Legal
Privacy Policy
Last updated: April 10, 2026
Introduction
OES | Academy ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website at https://www.oilrigtraining.com/ and our training services.
We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
OES | Academy is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at:
- Email: contact@oilrigtraining.com
Information We Collect
We may collect and process the following categories of personal data:
Information You Provide to Us
- Name, email address, phone number, and company/organisation name when you make an enquiry or book a course
- Billing and payment information when you purchase training courses
- Delegate details (names, job titles, dietary requirements) when booking training for your team
- Any information you provide when contacting us via our contact form, email, or phone
- Account registration details if you create an account on our website
Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, and navigation paths through our website
- Referring website or source that directed you to our site
- Cookie data (see our Cookie Policy for full details)
How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing course bookings and payments | Performance of a contract |
| Issuing certificates of completion | Performance of a contract |
| Responding to enquiries and providing customer support | Legitimate interest |
| Sending booking confirmations and course information | Performance of a contract |
| Improving our website and services | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
| Sending marketing communications (only with your consent) | Consent |
Who We Share Your Data With
We do not sell your personal data. We may share your data with the following categories of third parties where necessary:
- Payment processors to handle secure transactions
- Email and booking platform providers to manage course registrations
- Website hosting and analytics providers
- Accreditation and certification bodies where required for course certification
- Professional advisors (legal, accounting) where required
- Law enforcement or regulatory bodies where required by law
How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Booking and transaction records: 7 years (for tax and accounting purposes)
- Certification records: retained indefinitely so we can verify and re-issue certificates
- Enquiry and contact form data: 2 years from last correspondence
- Marketing consent records: until consent is withdrawn
- Website analytics data: 26 months
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption on our website
- Secure payment processing through PCI-compliant providers
- Access controls and authentication for internal systems
- Regular security reviews and updates
International Data Transfers
Some of our third-party service providers may be based outside the UK. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), to protect your data.
Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of access - request a copy of the personal data we hold about you
- Right to rectification - request correction of inaccurate or incomplete data
- Right to erasure - request deletion of your data where there is no compelling reason for continued processing
- Right to restrict processing - request that we limit how we use your data
- Right to data portability - request a copy of your data in a structured, machine-readable format
- Right to object - object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent - withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at contact@oilrigtraining.com. We will respond to your request within one month.
Cookies
Our website uses cookies to improve your experience. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.
Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.
Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically for the latest information on our privacy practices.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: contact@oilrigtraining.com
- Contact form: https://www.oilrigtraining.com/contact-us/
Need More Information?
If you have any questions about our privacy practices, please get in touch.