GF

Privacy Policy

This policy explains how Graspan Frankton Ltd ("we", "us") collects and uses personal data when you use this website, send us an enquiry, or book a course. It should be read alongside our cookie policy.

Last updated: 1 October 2026

Who we are

Graspan Frankton Ltd is the controller of personal data described in this policy. We are a UK company (registered number 07817088). Our registered office is 364 West Road, Newcastle Upon Tyne, England, NE4 9JY. ICO registration number: Z3407476.

Questions about this policy or your personal data: info@graspanfrankton.com.

Personal data we collect

We collect personal data in these ways:

  • Contact form. Your name, email address and message. We use this to reply to you. The message is emailed to our team. We do not add you to a mailing list.
  • Course booking form. Your name, email address, phone number (if you give one) and the course date you select. We store the booking so we can reserve your place, and we email a confirmation to you and a copy to our team.
  • Security checks. Contact and booking forms use Google reCAPTCHA. Google may process technical data, such as your IP address and browser details, to tell genuine visitors from automated abuse.
  • Cookie choice. If you use the cookie popup, we store your choice in local storage on your device so we can remember it.
  • Analytics. If you accept analytics cookies, Google Analytics (loaded through Google Tag Manager) collects usage data such as pages viewed and a cookie identifier. These cookies are not set unless you agree. See our cookie policy for the cookie names and how long they last.
  • Technical data. Our hosting and security providers may process data such as IP address, browser type and the pages requested, so the site can be delivered and protected.

Please do not send special category data (such as health or criminal-offence information) through the website forms. If you include it in a message, we will use it only as far as we need to handle that message.

This website is aimed at businesses and adults booking professional training. We do not knowingly collect personal data from children.

How we use personal data

We use personal data for these purposes:

  • To answer enquiries. Lawful basis: legitimate interests in responding to people who contact us, or steps taken at your request before entering a contract.
  • To take and manage course bookings, including confirmation emails. Lawful basis: steps taken at your request before a contract, and performance of that contract.
  • To protect the forms from spam and abuse with Google reCAPTCHA. Lawful basis: legitimate interests in keeping the site secure.
  • To remember your cookie choice and, if you agree, to understand how the site is used. Lawful basis: consent for analytics cookies. You can withdraw that consent at any time. See the cookie policy for how.
  • To meet legal and professional duties, such as keeping records we need for accounting, complaints, or accredited training. Lawful basis: legal obligation, or legitimate interests in running our business and defending claims.

We do not sell personal data. We do not use it for automated decisions that produce legal effects or similarly significant effects for you.

Who we share personal data with

We share personal data with service providers who process it on our instructions, and only as needed for the purposes above:

  • Email delivery. Enquiry and booking emails are sent through our email provider.
  • Booking records. Course bookings are stored in our content system so we can manage places on a course.
  • Google. reCAPTCHA runs on the contact and booking forms. Google Analytics and Google Tag Manager run only if you accept analytics cookies. Google's Privacy Policy explains how Google handles that data. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

We may also disclose personal data if the law requires it, or if we need to protect our staff, clients or the public.

International transfers

Some providers, including Google and our email provider, may process personal data outside the UK. Where that happens, we use a safeguard required by UK data protection law, such as a transfer covered by adequacy regulations or a contract approved for international transfers.

How long we keep personal data

  • Enquiries. For as long as we need to respond and keep a record of the correspondence, then we delete or anonymise it.
  • Bookings. For the course and for as long afterwards as we need the record for accreditation, accounting, complaints and legal claims.
  • Analytics. Only while you consent. Cookie lifetimes are set out in the cookie policy.
  • Cookie choice. Until you change it or clear site data for this website.

Your rights

Under UK data protection law you can ask us to:

  • access the personal data we hold about you
  • correct inaccurate data
  • delete data, or restrict how we use it
  • object to processing based on legitimate interests
  • receive data you provided to us, in a portable format, where the processing is based on contract or consent and is automated
  • withdraw consent, where we rely on consent

These rights are not absolute. We will tell you if a legal exemption applies. To use them, email info@graspanfrankton.com. We may need to confirm your identity before we act on a request. We aim to respond within one month.

Complaints

You can complain to the Information Commissioner's Office (ICO), the UK regulator for personal data: ico.org.uk/make-a-complaint. We would appreciate the chance to deal with your concern first.

Changes to this policy

We may update this page if our services, forms or providers change. The "Last updated" date at the top will change when we do.