Privacy & Cookies Policy

First4Safety Ltd

Privacy Notice & Cookies Policy


When we collect your data, we are acting as a data controller, and when processing your information, we want to give you the assurances that we can, where we can. We’ve outlined our principles on information management below:

  1. No surprises – we use your data in the way we say and for reasons you’d expect us to. Nothing more. We do not rent, lend, sell or share your data with anyone else.
  2. We look after your data – we protect your data as if it’s ours, using leading-edge technology from third-party providers (we can’t all be experts at everything).
  3. Interacting with us is your choice, and we will keep you updated if you ask us. If you’d rather not stay in touch, it’s okay.
  4. We hold data for YOUR benefit. If you don’t want us to keep it, let us know, and we will delete it (subject to legal requirements).

You can direct any question you have to our registered office at Weltech Centre, Ridgeway, Welwyn Garden City, AL7 2AA.

Alternatively, you can contact us by email:

What data do we collect and how?

We process data to meet your request for information or provide services to you.  This may include:

  • Personal information submitted through our website is used for the purposes specified in this policy or on the website’s relevant pages. Data collected through use of the website includes:
    • information about your computer and about your visits to and use of this website – see the Cookies Policy below;
    • information that you provide to us when registering with our website or using the (including your name and email address);
    • comments, communications or information relating to any purchases you make of our goods.
  • If you submit personal information for publication on our website, we will publish and otherwise use that information under the licence you grant to us.
  • Financial transaction data (credit card information and purchase history) to fulfil any contract for training you decide to enter into will be collected by our payment services provider detailed below. First4Safety does not retain payment details.
  • If you are providing us with the personal information of another person, you must obtain that individual’s consent to both the disclosure and the processing of that personal information. Your providing such data is your confirmation that you have secured such permission.

Why do we process your data and who do we share it with?

We use your data to:

  • Fulfil your training requirements and meet our contractual obligation to provide services to you;
  • Keep you updated with relevant information regarding your training;
  • Provide you with offers and additional services;
  • Send our newsletter by email, if you have requested it;
  • Keep our website secure and prevent fraud;
  • Verify compliance with the terms and conditions governing the use of our website;
  • Enable communications (using your email) with IOSH for delivery of IOSH Digital Certificate.

We may process and disclose your personal data to:

  • any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy or to obtain and maintain insurance coverage, managing risks, obtaining professional advice and managing legal disputes.

Information that we collect may be transferred to the following countries which do not have data protection laws equivalent to those in force in the European Union: the United States of America, Australia and New Zealand.  In using our services, you expressly agree to the transfer of personal information.

  • All our website financial transactions are handled through our payment services provider, FISglobal (WorldPay). You can review the provider’s privacy policy at . We will share information with our payment services provider only to the extent necessary for processing payments you make via our website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

Retaining personal information
Personal information that we process to perform the tasks set-out above is not kept for any longer than necessary.

This means we will retain and delete your personal data as follows:

  1. Training course data – will be retained indefinitely to enable us to verify your qualification and assist you with your CPD record.
  2. Digital Marketing Information – may be held for up to 2 years following your interaction with us. You consent to our sending such information when you submit your email address, and we provide the option to unsubscribe on communications.
  3. Enquiry data from other sources – is held to fulfil your enquiry, but no longer than six months.
  4. Financial transaction data will be retained to comply with accounting standards and tax law, no longer than 7 years.

Notwithstanding the provisions set out above, we will retain documents (including electronic documents) containing personal data to the extent that we are required to do so by law or if we believe that the documents may be relevant to any ongoing or prospective legal proceedings.


We may update this policy by publishing a new version on our website from time to time and encourage you to check this page occasionally to ensure you are happy with any changes to this policy.

We may also notify you of changes to this policy by email.

Your rights

We have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included here – please see the link to the ICO below.

Your principal rights under data protection law are:

(a)    the right to access;

(b)   the right to rectification;

(c)    the right to erasure;

(d)   the right to restrict processing;

(e)    the right to object to processing;

(f)    the right to data portability;

(g)   the right to complain to a supervisory authority; and

(h)   the right to withdraw consent.

Full details of your rights are available from the ICO website here.

You may exercise any of your rights in relation to your personal data by email, telephone or in writing using the contact information provided above.

You have the right to complain about our use of your information directly to the Information Commissioner’s Office via their website at

About cookies
We will ask for your consent to our use of cookies in accordance with the terms of this policy when you first visit our website.

A cookie is a file containing an identifier (a string of letters and numbers) sent by a web server to a web browser and stored by the browser. More information on how cookies work and what they do can be found at

Our cookies

We use the following cookies on our website.

Cookie NamePurposePerformance CookiePersistent / Session
_gatUsed by Google Analytics to throttle request ratePersistent.

Expires after 24 hours

_gidRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.Persistent.

Expires after 48 hours

_gaRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.Persistent.

Expires after 2 years

Cookies used by our service providers

Cookie NameDomainPurposeMarketing CookiePersistent / Session
collectGoogle-analytics.comUsed to send data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.Session

Managing cookies

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

(a)  (Chrome) ;

(b)  (Firefox);

(c)  (Opera);

(d)  (Microsoft Explorer);

(e) (Safari on Mac)

or  (Safari on iOS); and

(f)  (Edge).

Blocking all cookies will have a negative impact upon the usability of many websites.

If you block cookies, you will not be able to use all the features on our website.

First4Safety Limited is registered in England and Wales under registration number 5419097 and is recorded as a data controller with the UK Information Commissioner’s Office.