Privacy Policy

How M5 Training collects, uses and retains personal information, and the rights available to you in respect of that information.

Last updated 25 August 2026

1. About this notice

This privacy notice explains how Craig MacNeil, trading as M5 Training ("M5 Training", "we", "us" or "our"), collects, uses, discloses and retains personal information relating to individuals who contact us through this website or who book training or assessment with us. It also sets out the rights available to you under the UK General Data Protection Regulation and the Data Protection Act 2018.

M5 Training is the data controller in respect of the personal information described in this notice. Our postal address is 12 South Greens, Byrness Village, Newcastle upon Tyne, NE19 1TT. We may be contacted by email at craigjmacneil@gmail.com or by telephone on 07725 177499.

2. Information we collect

Where you submit a booking enquiry through this website, we collect the information you enter into that form. This comprises your name, your email address, your telephone number where you choose to provide it, the course in which you are interested, your stated level of experience, your preferred dates or timeframe, and any further information you include in your message.

Where you proceed to book training with us, we additionally collect the information necessary to deliver the course and to register you with the relevant awarding body. This ordinarily comprises your full name, your date of birth, your contact details, particulars of any certification you already hold, and the outcome of your training or assessment. In the course of practical training and assessment we may photograph the work undertaken, as awarding bodies require photographic evidence in support of an assessment decision.

Our hosting provider additionally records limited technical information, including the IP address from which you access this website, for the purpose of maintaining the security and availability of the site.

3. Purposes and lawful bases for processing

We process personal information in order to respond to enquiries and to arrange training, which is necessary in order to take steps at your request prior to entering into a contract with you. Where a booking is made, we process personal information in order to deliver the course, to register you with an awarding body, to carry out assessment and to arrange for the issue of your certificate, each of which is necessary for the performance of our contract with you.

We further process personal information in order to maintain records of training, assessment and health and safety matters. Such processing is necessary for compliance with our legal obligations and is undertaken in our legitimate interests in maintaining accurate and complete business records. We process limited technical information in our legitimate interests in protecting this website and its users.

We do not send marketing communications, and we do not sell, rent or otherwise disclose personal information to third parties for their own marketing purposes.

4. Disclosure of personal information

We disclose personal information only where it is necessary to do so. This website is hosted by Cloudflare, Inc., which also transmits booking enquiries to us by email, and enquiries are received into an account provided by Google LLC. Where you book a course leading to a qualification or formal assessment, we provide the candidate details required by the relevant awarding body, being City & Guilds (NPTC) or Lantra, in order that you may be registered and certificated. Where a booking results in an invoice or payment, the associated records are disclosed to our accountant and, where required, to HM Revenue & Customs.

Certain of the providers referred to above operate outside the United Kingdom. Where personal information is transferred outside the United Kingdom, that transfer is made subject to the safeguards permitted under applicable data protection legislation, such as an adequacy decision or the International Data Transfer Agreement.

5. Retention

Photographs taken during training and assessment, together with the contact details of course attendees, are deleted within thirty days of completion of the course. Assessment reports, and the candidate records our awarding bodies require us to hold, are retained for a period of twelve months. Enquiries which do not result in a booking are retained for a period of up to twelve months and are then deleted.

Invoices and other financial records are retained for six years, as required by tax legislation. A limited amount of personal information, such as your name and particulars of the services invoiced, is therefore held within our accounting records for longer than the periods described above.

6. Cookies and similar technologies

This website does not use advertising, analytics or tracking cookies, and we do not compile any profile of your browsing activity. Our hosting provider may set a limited number of strictly necessary cookies for the purposes of security and the proper functioning of the site; such cookies do not track you across other websites. Typefaces used on this website are served by Google Fonts, with the result that Google receives your IP address in order to deliver the relevant font files.

7. Your rights

Under data protection legislation you have the right to request access to the personal information we hold about you, and to request that inaccurate information be corrected. You may request that personal information be erased where we have no continuing lawful basis for retaining it, and you may request that we restrict our processing of it or object to that processing. You may also request that personal information you have provided to us be transferred to you or to another provider in a structured, commonly used and machine-readable format.

Requests may be made using the contact details set out in section 1 of this notice. We will respond within one month of receipt. No fee is payable in respect of such a request.

8. Complaints

If you are dissatisfied with the manner in which we have handled your personal information, we would ask that you raise the matter with us in the first instance so that we may address it. You are also entitled to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection in the United Kingdom, at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

9. Amendments to this notice

We may amend this notice from time to time in order to reflect changes in our practices or in applicable law. Any amended version will be published on this page and the date stated above will be revised accordingly.