GDPR Privacy Notice

At Sancus Solutions we are committed to protecting and respecting your privacy. This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We will retain and process personal data if you are;

Purchasing training form us or attending a course
Registering with us as a consultant trainer or investigator

Training – Organisers and Delegates

By contracting to purchase training, or by attending when your employer has purchased training, you are agreeing to be bound by this policy. Any questions regarding this policy and our privacy practices should be sent to us. Our contact details appear at the end of this notice.

How do we collect information from you? – We might collect data from you when you contact us, either on the telephone or via email.

What type of information is collected from you? – Contact and payment details

How is your information used? – We will use your information to administer the training product. This would include how we:

Arrange and manage your course booking and attendance
To send you course material in advance of the course
Seek your views on the course through an evaluation survey
Complete an attendance certificate
Notify you of changes to our services

We might provide you with other goods or services to you or seek your views or comments on the services we provide – if you agree, send you communications which you have requested and that may be of interest to you.

Training - Consultants / Professionals

How do we collect information from you? -We will collect information from you when you complete the registration process.

What type of information is collected from you?

Contact details
Bank account details so we can process payments to you
Details of your experience, qualifications and employment history – your CV

How is your information used?

To arrange and manage your participation in investigations or to deliver training
To pay you for your services
To recommend your potential participation with those arranging training or investigations
To keep you updated with potential opportunities
To keep you updated regarding policies and procedures connected with your professional activities

We review our retention periods for personal information on a regular basis. We will only retain your data as long as is necessary.

We will never sell or pass on your details to third parties for marketing purposes.

If you are attending an accredited training course we will need to share some of your details with the awarding body who currently are the CPD Certification Service. We will only share sufficient details for your accreditation to be processed and the certificate to be issued.

How you can access and update your information – The accuracy of your information is important to us. If you would like access to the data we hold on you please contact us using the details at the end of this notice.

You have the right to ask for a copy of the information held by Sancus Solutions Ltd
You have the right to request that the data we hold on you is erased or rectified. For example, if you don’t want us to use your information for views and comments on the services we provide, you can ask to have your contact details removed.

We will retain and process personal data if ;

Sancus are contracted to undertake an OPCC Police Complaint Review

OPCC Police Complaint Reviews

Sancus Solutions Privacy Notice – OPCC Reviews

We will retain and process personal data if

Sancus has been contracted by an Office of Police Crime Commissioner (OPCC) to undertake a review of a complaint against police in accordance with The Police (Complaints and Misconduct) Regulations 2020.

The type of personal information we collect

Sancus are appointed by the Office of Police and Crime Commissioner (OPCC) receiving a request for the review of a complaint, to undertake that review and provide a recommendation.

The OPCC provide Sancus with the relevant documentation and following the review Sancus provide a recommendation to the OPCC. The personal information we collect, review and use to provide the recommendation is limited to that information provided by the OPCC. We do not collect personal information from any other source.

How we get the personal information we use and why we have it

The review OPCC Police Complaint Review process takes one of two forms,

The Sancus reviewer uses IT provided by the relevant OPCC and views the information securely on the OPCC’s IT system. They then provide their recommendation directly to the OPCC.
No personal information used in the review process is stored within any Sancus Solutions IT systems.
Sancus then record the review on our management system, referenced by the OPCC complaint URN. Management information recorded incudes – Date Received, Date to Reviewer, Date Completed, Review Recommendation (Not Upheld, Upheld), Accounting and Invoice data.

The OPCC makes available documentation relating to the complaint and the reviewer views that information, onsecure Sancus IT systems. This process can be summarised as,
The OPCC notify Sancus, via the secure Criminal Justice Secure e-mailing system (CJSM, that they have a complaint to review. The complaint is referenced by the OPCC Complaint URN, no personal information (name) of the complainant is directly recorded.
The OPCC send Sancus, via CJSM, electronic copies of relevant information relating to the complaint.
The review documentation is uploaded to a secure system where the reviewer views all documentation remotely and then generates their recommendation report. Sancus do not collect or use personal information from any other source.
The reviewer’s recommendation report is forward it to the OPCC via CJSM.
On completion of the review and within 28 days all documentation and correspondence relating to the review is deleted – no information other than the Sancus management report is retained.
Sancus log the review into our management system referenced by the OPCC Complaint URN. Management information recorded incudes – Date Received, Date to Reviewer, Date Completed, Review Recommendation (Not Upheld, Upheld), Accounting and Invoice data.

We use the information that the OPCC have given us in order to

Provide a recommendation to the OPCC to uphold/not uphold the request for complaint review.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at enquiries@sancussolutions.co.uk if you wish to make a request.

How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at

Sancus Solutions, Office 8B, Lockside Office Park, Lockside Road, Preston PR2 2YS
Phone Number: 01772 282800
e-mail: enquiries@sancussolutions.co.uk

You can also complain to the Information Commissioners Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

How do I complain to the regulator?

Sancus are registered with the Office of the Information Commissioner as a Data Controller.

If you would like to complain about the way we handle data please visit Information Commissioner’s Office