We only collect personal information that we need to operate the Website, respond to enquiries, provide eligibility guidance, and meet our legal obligations. We do not sell your personal data.

NVQ Diplomas, the operator of nvqdiplomas.com, is the data controller for personal information collected through this Website and our enquiry channels.

• Email: info@nvqdiplomas.com
• Telephone / WhatsApp: +92 333 6010101

If you enrol with a partner training centre or awarding organisation, that organisation will usually be the controller for learner records, assessment evidence and certification data. We will tell you when that is the case.

Information you provide

You may give us personal data when you complete a form, email us, call us or message us on WhatsApp. This typically includes:

• Identity and contact details — such as your name, email address and telephone number.
• Enquiry details — the qualification you are interested in, your role, workplace context, experience and any message you send.
• Follow-up information — additional details you later provide so we can advise you more accurately.

Information collected automatically

When you visit the Website, our hosting and security systems may record technical data such as IP address, browser type, device information, pages viewed and the date and time of access. This is used to operate, secure and improve the Website.

Information we do not routinely collect

We do not ask for special category data (such as health, trade-union membership or biometric data) through the public Website. Please do not include sensitive information in enquiry forms unless we specifically request it and explain why.

We use personal information for the following purposes:

• To respond to enquiries and provide qualification information.
• To carry out an indicative eligibility review based on the details you supply.
• To arrange a callback, email reply or WhatsApp conversation.
• To introduce you, with your knowledge, to an appropriate training centre where you wish to proceed.
• To operate, maintain and secure the Website, including preventing misuse.
• To keep records of correspondence for quality, training and legal purposes.
• To comply with legal obligations and to establish, exercise or defend legal claims.

Under UK GDPR we rely on one or more of the following legal bases:

• Legitimate interests — to operate the Website, respond to professional enquiries, keep records of advice given, and protect the security of our systems, where this does not override your rights.
• Steps prior to a contract — where you ask us to assess eligibility or help you progress towards enrolment.
• Consent — where we ask for it, for example for certain optional communications. You can withdraw consent at any time.
• Legal obligation — where we must retain or disclose information to meet a legal requirement.

We share personal data only where necessary:

• Service providers who host the Website, send email, or provide IT, security or administration support, under appropriate contracts.
• Training centres or education providers, where you have asked us to progress an enquiry or enrolment and sharing is needed for that purpose.
• Professional advisers, such as lawyers or accountants, where required.
• Authorities, regulators or courts where we are legally required to do so, or to protect our rights, users or the public.

We do not sell personal data. Any organisation processing data on our behalf is required to keep it secure and use it only for the agreed purpose.

The Website uses cookies and similar technologies that are necessary to make it work, including session and security cookies. If you access a restricted administration area, authentication cookies are used to keep you signed in securely.

We do not currently use advertising cookies or sell browsing data to advertisers. If we introduce optional analytics or marketing cookies in future, we will update this policy and, where required, ask for your consent.

You can control cookies through your browser settings. Blocking some cookies may affect how the Website functions.

We keep personal data only for as long as needed for the purpose it was collected, including to meet legal, accounting or reporting requirements.

• Enquiry and eligibility correspondence is typically retained for up to 24 months after our last contact, unless a longer period is needed (for example where discussions are ongoing or a complaint remains open).
• Technical logs are retained for a short period for security and diagnostics.
• Where you enrol with a provider, that provider’s retention rules will apply to learner records.

When information is no longer required, we delete it or irreversibly anonymise it where deletion is not immediately practicable.

Our Website may be hosted, and some support tools may be provided, by organisations that process data outside the United Kingdom. Where that happens, we take steps required by UK data protection law, such as using the UK International Data Transfer Agreement or other approved safeguards, so that your information remains protected.

Subject to certain conditions and exemptions, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to erase data in certain circumstances.
• Object to, or ask us to restrict, certain processing.
• Receive data you provided to us in a portable format, where processing is based on consent or contract and is carried out by automated means.
• Withdraw consent where we rely on it.

To exercise these rights, email info@nvqdiplomas.com with enough detail for us to identify you and the request. We may need to verify your identity before responding. We will respond within one month, or explain if we need more time as permitted by law.

We use appropriate technical and organisational measures to protect personal data, including HTTPS, access controls for administration areas, and limiting staff access to information on a need-to-know basis. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to reduce risk.

This Website is intended for working professionals and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy to reflect changes in our practices, the Website or the law. The “Last updated” date shows when the current version took effect. Where a change is material, we will take additional steps to bring it to your attention where appropriate.

If you have questions about this policy or how we handle your data, contact NVQ Diplomas at info@nvqdiplomas.com or +92 333 6010101.

You also have the right to complain to the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the United Kingdom. We would appreciate the chance to address your concern first.

• ICO website: ico.org.uk
• ICO helpline: 0303 123 1113