Website and Client Privacy Notice
Sekular Limited
At a glance: We use personal information to respond to enquiries, deliver mental health training, register delegates for qualifications, manage client relationships, run our website and meet our legal obligations. We do not sell personal information.
Last updated: 15 October 2026
1. Who we are
Sekular Limited (company number 16971433) is the controller of the personal information described in this notice. Our registered office is PGD Accountants, 26 Spinney Close, Roundswell, Barnstaple, Devon, England, EX31 3RT.
For privacy questions, rights requests or data protection complaints, contact Sarah Knight by email at sarah@sekular.co.uk, or by post at the registered office above.
This notice applies to website visitors, prospective clients, client contacts, course delegates, suppliers and other business contacts. It does not replace a client organisation's own privacy notice. When an employer books training for its staff and gives us delegates' details, the employer is responsible for its own use of that information. We use it to arrange and deliver the training, as described below.
2. The information we collect
Depending on how you interact with us, we may collect:
- identity and business contact details, such as your name, job title, organisation, address, email address and telephone number;
- enquiry and correspondence information, including the content of emails, calls, website forms and feedback;
- contract, billing and transaction information, such as courses booked, invoices, payment status and limited payment details;
- training information, such as booking details, attendance, assessment results, qualification registration details and certificates;
- information about access requirements or reasonable adjustments you ask us to make so you can take part in training;
- website and device information, such as IP address, browser type, device information, pages visited and cookie preferences; and
- marketing preferences, where applicable.
Health information: Our training covers mental health, and delegates sometimes choose to share personal experiences during a session. We do not record personal disclosures made during training. We only hold health information where you give it to us to arrange support or adjustments, and only with your agreement. Please don't send sensitive personal information through the website enquiry form.
Support and signposting: Sekular provides training, not crisis or counselling services. Our Get support page lists independent organisations. We do not collect any information when you use it, and any contact you make with those organisations is covered by their own privacy notices.
3. How we obtain information
We obtain personal information:
- directly from you when you contact us, use a website form, book or attend training, or give feedback;
- from your employer or a colleague when they book training on your behalf;
- automatically through essential website technologies and, where you have agreed, analytics or other non-essential cookies; and
- from public sources such as Companies House and business social-media profiles, when reasonably necessary for business administration.
4. How and why we use personal information
Responding to enquiries and preparing quotes
Information used: identity, contact and enquiry information.
Lawful basis: steps requested before a contract; legitimate interests in responding and developing our business.
Arranging and delivering training
Information used: identity, contact, booking, attendance and adjustment information.
Lawful basis: contract; legitimate interests.
Registering delegates for the qualification and issuing certificates
Information used: identity, contact, attendance and assessment information.
Lawful basis: contract; legitimate interests; the awarding organisation's regulatory requirements.
Managing client accounts and invoices
Information used: identity, contact, billing and transaction information.
Lawful basis: contract; legal obligations; legitimate interests in business administration.
Maintaining records, quality and security, and defending legal claims
Information used: correspondence, training, website and transaction information.
Lawful basis: legitimate interests; legal obligations.
Sending relevant updates or marketing
Information used: identity, business contact details and preferences.
Lawful basis: consent where required; otherwise legitimate interests and the electronic-marketing rules. You may opt out at any time.
Operating, securing and improving the website
Information used: technical, usage and cookie information.
Lawful basis: legitimate interests for security and essential operation; consent for non-essential cookies.
Complying with law and official requests
Information used: relevant identity, contact and transaction information.
Lawful basis: legal obligations.
Where we hold health information about access needs or adjustments, the additional condition will be your explicit consent.
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals.
5. Marketing
We may send relevant information about our training to business contacts where the law permits. Where consent is required, we will ask for it. You can stop marketing at any time by using an unsubscribe link or contacting us. We may keep a minimal record so that we respect your choice. Messages about training you have booked are not marketing. We do not sell personal information or share it with third parties for their own marketing.
6. Cookies and similar technologies
Our website may use cookies and similar technologies. Strictly necessary technologies may operate without consent. Non-essential technologies, such as certain analytics or embedded media, remain off until you choose to allow them. You can change your choices using the website's cookie preference tool.
7. Who we share information with
Where necessary, we may share personal information with:
- Nuco Training and First Aid Awards (FAA), to register delegates for the FAA Level 2 Award in First Aid for Mental Health (RQF) and issue certificates. They act as independent controllers for their own regulatory responsibilities;
- the employer or organisation that booked your training, limited to attendance and completion information;
- website, hosting, email, cloud storage, accounting, payment and video-conferencing providers;
- our accountants, professional advisers and insurers;
- HM Revenue & Customs, regulators, courts or law-enforcement bodies where required or permitted by law; and
- a purchaser or adviser involved in a genuine business sale or restructuring, subject to appropriate confidentiality safeguards.
Service providers acting on our behalf may use personal information only for agreed purposes, under contract and with appropriate security.
8. International transfers
Some technology providers (for example, our website platform) may store or access information outside the UK. Where this happens, we rely on a lawful transfer mechanism, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information.
9. Security and retention
We use proportionate technical and organisational measures to protect personal information against loss, misuse or unauthorised access. Access is limited to people and providers who need it. No internet or email system is completely secure, so please agree a secure method with us before sending anything particularly sensitive.
We keep information only for as long as reasonably necessary. Our usual guide is:
- general enquiries that do not lead to a booking: up to 12 months after the last contact;
- training records and certificates: for the three-year validity of the qualification plus a reasonable period to support renewal, normally no more than six years;
- information about adjustments or access needs: deleted once the training has taken place, unless you ask us to keep it for future courses;
- client contracts, invoices and financial records: six years after the end of the relevant accounting period, or longer if required by law;
- marketing information: until you opt out, with a minimal record kept to respect an opt-out; and
- website and cookie information: according to operational need and the durations in the cookie settings.
10. Your rights
Depending on the circumstances, you may have the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information or restrict how we use it;
- object to processing based on legitimate interests, and object at any time to direct marketing;
- receive certain information in a portable format; and
- withdraw consent at any time, without affecting earlier lawful processing.
Rights are not absolute and exemptions may apply. We will normally respond within one month. We may extend this for complex requests where the law allows. Requests are normally free.
11. Complaints
If you believe we have not handled your personal information properly, please contact us using the details in section 1. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay.
You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. The ICO will normally expect you to have raised the matter with us first.
12. Changes to this notice
We may update this notice when our services, website, suppliers or the law change. The latest version will always be published on our website with its revision date.