Privacy Policy
Last updated 30 August 2026
CLIMB is a trading style of FoxFace Creative Ltd, which is the data controller for the information described here. We train engineers; we are not in the business of collecting data about them beyond what running a course actually requires.
FoxFace Creative Ltd
Unit 10, Brailwood Close, Bilsthorpe, Nottinghamshire, NG22 8UG
training@foxface.io · 0333 090 7546
1. Information we collect
When you book a course
- Delegate name, email address and telephone number
- The company you work for, where you give it
- Which course and date you booked, and what you paid
When you join a waiting list or make an enquiry
- Your name, email address and telephone number, and whatever you tell us in the message
When you complete a course
- Your result, and the certificate number, awarding body and expiry date where a certificate is issued
When you pay
- Payments are handled by Stripe. Card details are entered on Stripe's own payment form and never reach our servers — we receive confirmation that a payment succeeded, the amount, and the last four digits.
When you use the site
- With your consent, analytics about which pages you visited. See our Cookie Policy. Without consent, none of this is collected.
2. How we use it
- To give you a place on a course, and to tell you where and when to turn up
- To take payment and issue an invoice or receipt
- To issue and record certificates, and to answer a later query about one
- To let you know when a place comes free, if you asked to be told
- To answer your enquiry
- To understand how the site is used, if you accepted analytics
We do not sell your information, and we do not send marketing you did not ask for.
3. Our lawful basis
| What for | Lawful basis |
|---|---|
| Booking and delivering a course, taking payment | Performance of a contract |
| F-Gas certificate records | Legal obligation |
| Answering enquiries, waiting lists, keeping records of what we did | Legitimate interests |
| Analytics and advertising cookies | Consent — which you can withdraw at any time |
4. Who we share it with
Only where it is needed to run the service. Each of these is a processor acting on our instructions, not free to use your data for their own purposes.
| Who | What for |
|---|---|
| Netlify | Hosting this website and the database behind it |
| Stripe | Taking card payments |
| EmailJS | Delivering enquiry and booking emails to us |
| Analytics and Tag Manager — only if you consent | |
| Certification body | Where a course leads to a certificate, we pass the details needed to issue it |
We will also disclose information where the law requires it — for example, F-Gas supply and certification records produced to an enforcement authority.
Outside the UK
Some of these providers process data outside the United Kingdom, including in the United States. Where that happens it is done under the safeguards UK data protection law requires, such as the UK Addendum to the Standard Contractual Clauses or an adequacy decision. You can ask us which applies to a particular provider.
5. How long we keep it
| What | How long | Why |
|---|---|---|
| F-Gas certificate and supply records | At least 5 years | Required by the Fluorinated Greenhouse Gases Regulations 2015 (SI 2015/310) |
| Bookings, invoices and payment records | 6 years | Accounting and tax |
| Enquiries that did not lead to a booking | 12 months | So we can pick up the thread |
| Waiting list entries | Until the course runs, or you ask us to remove you | — |
| Analytics | Up to 14 months | Google Analytics retention setting |
6. Your rights
Under UK GDPR you can ask us to give you a copy of your information, correct it, delete it, restrict what we do with it, or object to it being used. You can also ask for it in a portable format, and withdraw consent for analytics at any time using the Cookie settings button on any page.
Email training@foxface.io and we will respond within one month. Note that we cannot delete a certificate record we are legally required to keep, and we will say so plainly rather than quietly doing nothing.
If you are not satisfied with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
The site is served only over HTTPS. Passwords are stored hashed, never in plain text. Access to booking and certificate records is restricted to staff who need it, and the database enforces that restriction itself rather than relying on the website to be well behaved. We do not store card numbers at all.
8. Changes to this policy
If we change how we use your information we will update this page and change the date at the top. Where the change is significant we will say so on the site rather than expect you to notice.