Privacy Policy

This website is operated by Deane Bisby, trading as The Flooring Tutor and Restex Assessments. We provide flooring industry training, an approved fitter directory, a job board, NVQ Level 3 qualification support, End-Point Assessment (EPA) services, and industry consulting. We are the data controller for all personal data collected through this website. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: info@theflooringtutor.com

We only collect personal data that you actively provide to us through our forms. We do not purchase data lists or collect data passively beyond essential cookies (see below). Contact form — Name, email, message, enquiry type — Legitimate interests — responding to your enquiry NVQ enquiry — Name, email, phone, current role, experience, message — Legitimate interests — providing qualification advice EPA enquiry — Name, email, phone, organisation, apprentice details, message — Legitimate interests — providing assessment services Consulting enquiry — Name, email, phone, company, project description — Legitimate interests — providing consulting services Fitter application — Name, company, contact details, professional history, skills — Legitimate interests — processing your membership application Job posting — Contact name, email, job description — Legitimate interests — publishing your job listing Newsletter sign-up — Email address, payment details (via Stripe) — Consent — you explicitly opt in and pay for the subscription

We use your data solely to: • Respond to your enquiries and provide the services you have asked about • Process and manage your application to become a Flooring Tutor Approved fitter • Deliver the newsletter you have subscribed and paid for • Manage job listings you have posted • Schedule and administer NVQ or EPA assessments We do not sell, rent, or share your personal data with third parties for marketing purposes. We will never cold-contact you about products or services you have not asked about.

We use a small number of trusted third-party services to operate this website. Each one processes data only as necessary to provide their service: • Stripe — handles all payment processing for newsletter subscriptions. We never see or store your full card details. Stripe's privacy policy: stripe.com/gb/privacy • Microsoft (Outlook / Microsoft 365) — used to send email notifications when enquiries are received. Data is processed in accordance with Microsoft's privacy policy: privacy.microsoft.com • Replit — our website and database are hosted on Replit's infrastructure. Data is stored securely in the EU/UK. Replit's privacy policy: replit.com/site/privacy

We keep your data for as long as it is necessary to fulfil the purpose for which it was collected: • Enquiries — retained for up to 3 years to allow us to respond and maintain a record of communications • Fitter applications — retained for the duration of any active membership, plus 2 years after expiry • Newsletter subscriptions — retained while your subscription is active, plus 6 months after cancellation • Job postings — retained for 12 months after the job closes You may request earlier deletion at any time (see Your Rights below).

You have the following rights regarding your personal data. To exercise any of them, contact us at the email address on this page: • Right of access — request a copy of the personal data we hold about you • Right to rectification — ask us to correct inaccurate data • Right to erasure — request that we delete your personal data ("right to be forgotten") • Right to restriction — ask us to limit how we process your data • Right to data portability — receive your data in a structured, commonly used format • Right to object — object to processing based on legitimate interests • Right to withdraw consent — where processing is based on consent (newsletter), you can withdraw at any time by contacting us You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint if you believe we have not handled your data correctly. We would however appreciate the chance to address any concerns directly first.

Cookies are small text files stored on your device by your browser. We use the minimum cookies necessary to make this website function. ft_cookie_consent — Stores your cookie preference so we don't ask again — 1 year (localStorage) Stripe session cookies — Used during payment checkout only — set by Stripe on their domain — Session We do not use Google Analytics, Facebook Pixel, advertising cookies, or any other third-party tracking. If you accept "Essential only" in our cookie banner, no non-essential cookies are set. You can change or withdraw your cookie preference at any time by clearing your browser's local storage or by contacting us.

Your personal data is stored in a password-protected database. All data transmitted between your browser and our server is encrypted using HTTPS/TLS. Access to stored enquiries is restricted to authorised personnel (Deane Bisby) via a password-protected admin panel. No system is completely secure. If you have concerns about a specific piece of sensitive information, please contact us before submitting it through a web form.

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our site, please contact us and we will delete it promptly.

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

For any privacy-related queries, requests to exercise your rights, or complaints: