Privacy notice

Who we are

myCPC.online is a trading name of MyCPC Training Ltd, a company registered in England and Wales (company number 17242905), with its registered office at Unit 8 Heston House, 7-9 Emery Road, Bristol, England, BS4 5PF.

We are the “data controller” for the booking information you give us — which means we’re responsible for how that information is handled.

For anything in this notice, you can contact us at info@my-cpc.online.

How the booking works (and why that matters for your data)

MyCPC Training Ltd is the booking and customer-service brand. The Driver CPC training itself is delivered by PSV Compliance and Training Ltd (“PSV-CT”), our delivery partner, under their JAUPT consortium AC02283 (ASOT). Your training hours are recorded with the DVSA under PSV-CT’s approval.

This matters for your privacy because the information is split deliberately:

• We (MyCPC) collect only the information needed to take and manage your booking.
• PSV-CT separately collect the details the DVSA requires — such as your driving-licence number and eligibility — and ask about any access needs, directly from you, before your course. That step is not part of your booking with us, and we do not collect or hold that information.

PSV-CT are a separate organisation responsible for their own use of your data. When we pass booking details to them so your course can be delivered, we do so as one independent organisation sharing with another (a “controller-to-controller” arrangement), limited to what’s needed to deliver your training.

What we collect, and why

When you book through myCPC.online, we collect:

Your name

To identify the booking and address you properly.

Your email address

To send your confirmation and keep you updated about your booking.

Your phone number

To contact you about your booking if needed.

Company name (if you give one)

For operator/fleet bookings and invoicing.

The course(s) and seats you’ve booked, and the price

To fulfil your booking and arrange your training.

Attendee names (for operator bookings)

So PSV-CT know who is attending.

Payment status (paid / awaiting payment)

To manage your booking and payment. We never see or store your card details — payments are handled by your bank or by Revolut.

We only collect what you give us. We don’t buy data, and we don’t gather information about you from other sources.

The “anything else” box

Some of our booking forms include an optional free-text box. Please don’t enter health, medical, or disability information there. If you have any access or accessibility needs, PSV-CT will ask you about these separately and securely before your course — that’s the right place for it, and it keeps that sensitive information properly protected.

Our lawful bases for using your information

Under UK data protection law, we rely on:

• Contract — we need your details to take and fulfil your booking.
• Legal obligation — we keep certain records (for example, financial records) to meet tax and accounting law.
• Legitimate interests — for basic security and to keep our service running. We balance this against your rights and keep it to what’s reasonable.

Who we share it with

We share your information only where it’s needed to deliver your training or run the service:

• PSV Compliance and Training Ltd — our delivery partner, so they can deliver your course and meet their DVSA obligations.
• Service providers who help us run the website and booking — for example, our database hosting (Supabase), website hosting (Netlify), and the service that sends your booking emails (Resend). These providers process data on our instructions and under agreements that require them to protect it.
• Payment — when you pay via the Revolut link, your payment is handled by Revolut. We see only whether a booking is paid or awaiting payment, never your card details.

We do not sell your information, and we do not use it for third-party advertising.

Where your information is held

Your information is stored on systems located in the UK or EU. Access is protected, and the accounts used to manage your data require multi-factor authentication (an extra login step beyond a password).

How long we keep it

• Booking and financial records — kept for 6 years plus the current financial year, as required for tax and accounting.
• Other booking-related information — kept for as long as needed to manage your booking and our relationship with you, then removed.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that’s wrong;
• ask us to delete your information (where we’re not required by law to keep it);
• object to or restrict certain uses;
• complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk.

To exercise any of these, contact us at info@my-cpc.online. We’ll respond as soon as we can and within the time limits the law sets.

Changes to this notice

We may update this notice from time to time. The “last updated” date at the top shows when it last changed.

Contact

MyCPC Training Ltd
Unit 8 Heston House, 7-9 Emery Road, Bristol, England, BS4 5PF
Email: info@my-cpc.online