Privacy Policy
Last updated: April 2026
Introduction
Brilliant Skill Limited is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, and safeguard the data you provide when interacting with our services or visiting our website.
We recognise that when you choose to share your information with us, you place trust in our organisation. We take this responsibility seriously and ensure compliance with all applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.
Information We Collect
When you engage with Brilliant Skill, we may collect various types of information depending on the nature of our interaction:
Contact details such as your name, job title, organisation name, email address, and postal address are typically collected when you enquire about our services or register for training programmes. We gather this information directly from you through email correspondence, registration processes, or consultation meetings.
Professional information including your role, department, learning objectives, and relevant experience may be collected to help us design training that meets your specific needs and ensures programme content is appropriately tailored.
When you visit our website, technical data is automatically collected through cookies and similar technologies. This includes your IP address, browser type, device information, pages visited, and navigation patterns. This data helps us understand how visitors use our site and identify opportunities to improve user experience.
If you participate in our training programmes, we collect information related to attendance, assessment results, feedback, and engagement with learning materials. This data supports programme administration and enables us to evaluate effectiveness.
How We Use Your Information
We process personal data for specific, legitimate purposes connected to delivering our training and development services:
Your contact information enables us to respond to enquiries, provide information about our services, arrange consultations, and maintain ongoing communication about programmes you've expressed interest in or participated in.
Professional and organisational data helps us customise training content to your context, ensuring relevance and maximising the value participants gain from our programmes. This tailoring is fundamental to our approach.
Administrative information supports the practical delivery of training, including managing registrations, coordinating logistics, providing joining instructions, and maintaining accurate records of participation for certification purposes.
Feedback and assessment data allows us to evaluate programme effectiveness, demonstrate learning outcomes, identify areas for improvement, and continuously refine our training methodologies.
Website usage data helps us understand visitor behaviour, identify popular content, detect technical issues, and make informed decisions about site improvements and content development.
Where we have obtained your consent or have a legitimate business interest, we may use your contact details to send information about new services, programmes, or resources that we believe may be of professional interest to you. You can opt out of such communications at any time.
Legal Basis for Processing
We process personal data only where we have a lawful basis to do so. The legal grounds we rely on include:
Contractual necessity: When you engage us for training services, processing your data is essential for delivering the programme you've commissioned and fulfilling our contractual obligations to you.
Legitimate interests: We process certain data because doing so serves legitimate business interests that are not overridden by your privacy rights. This includes maintaining client relationships, improving our services, and ensuring effective administration of training programmes.
Consent: For certain activities such as marketing communications or specific types of data collection, we obtain your explicit consent before processing. You may withdraw this consent at any time.
Legal obligations: In some circumstances, we process data to comply with legal requirements, such as maintaining financial records for tax purposes or responding to lawful requests from regulatory authorities.
Data Sharing and Disclosure
We do not sell personal data to third parties. However, we may share information with carefully selected partners and service providers in specific circumstances:
Technology providers who support our website hosting, email communications, and data storage require access to certain information to deliver their services effectively. We ensure these providers maintain appropriate security standards and process data only according to our instructions.
When delivering training for client organisations, we share relevant participant information with designated contacts within that organisation to facilitate programme coordination and reporting.
Professional advisors including legal counsel, accountants, and insurers may receive personal data where necessary for them to provide their services to us.
In rare circumstances, we may disclose information to comply with legal obligations, respond to valid legal process, protect our rights or property, or ensure the safety of individuals.
All third parties who receive personal data from us are required to respect its confidentiality and security, and to use it only for the specific purposes we've authorised.
Data Security
We implement robust security measures to protect personal information from unauthorised access, alteration, disclosure, or destruction. These safeguards include:
Technical controls such as encryption of data in transit and at rest, secure authentication protocols, regular security updates, and network protection mechanisms prevent unauthorised access to our systems.
Organisational measures including staff training on data protection, clear policies governing data handling, restricted access to personal information on a need-to-know basis, and regular reviews of our security practices ensure human factors don't compromise data security.
Physical security controls protect the premises and equipment where personal data is stored or processed.
Whilst we take extensive precautions to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly addressing any breach that may occur and notifying affected individuals as required by law.
Data Retention
We retain personal information only as long as necessary for the purposes for which it was collected or to meet legal obligations.
Client and participant data relating to training programmes is typically retained for six years following programme completion. This period allows us to provide post-programme support, respond to queries about past training, and maintain records for professional accreditation and quality assurance purposes.
Marketing communications data is retained until you opt out of receiving such communications or we determine that continued retention no longer serves a legitimate purpose.
Website analytics data is generally retained for two years, after which it is anonymised or deleted.
Financial records are maintained for the period required by UK tax law, currently six years from the end of the relevant tax year.
When personal data is no longer required, it is securely deleted or anonymised to prevent identification of individuals.
Your Rights
Data protection legislation grants you several rights regarding your personal information:
You may request access to the personal data we hold about you, receiving a copy of this information along with details of how we're using it.
You can ask us to correct inaccurate or incomplete personal data we hold about you.
In certain circumstances, you may request deletion of your personal data, though this right is not absolute and may be limited by our legal obligations or legitimate interests.
You can object to processing of your personal data that is based on legitimate interests or carried out for marketing purposes.
Where processing is based on consent, you may withdraw that consent at any time, though this won't affect the lawfulness of processing that occurred before withdrawal.
You can request restriction of processing in specific situations, such as whilst we verify the accuracy of data you've challenged.
In some circumstances, you have the right to receive personal data you've provided to us in a structured, commonly used format and to transmit this to another organisation.
To exercise any of these rights, please contact us using the details provided at the end of this policy. We'll respond to valid requests within one month, though complex requests may require additional time.
Cookies and Website Technologies
Our website uses cookies and similar technologies to enhance functionality and understand how visitors use the site. For detailed information about the specific cookies we use, their purposes, and how to manage your preferences, please refer to our separate Cookies Policy.
Changes to This Policy
We review this privacy policy periodically to ensure it remains accurate and compliant with evolving legislation and best practices. When we make material changes, we'll update the "last updated" date at the top of this page and may notify you through other means such as email if the changes significantly affect how we handle your data.
We encourage you to review this policy occasionally to stay informed about how we protect your information.
Contact Us
If you have questions about this privacy policy, wish to exercise your data protection rights, or have concerns about how we handle personal information, please contact us:
Brilliant Skill Limited
12 Victoria Square
Birmingham
B1 1BD
United Kingdom
Email: [email protected]
If you're dissatisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office, the UK's supervisory authority for data protection matters. Details can be found at ico.org.uk.