Privacy Policy
Privacy Policy
Last updated: 16th September 2026
Enhance Safeguarding Practice Training & Consultancy Ltd ("Enhance Safeguarding Practice", "we", "us" or "our") respects your privacy and is committed to protecting personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, participate in our training or engage us to provide training, consultancy, quality assurance or safeguarding review services.
We aim to collect only the information we need, use it for clear and legitimate purposes and handle it securely.
1. Who we are
Enhance Safeguarding Practice Training & Consultancy Ltd
Registered in England and Wales
Company number: 17457658
Registered office:
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
Email: info@enhancesafeguardingpractice.co.uk
Website: enhancesafeguardingpractice.co.uk
For data protection purposes, Enhance Safeguarding Practice Training & Consultancy Ltd is responsible for the personal information we process in connection with our own business activities.
2. Information we may collect
Depending on how you interact with us, we may collect:
- Name
- Job title and organisation
- Email address
- Telephone number
- Business contact details
- Information provided when making an enquiry
- Information relating to training bookings and attendance
- Feedback and evaluation information
- Information required to provide consultancy or review services
- Information contained in documents provided to us by clients where this is necessary to deliver an agreed service
- Website and technical information, such as IP address and information about how you use our website
- Information relating to invoices, payments and business transactions
We aim to collect only information that is necessary and relevant to the purpose for which it is being used.
3. How we collect information
We may collect information:
- Directly from you when you contact us
- Through our website and online enquiry forms
- When you book or attend training
- When you engage us for consultancy or review work
- From the organisation you work for where this is necessary to provide an agreed service
- Through business administration, accounting and payment processes
- Automatically through cookies and similar technologies when you use our website
Where we receive information about you from an organisation or another source, we will handle it in accordance with applicable data protection law.
4. How we use personal information
We may use personal information to:
- Respond to enquiries
- Arrange and deliver training
- Manage bookings and attendance
- Provide certificates
- Provide consultancy and safeguarding review services
- Communicate with clients
- Prepare reports and recommendations
- Obtain feedback about our services
- Manage payments, invoices and accounts
- Maintain appropriate business records
- Improve our services
- Maintain and improve our website
- Meet legal, regulatory and professional obligations
- Protect the security of our business, systems and information
We will not use personal information for purposes that are incompatible with the purpose for which it was collected without appropriate consideration and, where required, further privacy information.
5. Our lawful basis for processing information
Data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
- Contract – where processing is necessary to provide services you have requested or to take steps before entering into a contract.
- Legitimate interests – where processing is necessary for legitimate business purposes and those interests are not overridden by the rights and interests of the individual.
- Legal obligation – where we are required to process information to comply with a legal or regulatory requirement.
- Consent – where we have asked for your consent and consent is the appropriate lawful basis.
The appropriate lawful basis depends on the particular processing activity. We do not rely on consent where another lawful basis is more appropriate.
6. Safeguarding and sensitive information
Some of the information we may encounter when providing safeguarding consultancy or Insight Reviews may be particularly sensitive. This may include information relating to children's welfare, health, family circumstances, ethnicity, religion, criminal allegations or other information requiring additional protection.
Where we process special category or criminal offence data, we will identify and document the appropriate legal basis and additional condition required by data protection law before undertaking the relevant processing.
We recognise that safeguarding information requires a high level of confidentiality and security.
Our preferred approach
Where practical, safeguarding records will be reviewed within the client's own systems and environment, using a device and access arrangements provided by the client.
This helps keep the client's records within the organisation and reduces unnecessary copying, downloading or transfer of identifiable information.
Where information genuinely needs to be provided to us, we will agree an appropriate secure method of transfer with the client.
This may include:
- Secure organisational email
- Secure file-sharing systems
- Encrypted or password-protected documents
- Other secure transfer methods agreed with the client
We aim to minimise the amount of identifiable information we access, transfer or retain and will only use information necessary for the agreed service.
7. Client safeguarding records
Where we are engaged to undertake an Insight Review or other safeguarding-related consultancy, the organisation providing the records remains responsible for determining the information that is appropriate to provide to us and for ensuring that the sharing arrangement is lawful.
The precise data protection roles and responsibilities of Enhance Safeguarding Practice and the client will be established according to the nature of the particular engagement.
Where required, appropriate contractual arrangements, data processing provisions or data-sharing arrangements will be put in place.
Where possible, reports and recommendations will focus on themes, patterns, practice and organisational learning rather than unnecessary identifiable information about individual children or families.
Data-sharing arrangements should identify the relevant lawful basis before information is shared.
8. Confidentiality and information security
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Accidental loss
- Destruction
- Misuse
- Unauthorised disclosure
- Unauthorised alteration
Access to information will be restricted to people who need it for legitimate business purposes.
We will also take appropriate steps to ensure that information is securely handled, transferred and disposed of.
9. How long we keep information
We will retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected, including where we need to retain information to meet legal, accounting, contractual, regulatory or professional requirements.
Retention periods may differ depending on the type of information and the service provided.
For safeguarding consultancy and Insight Reviews, we will seek to minimise the retention of identifiable safeguarding information and will agree appropriate retention and deletion arrangements with the client.
Data protection law does not prescribe one universal retention period; organisations should determine and document appropriate retention periods according to the purpose and circumstances.
10. Who we may share information with
We do not sell or rent personal information.
Where necessary, we may share information with organisations or service providers that support our business, such as:
- Website and hosting providers
- Email providers
- Accounting and financial service providers
- Payment providers
- Secure document or file-storage providers
- Professional advisers
- IT and technical service providers
Where another organisation processes personal information on our behalf, we will take appropriate steps to ensure that suitable contractual and security arrangements are in place.
We may also disclose information where required by law or where necessary to protect someone's vital interests or safety.
11. International transfers
Some of our service providers may process or store information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place.
12. Cookies and website technology
Our website may use cookies and similar technologies.
Some cookies may be necessary for the website to function. Other cookies may be used to understand how visitors use the website or to provide additional functionality.
Where required, we will ask for your consent before using non-essential cookies.
Further information about cookies can be provided in our Cookie Policy.
13. Your data protection rights
Depending on the circumstances, you may have rights under UK data protection law, including:
- The right to be informed about how your information is used
- The right to access your personal information
- The right to request correction of inaccurate information
- The right to request deletion in certain circumstances
- The right to restrict processing in certain circumstances
- The right to object to certain processing
- The right to data portability where applicable
- Rights relating to automated decision-making and profiling where applicable
If we rely on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
14. How to exercise your rights
If you have a question about how we use your personal information or wish to exercise your data protection rights, contact us:
Email: info@enhancesafeguardingpractice.co.uk
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before providing information or making changes.
15. Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information about making a complaint is available from the ICO.
16. Children's information
Our services may involve organisations that work with children and young people.
We take particular care when personal information relating to children is processed. We seek to ensure that information is handled lawfully, fairly, securely and only to the extent necessary for the relevant purpose.
Where safeguarding information is involved, we recognise that appropriate information sharing can be necessary to protect children. Data protection law does not mean that consent is always required before information can be shared for safeguarding purposes; the appropriate lawful basis should be identified for the circumstances.
17. Automated decision-making
We do not currently use personal information to make decisions about individuals solely through automated decision-making or profiling.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing activities.
The latest version will be published on this website with the date it was last updated.
