Privacy Policy | High Assurance Security Training

Effective Date: 1 January 2026

Introduction

High Assurance Security Training Limited ("HAST", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website, services, and training programmes.

HAST is registered in England and Wales and operates from 86-90 Paul Street, London, EC2A 4NE. We act as the data controller for the personal data we process.

Information We Collect

Information You Provide to Us

We may collect the following personal data when you engage with us:

Full name, job title, and organisational affiliation
Email address, telephone number, and postal address
Enquiry details submitted through our contact forms
Training registration information and assessment records
Correspondence and communications with us

Information Collected Automatically

When you visit our website, we may automatically collect technical data including your IP address, browser type, operating system, referring website, pages visited, and the date and time of your visit. This information is collected through cookies and similar technologies.

How We Use Your Information

We use your personal data for the following purposes:

To respond to enquiries and provide information about our training services
To administer and deliver training programmes, including technical needs assessments
To process registrations, certifications, and assessment results
To communicate with you regarding your training, including scheduling and logistics
To improve our website, services, and training content
To comply with legal and regulatory obligations
To protect our legitimate business interests

Legal Basis for Processing

We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

Contractual necessity: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request
Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights
Consent: Where you have given clear consent for us to process your personal data for a specific purpose
Legal obligation: Where processing is necessary to comply with a legal obligation

Data Sharing

We may share your personal data with the following categories of recipients:

Training partners: Including the High Assurance Security Centre (HASC), the Institute of Administrative Management (IAM), and Global Education and Development Services (GEDS), where necessary for the delivery and administration of training programmes
Service providers: Third-party providers who assist with website hosting, IT support, and business operations, under appropriate contractual safeguards
Regulatory bodies: Where required by law or necessary for certification and accreditation purposes

We do not sell or rent your personal data to any third parties.

International Data Transfers

Where we deliver training programmes internationally or work with partners outside the United Kingdom, your personal data may be transferred to countries outside the UK. In such cases, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO), to protect your data in accordance with UK data protection law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Training records and certifications may be retained for a longer period to enable verification of qualifications.

When personal data is no longer required, it will be securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. As a specialist security training organisation, we apply rigorous standards to the protection of all data within our care.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: To request a copy of the personal data we hold about you
Right to rectification: To request correction of any inaccurate or incomplete data
Right to erasure: To request deletion of your personal data in certain circumstances
Right to restrict processing: To request that we limit the processing of your data
Right to data portability: To receive your data in a structured, commonly used format
Right to object: To object to processing based on legitimate interests or direct marketing
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the details below.

Cookies

Our website uses cookies to enhance your browsing experience and to collect analytical data about website usage. You can manage your cookie preferences through your browser settings. Essential cookies that are strictly necessary for the operation of our website cannot be disabled.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us:

High Assurance Security Training Limited
86-90 Paul Street, London, EC2A 4NE
Email: john.hogan@hasc.org.uk
Telephone: +44 (0) 7979 346828

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. The ICO can be contacted at ico.org.uk.