This policy presents how The Dog Trainer School handles the personal data of its people, members, suppliers and other third partners. Personal data is information that can identify a person, and this data can be in any form.

By following this policy, we ensure that we comply with legislation (including the UK General Data Protection Regulation and the Data Protection Act 2018), protect data from the risks of a data breach, and that we are transparent.

We take our data protection responsibilities very seriously. Anybody who works with us must too, and any breach of this policy may result in disciplinary action and/or the termination of their contract. This policy does not form part of any employee’s contract of employment, and we may update it at any time. 

Data Protection Principles

When processing personal information, we must ensure that the data is:

- processed lawfully, fairly and in a transparent manner, and for one or more of the below reasons:

- the individual has given consent, which must be freely given, specific, unambiguous, and by positive action

- it is necessary for a contractit is necessary for legal compliance 

- it is necessary to protect the vital interests of an individual

- it is necessary for the public interest 

- it is necessary for the legitimate interests of The Dog Trainer School or a third party, except when these interests are overridden by fundamental rights and freedoms

- collected only for specified, explicit and legitimate purposes

- adequate, relevant and limited to what is necessary accurate and up to date

- not kept for longer than is necessary, then deleted or anonymised

- secure and protected against unauthorised or unlawful processing, accidental loss, destruction or damage.

We must also be accountable for how personal data is processed, tell the relevant people what we will do with their personal data and why, honour the rights that individuals have about their personal data (see ‘Individual Rights’ below), and not transfer data to another country without appropriate safeguards.

If there is a suspected breach of personal data, the Data Protection Officer (see ‘Data Protection Officer’ below) may need to report this to the Information Commissioner’s Office within 72 hours, and to inform the individuals involved without undue delay. We must also keep a record of all breaches.

Individual Rights

Individuals have rights in relation to how we process their personal data. These include the right to:

- withdraw consent request access to their personal data that we hold

- prevent our use of their personal data for direct marketing purposes

- ask us to erase any personal data that is no longer necessary for us to hold

- ask us to correct any inaccurate or out of date information prevent processing of data that is likely to cause damage or distress

- be notified of a data breach which is likely to result in a high risk to their rights and freedoms. 

Record keeping

Legally, we must keep full and accurate records, including:

- individuals’ consent to the processing of their personal data

- clear descriptions of the types of data that we hold, and who this is for

- the reason why we are processing this data

- details of any third-party recipients of personal data, including why this sharing is needed to provide contracted services, evidence that individuals have been clearly informed, the contract between parties, and the measures taken for a secure transfer of data

- the time limits for retaining different types of data

- a description of the security measures in place. 

Data Protection OfficerIf you have any questions or concerns about this policy or data protection at The Dog Trainer School, please contact our Data Protection Officer:

Helen Wainwright

[email protected]

Last Updated: May 2025