1. Who we are
FosteringTraining provides online learning services to clients and their learners. We process personal data in compliance with the UK General Data Protection Regulation and the Data Protection Act 2018.
The Foster Carer Training Company Ltd.
35 Ballards Lane, London, England, N3 1XW, United Kingdom
[email protected]
We are registered with the Information Commissioner’s Office, certificate number ZA751311.
2. What data we collect and why
Clients
We collect organisation and primary-contact details, selected administrator names and emails, learner details provided for training, and training records. The lawful basis is performance of a contract. Records are kept for the contract term. Personal data is removed from the training website 15 days after termination. Limited backup records—names, completed courses and certificate-expiry dates—may be retained for up to 12 months for post-termination queries, unless earlier deletion is requested, in which case they are permanently deleted within 30 days.
Learners
We collect names, email addresses, usernames, fostering-service details, supervising social-worker details where supplied, and training records. The lawful basis is consent where learners supply their own information, and performance of a contract where processing is necessary to provide and administer contracted training. The same post-contract retention periods above apply. Support requests are kept for up to one year after resolution.
Prospects
We collect names, email addresses, organisation, role, enquiry details and communications. The lawful bases are consent when you contact us and legitimate interests when we follow up a business enquiry. Prospect information is retained for up to two years unless a business relationship is established.
3. How and where we store data
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Microsoft Corporation (O365) | Training-completion backup and email communication | Names, contact and service details, training completion | Azure, United Kingdom |
| Zendesk, Inc. | Customer support | Where chat is used: location, device, browser, IP address, name and email | AWS, Germany |
| Jotform, Inc. | Forms, certificate issuance and business enquiries | Information entered by the learner or prospect | Google Cloud and AWS, Germany |
| Epignosis UK Ltd. (TalentLMS) | Learning management system | Learner, service and training-record information | AWS, USA |
Transfers to the EU/EEA rely on the UK’s adequacy recognition. Transfers to certified US organisations use the UK–US Data Bridge under the Data Protection (Adequacy) (United States of America) Regulations 2023.
4. How we protect data
- Encryption of data in transit and at rest.
- Access controls that restrict data to authorised personnel.
5. Your rights
Under the UK GDPR, you have rights to be informed; access your information; correct inaccuracies; request erasure where applicable; restrict processing; object in certain circumstances; request data portability; and challenge significant decisions made solely through automated processing, including profiling.
To exercise these rights, email [email protected].
6. Cookies and tracking
Our website may use cookies for analytics and functionality. You can manage preferences through your browser settings.
7. Updates to this policy
We may update this policy from time to time. The latest version will always be available on this page.