Privacy Notice

How we use, store and keep your data safe

Privacy Notice
Company Name: Autotech Recruit (‘the Company’)
Company Contact details: Jack Salsbury - Head of IT & Information Security
GDPR@autotechrecruit.co.uk
Document DP5A: Privacy Notice
Topic: Data protection
Date: April 2026
Version: 4

The Organisation

Autotech Recruit Limited (07463246) (including Autotech Academy) and Autotech Training Limited (13192579) (including Autotech Connect) are wholly owned subsidiaries of Autotech Group Limited (13193017).

Each Autotech Group company acts as an independent data controller for the personal data it processes in connection with its services. Autotech Group Ltd provides central corporate and administrative support but does not determine the purposes for which personal data is processed unless expressly stated.

Autotech Training Limited

Autotech Training is a training business which provides training services to its clients and their employees.

Currently, Autotech Training Limited trades as both ‘Autotech Training’ and ‘Autotech Connect’.

The Company must process personal data so that it can provide these services – in doing so, the Company acts as a data controller.

We may collect personal details of training attendees, including name, address, date of birth and driving licence details. Where required, we may also process information relating to training outcomes, attendance records and professional qualifications.

Where personal data is collected indirectly (for example via a client or employer booking training on behalf of a delegate), the categories of data we typically receive include: name, contact details, job role, and relevant qualifications or licence information.

For training services only, we may invite delegates to voluntarily disclose information about specific needs, adjustments, or support requirements (for example learning support, accessibility needs, mental health or other relevant personal circumstances). This information is optional and is used solely to enable us to provide appropriate support or reasonable adjustments during training.

This personal data is required to be able to deliver the training requested and is only used in accordance with the statement below:

1. Collection and use of personal data

a. Purpose of processing and legal basis

The Company will collect your personal data (which may include special category personal data) and will process your personal data for the purposes of providing you with training and related services relevant to the brands this notice serves.

We rely on the following lawful bases under UK GDPR, depending on the activity:

  • Legitimate interests, for providing you with training and services related to the brands this notice serves.
  • Legal obligation, where processing is required to comply with health and safety legislation, tax requirements, awarding body regulations, or other applicable legal or regulatory obligations.
  • Contract, where processing is necessary to enter into or perform a contract with you.
  • Consent, where required (for example, for optional support disclosures, for optional communications or where no other lawful basis applies).

b. Legitimate interest

Where the Company has relied on a legitimate interest to process your personal data, our legitimate interests is/are as follows:

In order for us to provide training services, we need to process training candidates’ personal data to ensure compliance with our terms and conditions.

c. Special category personal data (Autotech Training only)

For Autotech Training services only, the Company may process limited special category personal data where this is voluntarily provided by delegates in relation to accessibility needs, learning support, mental health or other health‑related adjustments.

This information is processed solely for the purpose of providing appropriate support and reasonable adjustments during training.

The lawful condition relied upon under Article 9 UK GDPR is:

Article 9(2)(b) – processing necessary for obligations and rights under employment and equality law; and

where applicable, Article 9(2)(g) – substantial public interest in ensuring equality of opportunity and accessibility.

Special category personal data is not used for any other purpose and is not required to participate in training unless relevant to the support requested.

d. Recipients of data

The Company will process your personal data and sensitive personal data with the following recipients:

  • For Autotech Training candidates only: the Awarding Training Body
  • And/or where we are required to do so by law (for example, HMRC)

We may also share personal data with professional advisers, auditors and IT service providers where necessary and subject to appropriate contractual safeguards.

Personal data may be shared between companies within the Autotech Group where necessary for legitimate business purposes, such as delivering services, managing contractual relationships, or meeting legal and regulatory obligations. Each group company acts as an independent data controller for the data it receives.

e. Statutory/contractual requirement

Your personal data is a contractual requirement (e.g. our client may require this personal data), and a requirement necessary to enter into a contract. You are obliged to provide the personal data. If you do not, the consequences of failure to provide the data are: We would be unable to offer you training and related services.

f. International data transfers

We do not routinely transfer personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

g. CCTV and video surveillance

We use CCTV at our premises for the purposes of safety, security, and the prevention and detection of crime. CCTV may capture images of staff, visitors, contractors, and members of the public.

CCTV footage is monitored only by authorised personnel and is retained for a limited period (typically up to 30 days), unless it is required for investigating an incident or for legal or insurance purposes.

Where necessary, footage may be shared with relevant third parties such as the police or insurers.

Individuals have the right to request access to CCTV footage that includes images of them. Requests should be made using the contact details set out in this privacy notice.

2. Data retention

The Company will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of any training programme and a reasonable period thereafter to address any queries, complaints, or certification matters.

We are also required to retain certain training and assessment records for as long as is required by the relevant awarding body, regulatory body, or applicable legislation.

Where the Company has obtained your consent to process your personal and sensitive personal data – name, address, email, telephone, passport, driving licence, we will do so in line with our retention policy. Where processing is based on consent, data will be deleted or anonymised when consent expires unless we are required to retain it by law.

Where consent is not granted the Company will cease to process your personal or sensitive personal data.

3. Your rights

Please be aware that you have the following data protection rights:

  • The right to be informed about the personal data the Company processes on you;
  • The right of access to the personal data the Company processes on you;
  • The right to rectification of your personal data;
  • The right to erasure of your personal data in certain circumstances;
  • The right to restrict processing of your personal data;
  • The right to data portability in certain circumstances;
  • The right to object to the processing of your personal data that was based on a public or legitimate interest;
  • The right not to be subjected to automated decision making and profiling; and
  • The right to withdraw consent at any time.

We do not use automated decision‑making or profiling as defined under Article 22 UK GDPR.

4. Complaints or queries

If you have any questions or concerns about this privacy notice or how your personal data is processed, please contact:

Jack Salsbury (Head of IT & Information Security) on GDPR@autotechtraining.co.uk

You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.