Privacy Policy

Last updated: 26 August 2026

EPW Training (“EPW”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data lawfully, fairly and transparently. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit EPW.com, contact us, request information, register for or attend a training course, make a payment, or otherwise interact with our services.

For personal data collected through EPW.com and our training services, EPW Training is the data controller unless we tell you otherwise. Our operations are based in London, United Kingdom, and we deliver professional training internationally.

1. Who This Policy Applies To

This policy applies to website visitors, prospective participants, registered participants, customers, company representatives, sponsors, trainers, suppliers and other people who communicate or do business with EPW. It does not apply to third-party websites or services that have their own privacy policies.

2. Personal Data We Collect

The personal data we collect depends on how you interact with us and may include:

Identity and contact information: your name, job title, employer or organisation, postal address, country, telephone number and email address.
Course and registration information: selected course, preferred city, dates, attendance information, course requirements, registration status and related correspondence.
Professional information: your role, department, industry, experience, learning objectives and other information relevant to the training service.
Billing and transaction information: company billing details, invoice information, payment status, transaction references and payment confirmation. Full payment-card details are normally processed directly by our payment provider and are not stored by EPW.
Training records: attendance, assessments or evaluations where applicable, feedback and information required to issue or verify certificates.
Communications: messages, enquiries, requests, complaints and records of our communications with you.
Website and technical information: IP address, browser and device information, approximate location derived from your IP address, referring pages, pages visited, dates and times of access, cookie identifiers and security logs.
Other information you provide: information submitted through forms, email, telephone, documents or other communications with us.

Please do not provide sensitive personal data unless it is genuinely necessary for us to deliver the requested service and we have asked you to provide it. Where special-category or similarly sensitive data is required, we will handle it with additional care and rely on an appropriate legal basis.

3. How We Collect Personal Data

We collect personal data:

directly from you when you use our website, contact us, register, pay, attend a course or submit feedback;
from your employer, sponsor, colleague or authorised representative when they enquire or register on your behalf;
from payment providers, banks and other service providers involved in a transaction or service;
automatically through website logs, cookies and similar technologies; and
from publicly available or professional sources where this is lawful and relevant to a legitimate business purpose.

If you provide another person’s data to us, you should ensure that you are authorised to do so and that the person has been given access to this Privacy Policy.

4. How We Use Personal Data and Our Lawful Bases

We use personal data only when we have a lawful basis. Depending on the circumstances, we may process it for the following purposes:

Responding to enquiries and preparing a registration or proposal: to provide course information, schedules, quotations and assistance. We rely on steps taken before entering into a contract and our legitimate interest in responding to genuine enquiries.
Managing registrations and delivering training: to register participants, coordinate course arrangements, communicate changes, manage attendance, provide materials and issue certificates. We rely mainly on performance of a contract.
Managing payments and accounts: to issue invoices, verify payments, process refunds and maintain financial records. We rely on performance of a contract and compliance with legal obligations.
Working with employers and sponsors: to coordinate bookings, confirmations, attendance or payment with the organisation arranging or funding the training. We rely on contract and legitimate interests.
Providing customer support: to answer questions, manage requests, resolve complaints and maintain service records. We rely on contract and legitimate interests.
Operating and protecting our website and systems: to authenticate users, prevent fraud and misuse, troubleshoot problems, maintain security and protect our legal rights. We rely on legitimate interests and, where applicable, legal obligations.
Improving our services: to analyse service performance, website use and feedback, and to improve course content and customer experience. We rely on legitimate interests or consent where consent is legally required.
Sending relevant communications: to send service messages and, where permitted, information about relevant courses or services. We rely on contract, legitimate interests or consent, depending on the communication and applicable law.
Complying with law and protecting legal rights: to meet regulatory, tax, accounting, fraud-prevention and legal requirements, and to establish, exercise or defend legal claims.

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against your rights and reasonable expectations. Where we rely on consent, you may withdraw it at any time without affecting processing that took place before withdrawal.

5. Payments

Online card payments may be processed by Stripe or another authorised payment provider. Payment providers process payment information under their own privacy terms and security controls. EPW generally receives transaction identifiers, payment status and limited billing details rather than your complete card number or security code. Bank transfers are processed through the relevant banks and financial institutions.

6. When We Share Personal Data

We do not sell or rent personal data. We may share personal data only where necessary and proportionate with:

website hosting, cloud, security, analytics, communications, email-delivery and IT service providers;
payment processors, banks, accountants and financial-service providers;
trainers, training venues, course coordinators, printing services, certificate providers and couriers involved in delivering the service;
your employer, sponsor or authorised representative where they arranged, funded or manage your registration;
professional advisers, insurers, auditors and legal representatives;
government bodies, regulators, law-enforcement agencies or courts where disclosure is required or permitted by law; and
a buyer, investor or successor organisation in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

Service providers may use personal data only for the agreed purpose and must protect it appropriately.

7. International Data Transfers

EPW provides courses internationally and works with service providers, trainers and venues in different countries. Your personal data may therefore be processed outside the country where you live. Where applicable data-protection law requires safeguards for an international transfer, we use appropriate measures such as adequacy decisions, approved contractual clauses, contractual protections and due diligence. You may contact us for further information about safeguards relevant to your data.

8. Cookies and Similar Technologies

EPW.com may use cookies and similar technologies to operate securely, remember preferences, understand website performance and improve the user experience. Some cookies are essential for the website to function. Other cookies, such as analytics or functionality cookies, are used only where permitted and, where required, with your consent.

You can manage cookies through any consent controls provided on the website and through your browser settings. Blocking certain cookies may affect the way some parts of the website operate.

9. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected. The period depends on factors including the nature of our relationship, course and certificate record requirements, accounting and tax obligations, contractual commitments, limitation periods, dispute resolution, security needs and applicable law.

For example, enquiry records are retained while an enquiry is active and for a reasonable follow-up period; registration, payment and certificate records may be retained longer where needed to provide evidence of training, meet legal obligations or resolve claims; and marketing information is retained until you opt out or it is no longer relevant. When data is no longer required, we delete, anonymise or securely archive it in accordance with our retention practices.

10. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, secure connections, authentication, backups, monitoring and restrictions on staff and service-provider access.

No internet or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and notify affected individuals and relevant authorities where required by law.

11. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to:

be informed about how your personal data is used;
request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request deletion of personal data in certain circumstances;
request restriction of processing;
object to processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent at any time where processing is based on consent; and
complain to an appropriate data-protection authority.

Your right to object: You may object at any time to the use of your personal data for direct marketing. You may also object to processing based on legitimate interests, although we may continue processing where we demonstrate compelling lawful grounds or need the data for legal claims.

To exercise a right, email support@epw.com. We may ask for information necessary to verify your identity and clarify your request. Privacy rights are not absolute, and a lawful exception may apply. We will respond within the period required by applicable law.

We do not normally make decisions about you based solely on automated processing where those decisions produce legal or similarly significant effects. If this changes, we will provide the information and protections required by law.

12. Marketing Communications

Where legally permitted, we may send information about EPW courses and related services that may be relevant to you or your organisation. You can opt out at any time by using the unsubscribe method in the communication or emailing support@epw.com. Opting out of marketing does not stop essential service communications about an enquiry, registration, payment or course.

13. Children’s Privacy

EPW’s website and professional training services are not directed at children. We do not knowingly collect children’s personal data through the website without an appropriate lawful basis and, where required, permission from a parent, guardian or authorised organisation. If you believe a child has provided personal data to us inappropriately, please contact us.

14. Third-Party Links

Our website may contain links to third-party websites, platforms or services. Those third parties are responsible for their own privacy practices. We encourage you to read their privacy notices before providing personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or data practices. The latest version will be published on this page with an updated date. Where a change materially affects how we use personal data, we will provide additional notice where required.

16. Contact Us and Make a Complaint

For privacy questions, requests or complaints, contact:

EPW Training
London, United Kingdom
Email: support@epw.com
Website: www.epw.com