Privacy Notice — Training Certificate

DoubleCHEK™ product training · Last updated: 7 June 2026

This notice explains how your personal data is handled when you complete the DoubleCHEK knowledge-check quiz and request a training certificate. Please read it before submitting your details.

For the site owner — confirm before going live: the highlighted items below (the data controller's identity, ICO registration number, retention period, and any third party the records are shared with) must be checked by you and, ideally, your data-protection adviser. Where you see [CONFIRM], replace it with your own details.

1. Who controls your data

The data controller is Enteral Access Technologies Ltd [CONFIRM — is the controller EAT Ltd, the distributor running this training, or both as joint controllers?], Liverpool Science Park, 131 Mount Pleasant, Liverpool, L3 5TF, United Kingdom. ICO registration number: [CONFIRM].

Questions about your data, or to exercise any of the rights below, contact: [email protected].

2. What we collect

Data	Why
Your name	To print it on, and identify, your certificate.
Your work email address	To identify you in our training records and, if needed, contact you about your training.
Your healthcare institution / hospital	To record where the trained user works.
Quiz score, time taken, date and language	To evidence that training was completed and passed.
Your consent and the date you gave it	To demonstrate a valid lawful basis for holding the above.

We do not collect special-category (sensitive) data, and the quiz does not involve patient data.

3. Lawful basis

We process this data on the basis of your consent (UK GDPR Article 6(1)(a)), given by ticking the consent box before downloading your certificate. You can withdraw consent at any time (see section 7); withdrawal does not affect any processing carried out before you withdrew.

4. How and where it is stored

When you submit, your details are sent securely (over HTTPS) to our website host, Netlify, which stores form submissions on our behalf as a data processor. Access is restricted to authorised personnel of the controller. Your certificate PDF itself is generated in your browser and downloaded to your own device.

5. How long we keep it

We keep training records for [CONFIRM — e.g. 3 years] from the date of completion, after which they are deleted, unless we are required to keep them longer to meet a legal or regulatory (e.g. medical-device training evidence) obligation.

6. Who we share it with

Your data is shared only with Netlify (our hosting processor) and [CONFIRM — e.g. the device manufacturer / distributor, if applicable]. We do not sell your data or use it for marketing. Where data is transferred outside the UK, it is protected by appropriate safeguards such as Standard Contractual Clauses.

7. Your rights

Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To do any of these, email [email protected].

If you are unhappy with how your data has been handled you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.