1. Introduction
Construction Cards Helpline Limited (Company Number: 13678504), a company incorporated in the United Kingdom on 14th October 2021, is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, engage with our services, or contact us.
This policy applies to:
- Visitors to our website
- Customers who book our services
- Individuals who submit enquiries via phone, email, or contact forms
- Anyone whose personal data we process in the course of providing our services
We are the "Data Controller" under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our registered office address:
124 City Road, London EC1V 2NX, United Kingdom
Data Protection Contact: info@constructioncardshelpline.co.uk
2. Information We Collect
We collect and process the following categories of personal data:
A) Personal Identification Data
- Full name
- Date of birth
- National Insurance (NI) number
- Contact telephone number
- Email address
- Home address and postcode
- Photographic identification (copies retained for verification purposes)
B) Technical Data
- Internet Protocol (IP) address
- Browser type and version
- Device type and operating system
- Time zone settings
- Cookie data (see Section 9)
- Pages visited and time spent on pages
C) Transaction Data
- Payment card details (processed securely via third-party payment processors)
- Billing address
- Purchase history
- Service bookings and dates
Note: We do not store full payment card details on our servers. Payments are processed by PCI-DSS compliant third-party providers.
D) Communication Data
- Enquiry form submissions
- Email correspondence
- Phone call records (including recordings where notified)
- WhatsApp or other messaging communications
- Customer feedback and complaints
E) Employment & Qualification Data
- Current and previous employment details
- Trade or occupation
- Existing qualifications and certifications
- Work experience information
- NVQ portfolio evidence (photos, videos, documentation)
3. How We Collect Your Data
We collect personal data through the following methods:
- Direct Interactions: When you contact us via phone, email, WhatsApp, or complete online forms on our website
- Service Bookings: When you book a CSCS test, NVQ course, CPCS training, or other services
- Automated Technologies: Cookies and similar tracking technologies when you visit our website (see Section 9)
- Third Parties: From test centres, training providers, or awarding bodies when necessary to provide our services
- Public Sources: From publicly accessible sources such as Companies House when verifying business clients
4. How We Use Your Personal Data
We process your personal data for the following purposes, based on specific lawful grounds under UK GDPR:
Purpose 1: Service Delivery
Lawful Basis: Contract Performance
- Processing CSCS, CPCS, NPORS, and NVQ bookings
- Arranging test dates and course enrolment
- Communicating with you about your bookings
- Sharing necessary information with test centres and training providers
- Facilitating payment processing
Purpose 2: Identity Verification
Lawful Basis: Legal Obligation & Contract Performance
- Verifying your identity to comply with awarding body requirements
- Preventing fraud and identity theft
- Ensuring eligibility for requested qualifications
Purpose 3: Customer Support
Lawful Basis: Legitimate Interests
- Responding to enquiries and support requests
- Resolving complaints
- Providing guidance on qualification requirements
Purpose 4: Business Operations
Lawful Basis: Legitimate Interests
- Improving our services and website functionality
- Internal record-keeping and administration
- Analyzing service usage and customer satisfaction
- Protecting against fraud and abuse
Purpose 5: Marketing Communications
Lawful Basis: Consent (where required) or Legitimate Interests
- Sending updates about our services
- Providing information about relevant qualifications
- Notifying you of special offers or new courses
You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting us directly.
Processing National Insurance Numbers
We process National Insurance numbers as they are required by CSCS, CPCS, and awarding bodies for identity verification and certification purposes. This processing is necessary for contract performance and compliance with legal obligations imposed by certification schemes.
5. Sharing Your Personal Data
We may share your personal data with the following categories of recipients:
Awarding Bodies & Certification Schemes
CSCS, CPCS, NPORS, and NVQ awarding organisations require your personal data to process applications and issue certifications.
Test Centres & Training Providers
Accredited test centres and CITB-approved training providers need your details to administer tests and deliver courses.
Payment Processors
Secure third-party payment providers process transactions on our behalf. We do not store full card details.
IT Service Providers
Website hosting, email services, CRM systems, and cloud storage providers who support our operations.
Analytics & Session Replay Providers
Google Analytics and Lucky Orange process anonymised usage data (including session recordings and heatmaps) to help us improve our website and booking flows. Sensitive form fields are automatically masked. See our Cookie Policy for details.
Legal & Regulatory Authorities
Where required by law, court order, or regulatory obligation.
Important: We Do Not Sell Your Data
Construction Cards Helpline Limited does not sell, rent, or trade your personal data to third parties for marketing purposes.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Technical Measures
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Regular security updates and patches
- Firewall protection
Organisational Measures
- Access restricted to authorised personnel only
- Staff training on data protection
- Confidentiality agreements with employees
- Regular security audits
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.
Retention Periods:
- Customer Records: 7 years from last transaction (HMRC requirement)
- Qualification Applications: Duration required by awarding bodies (typically 3-5 years)
- Marketing Consent: Until consent is withdrawn or 2 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Enquiry Data: 2 years if no service booking made
After the retention period expires, personal data is securely deleted or anonymised in accordance with our data disposal procedures.
8. Your Data Protection Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
1. Right to Access
Request a copy of the personal data we hold about you (Subject Access Request).
2. Right to Rectification
Request correction of inaccurate or incomplete personal data.
3. Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data in certain circumstances (subject to legal retention obligations).
4. Right to Restrict Processing
Request that we limit how we use your data in specific situations.
5. Right to Data Portability
Receive your data in a structured, commonly used format and transfer it to another controller.
6. Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent
Withdraw consent for marketing communications or other consent-based processing at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us:
Email: info@constructioncardshelpline.co.uk
Phone: 0800 001 6122
Post: 124 City Road, London EC1V 2NX
We will respond to requests within one month. In complex cases, this may be extended by two months.
Right to Complain
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113
9. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.
Types of Cookies We Use:
Essential Cookies
Required for the website to function properly (e.g., session management, security).
Analytical Cookies
Help us understand how visitors use our website (e.g., Google Analytics).
Marketing Cookies
Track your activity across websites to deliver relevant advertising (with your consent).
You can control and/or delete cookies through your browser settings. However, disabling cookies may affect website functionality.
For more information, please see our Cookie Policy.
10. Third-Party Links
Our website may contain links to external websites operated by third parties (e.g., test centre websites, awarding body portals, social media platforms).
We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.
Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
For significant changes that materially affect how we process your data, we will notify you via email or prominent website notice where appropriate.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Data Protection Contact:
Construction Cards Helpline Limited
124 City Road, London EC1V 2NX, United Kingdom
Email: info@constructioncardshelpline.co.uk
Phone: 0800 001 6122
Company Number: 13678504
Compliance Statement:
This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Last Updated: February 2026