Wallace Cititraining Privacy Policy.

At Wallace Cititraining we are serious about protecting your privacy and personal data by default and design, meaning that we have put in place tough systems and processes to protect your data across all touch points. We aim to comply with all relevant privacy laws across policy, process, training and documentation.

This privacy policy will inform you as to how we look after your personal and special category data when you visit our website or use our services; and tells you about your privacy rights and how the law protects you.

Who are we?          

Wallace Cititraining is a division of Wallacespace Limited, a limited company incorporated in England and Wales and is a “controller” and responsible for your personal data, and is referred to as “we”, “us”, or “our” in this privacy policy.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy.  If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact our DPO using the details set out below.

Contact Details:

Our full details are:

Full name of legal entity: Wallace Cititraining, a division of Wallacespace Limited

Address of WallaceCititraining: 22 Dukes Rd, London WC1H 9PN.

Postal address/ Registered office address of Wallacespace Limited: Salatin House, 19 Cedar Road, Sutton, Surrey, SM2 5DA

Name and title of DPO: Emma Coates, Associate Director for Marketing, Wallacespace Limited

Email Address: emma.coates@wallacespace.com

Telephone number: 020 7395 1728

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data processing issues (www.ico.org.uk).  We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

What data we collect from you:

We will only collect basic information from you that is relevant to the matter that we are dealing with and does not include any location based information.  In particular, we may collect the following information from you which is defined as ‘personal data’:

  • Personal details (name, address, email, phone number);
  • Financial details; and
  • Business activities of the person whose details we are processing.

We also record details of any bookings or enquiries you make with us.

We do not collect any ‘special categories’ of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), other than finger print data (see section further below).  Nor do we collect any information about criminal convictions and offences.

It is important that the personal data we hold about you is accurate and current.  Please keep us informed if your personal data changes during your relationship with us.

How we use your data:

We use your data to process and manage your bookings and enquiries, necessary for the performance of the contract between us.

With your permission, we will email you our newsletter if we have a relevant update. We may also check in by phone from time to time. Occasionally we may even send a good, old fashioned letter. We only email business email addresses and will only contact you if:

  1. You have asked us to; or
  2. We genuinely believe you have a legitimate need for our services and we deem this to represent a legitimate interest in line with the ICO’s guidance.

If at any point you decide you would prefer us not to contact you, let us know and we won’t.

We may also use your personal data for:

  1. Administering any accounts;
  2. Processing your bank/credit card details in order to obtain payment;
  3. Market research;
  4. Our own internal marketing; and
  5. Credit reference checks (where appropriate).

We will only use your data where we’re allowed to by law, e.g. carrying out an agreement we have with you, fulfilling a legal obligation, because we have a legitimate business interest or where you agree to it.

We do not use your data for automated decision making or profiling.

How we use your finger print data:

Wallace Cititraining offers a discretionary finger printing service to help you with your examination application or transfer to another firm.  If you would like to use this service (and by the way it’s more pleasant via us than going to a police station), then you will need to make an appointment. 

During the appointment we will make three copies of your finger prints; and will also collect a copy of your passport and another form of photographic identification.  We are legally required to hold your ID copies and a copy of your fingerprints and to share it with FINRA (the Financial Industry Regulatory Authority in the USA www.finra.org) if requested. We will only share this data with FINRA if requested. We will obtain your explicit consent to collect, process and store this data from you at the time of the appointment.

Please note that you do not have to be fingerprinted before sitting an examination or attending a training course, but if you are and you send all the paperwork off together it helps.

Who we share your data with:

We may have to share your personal and special category data with certain third parties (see the list below for examples).  Where your data is shared, we require all third parties to respect the security of your personal and special category data and to treat it in accordance with the law.  We do not allow our third-party service providers to use your personal and special category data for their own purposes and only permit them to process your personal and special category data for specified purposes and in accordance with our instructions.

  1. Service providers, acting as processors, who provide IT and system administration services,
  2. Professional advisers, acting as processors or joint controllers, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services,
  3. HM & Customs, regulators (including FINRA) and other authorities, acting as processors or joint controllers, who require reporting or processing activities in certain circumstances.

We never share your data with third parties for marketing purposes.

How we keep your data secure:

We have put in place appropriate security measures to prevent your personal and special category data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  In addition, we limit access to your personal and special category data to those employees, agents, contractors and other third parties who have a business need to know.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal and special category data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

How long we keep your data:

Unless you request otherwise, we will securely hold your personal data for a period of six years following our last contact. We have worked this out by looking at existing time lapses between our clients’ bookings. After six years we will securely delete your data.  Any fingerprint special category data we hold will be held securely for a period of one year, before deleting it.

How we use Cookies:

We use cookies to improve your experience when you visit our website. A cookie is a small file of letters and numbers that we put on your computer if you agree.  These cookies allow us to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

We don’t save any personal data after you finish your session, although we do store anonymised data so that we can keep an eye on how people use our website and keep improving in order to deliver a better experience.

You can configure your browser not to accept cookies. Disabling cookies in your browser will not prevent you from accessing the site, however, it may limit your access for certain features. The information collected by cookies is non-personal and allows us to statistically monitor how people are using our website.



Your rights:

If you would like us to remove you from our database entirely, let us know and we shall remove the information you ask us to. If you would like to view any or all of the data we may hold on you, please ask us. We aim to comply with all data requests within 14 days.  Occasionally it may take us longer if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.  We may also contact you to ask you further information in relation to your request to speed up our response.

This version was last updated in Feb 2022.