of shall remain with the originating party, unless otherwise agreed in writing between the authorised representatives EXL Training and the purchaser.

Each party agrees to indemnify the other against any actions, costs, liabilities, losses, damages and expenses which the other may suffer or incur as a result of any claim by a third party in relation to ownership or use of any relevant intellectual property, provided by the other party.

Access rights

You have the right to access the personal information that we hold about you. Requests should be made in writing via the contact details provided above