Privacy Policy

This Privacy Policy explains how Construction Test Booking collects, uses, shares, stores and protects personal information when you use constructiontestbooking.com, contact us, make a booking request, order a CSCS card service, purchase a course, or use a related support service.

We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection and privacy laws.

This policy should be read together with our Terms and Conditions, Refunds Policy and Cookies Policy.

We collect information that you provide directly, information generated while you use our services, and limited technical information needed to operate, secure and improve the website.

We use personal information for the following purposes:

• to process and respond to your queries;
• to create, manage, amend, support or confirm CITB HS&E test booking requests;
• to process CSCS card-ordering, Level 1 course and group booking service requests;
• to verify details relevant to a requested service, including identity, eligibility, test type, course or card requirements;
• to calculate pricing, manage optional add-ons, process secure payment and reconcile payment status;
• to send service emails, order confirmations, support messages, payment updates and abandoned booking reminders;
• to deliver CRM webhook records and manage booking support, follow-up activity and fulfilment workflows;
• to create or prepare MyWorkLife access where this is part of the purchased service;
• to keep consent, audit, fraud-prevention, accounting, legal, reporting and dispute-handling evidence;
• to maintain website security, troubleshoot issues and improve our services, including identifying booking, course-order and card-order form drop-off points without sending typed form values to Google Analytics.
• to measure Google Ads and Google Analytics conversions using consented, hashed first-party contact data where advertising measurement consent allows it.

We process your personal information under one or more lawful bases under UK GDPR, depending on the context:

• Consent: where you voluntarily provide information, accept policy wording, request contact, or allow optional processing where consent is required.
• Contract: to take steps before entering into a contract with you, process your order, provide a service you requested, or fulfil a contract.
• Legal obligation: where we must retain, disclose or process information to comply with law, regulation, accounting, tax, fraud-prevention or official authority requirements.
• Legitimate interests: to operate and secure our website, manage customer support, maintain records, prevent misuse, recover abandoned bookings, handle disputes, and improve our services, provided those interests are not overridden by your rights and freedoms.

We do not sell your personal information. We may share personal information only where needed to provide our services, operate the website, comply with law, or protect our rights.

Your information may be shared with:

• CITB, Pearson VUE, CSCS or relevant official providers where required to book, manage or support a test, card or related service request;
• Stripe and other payment infrastructure providers for secure card payment handling and payment reconciliation;
• LeadTrack CRM and related fulfilment systems used to manage booking support, follow-up activity and service delivery;
• MyWorkLife where account access, course fulfilment or purchase fulfilment is part of the service;
• email, hosting, database, IT, analytics, security and customer-support service providers that help us operate the website or deliver services;
• Google Analytics and Google Ads, where consent settings allow measurement, conversion linking or enhanced conversions using hashed first-party contact data;
• regulators, courts, law enforcement, professional advisers or other third parties where required by law or necessary to establish, exercise or defend legal rights.

We require service providers to respect the security of your personal information and to process it lawfully and only for permitted purposes.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, customer support, audit evidence, legal, accounting, tax, reporting, fraud-prevention and dispute-handling requirements.

Booking, order, payment, consent and CRM evidence may be kept for longer than an active service request where needed to demonstrate what was requested, what was supplied, which policy version was accepted, how payment was handled, or how a dispute or legal obligation was managed.

When personal information is no longer needed, we will delete, anonymise or securely archive it in line with our operational and legal requirements.

Under data protection law, you may have the following rights, subject to legal limits and verification of your identity:

• the right to access your personal information;
• the right to rectify inaccurate or incomplete data;
• the right to request erasure of your data, sometimes called the right to be forgotten;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent at any time, where processing is based on consent.

To exercise your rights, please contact us at contact@constructiontestbooking.com. We may ask you to confirm your identity or provide information that helps us locate the relevant record.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can find more information at ico.org.uk.

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, secure service providers, encrypted transport where appropriate, operational controls and audit records.

No website or online service can guarantee absolute security. You should keep any account, payment, email and device access secure and contact us promptly if you believe information you shared with us may be at risk.

Our website may use cookies or similar technologies to support essential website functions, admin sessions, booking progress, checkout continuity, security, analytics, form-interaction measurement or marketing where configured and lawful.

For more information, please see our Cookies Policy.

If you have any questions about this Privacy Policy, how your data is handled, or how to exercise your data protection rights, please contact us at contact@constructiontestbooking.com.