This Statement describes how Iqarus International Limited (“we/us/our”) collect, hold and process personal and sensitive information (“Personal Data”) that you, as a Student of ours, give to us. This Statement is written in accordance with applicable data protection legislation, including the EU General Data Protection Regulations 2016 (“GDPR”), the UK Privacy and Electronic Communications Regulations 2003, and the UK Data Protection Act 2018. Iqarus International Limited is registered as a Data Controller (number Z8904568) with the UK Information Commissioner’s Office (“ICO”).

We process information about you in paper and electronic form. On occasion, we share this information with external partners (Data Processors) who provide services to us, including payroll and contracted healthcare providers. This will only be shared to fulfil the purpose for which you give us your Personal Data and beyond this we do not share your information without your consent. In some circumstances, we may have statutory obligations to share your data with legal authorities.

What Personal Data we collect and why

We collect and process your Personal Data to:

• Provide medical and occupational health services.
• Administer and deliver training and development courses.
• Manage and deliver orders for medical equipment and supplies.
• Administer and manage employees and job applications.
• Improve the performance and efficiency of our website and email communications (see our Cookie Policy for details).
  
  

How we keep your data secure

We protect your Personal Data in accordance with established good practice and the controls set out in our Information Security Management System (“ISMS”). We undertake regular audits and check for Personal Data management and to identify any internal non-compliance, or other vulnerability.

How long we keep your data for

We keep your Personal Data only for so long as is necessary for the purpose of processing that you have consented to by enrolling on our training courses. We routinely retain your Personal Data for three years, our financial data for seven years and some medical records for longer where statutory requirements apply.

Accessing or rectifying your personal data

You have a right to access or to rectify the information that we keep about you. The former is termed a Subject Access Request and where you elect to do this, or to withdraw consent for processing, or to make a compliant or to require further information about our processing of your Personal Data processing, you are welcome to contact our Data Protection Officer at dataprotection@iqarus.com.