Privacy Policy

E&C Health Group is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

E&C Health Group provides professional healthcare services and training across South Wales.

Our services may include:

E&C Training Solutions
E&C Phlebotomy Services
E&C Ear Care
E&C Healthcare Concierge
E&C Health Testing
Classroom and online training services

For the purposes of UK data protection law, E&C Health Group is the data controller for personal information processed through our services, unless otherwise stated.

What Information We Collect

Depending on the service you use, we may collect and process:

Personal details
Your name, address, email address, telephone number, date of birth, job role or employer.

Booking and appointment information
Details relating to healthcare appointments, training bookings, attendance and service history.

Training and certification information
Course attendance, assessment outcomes, qualifications and certificates issued.

Healthcare information
Where necessary to provide a healthcare service, we may collect relevant health information, clinical history, referral or request details, consent records and information relating to the service provided.

Health information is considered special category personal data under UK GDPR and will only be processed where we have an appropriate lawful basis and condition for processing.

Payment information
Billing details, payment status and transaction information. We do not normally store full debit or credit card details where payments are processed by third-party payment providers.

Communication records
Emails, telephone enquiries, website enquiries, messages and other communications with E&C Health Group.

How We Use Your Information

We may use your information to:

arrange and deliver healthcare services
process healthcare appointments and enquiries
deliver classroom and online training
administer course bookings and attendance
issue certificates and maintain training records
communicate with you about appointments, courses or services
process payments and invoices
respond to enquiries and complaints
maintain appropriate healthcare and business records
improve our services
meet legal, regulatory, safeguarding and professional obligations

Our Lawful Basis for Processing

Depending on the circumstances, we may process your information under one or more of the following lawful bases:

Contract
Where processing is necessary to provide a healthcare, training or other service you have requested.

Legal obligation
Where we are required to retain or provide information to meet legal, financial, regulatory or professional obligations.

Legitimate interests
Where necessary to operate and improve E&C Health Group, maintain appropriate records and communicate with customers, provided those interests do not override your rights.

Consent
Where we rely on your permission for a particular use of your information.

Health Information

Where we process health or other special category information, we will only do so where an appropriate condition under UK data protection legislation applies. This may include providing or managing healthcare services, complying with legal obligations or obtaining your explicit consent where appropriate.

Sharing Your Information

We may share relevant information with appropriate organisations or professionals where necessary, including:

awarding organisations for training and certification
laboratories and health-testing providers
healthcare professionals involved in your care or service
appropriately authorised subcontractors, tutors or clinicians working on behalf of E&C Health Group
payment providers
accountants and professional advisers
IT, website or administration providers
regulatory authorities or public bodies where required by law

We only share the information necessary for the relevant purpose.

We do not sell your personal information.

We do not provide your personal information to unrelated organisations for their own marketing purposes.

Health Testing and Laboratory Services

Where E&C Health Group works with a third-party laboratory or healthcare testing provider, relevant personal and health information may need to be shared with that provider to process your sample, perform testing and provide results.

The laboratory or testing provider may also act as an independent data controller for information it processes. Where applicable, their own Privacy Policy will explain how they use and protect your information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, financial, regulatory and professional requirements.

Retention periods may vary depending on the type of information.

For example:

Training and certification records may be retained for verification, awarding-body and compliance purposes.

Healthcare records may be retained in accordance with applicable professional, legal and clinical record-retention requirements.

Financial records are retained in accordance with HMRC and accounting requirements.

When information is no longer required, it will be securely deleted or destroyed where appropriate.

Data Security

We use appropriate technical and organisational measures to protect personal information against:

unauthorised access
accidental loss
alteration
inappropriate disclosure
misuse
destruction

Access to personal and health information is limited to people who require it for legitimate business or healthcare purposes.

Your Data Protection Rights

Depending on the circumstances, you may have the right to:

request access to your personal information
request correction of inaccurate or incomplete information
request deletion of your information where applicable
request restriction of processing
object to certain uses of your information
request transfer of your information
withdraw consent where processing is based on consent
complain about how your information has been handled

Some rights may be limited where we are legally or professionally required to retain particular records.

Our website may use cookies and similar technologies to help the website function properly, understand website performance and improve user experience.

Where required, you will be given the opportunity to manage your cookie preferences.

You can also control cookies through your browser settings.

Third-Party Websites

Our website may contain links to external websites, including healthcare partners, awarding organisations or other service providers.

E&C Health Group is not responsible for the privacy practices of external websites. We recommend reviewing their privacy policies before providing personal information.

If you have questions about this Privacy Policy, would like to exercise your data protection rights, or have concerns about how your information is handled, please contact:

E&C Health Group
Email: info@ectrainingsolutions.wales
Telephone: 01554 562021

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

Information Commissioner’s Office
Website: www.ico.org.uk

Last updated: August 2026