Last Updated: 1st May 2026

APLUS Medical Services & Training Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website (https://aplusmedicalservices.co.uk/), use our event medical services, or attend our training courses.

1. Important Information and Who We Are

APLUS Medical Services & Training Limited is the data controller responsible for your personal data.

Contact Details:

• Full name of legal entity: APLUS Medical Services & Training Limited

• Email address: [Insert Email Address, e.g., info@aplusmedicalservices.co.uk]

• Postal address: Bolsover Business Park, Unit B25, Woodhouse Lane, Chesterfield, S44 6BD

• Telephone number: 07464 291022

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: Name, date of birth, and gender.

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Medical/Health Data: (Special Category Data) If we provide medical treatment at an event, we collect clinical records, injury details, and treatment history.

• Training Data: Course progress, certifications, and assessment results for first aid or FREC training.

• Financial Data: Bank account and payment card details.

• Technical Data: IP address, browser type, and location data when using our website.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

• Direct Interaction: Information you provide by filling in forms on our site, booking a course, or requesting event medical cover.

• Clinical Records: Information recorded by our medical staff during the delivery of healthcare services.

• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns via cookies.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• Performance of a Contract: To process your booking for training or to provide medical services at your event.

• Legal Obligation: To comply with health and safety regulations or medical record-keeping requirements.

• Vital Interests: In emergency medical situations, we need to share your health data with the NHS or emergency services.

• Legitimate Interests: To improve our services and website.

   

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

• Clinical Data: All patient records are stored securely and accessed only by authorised medical personnel.

• Digital Data: We use encrypted systems and secure servers to protect your online information.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for

• Medical Records: We follow NHS and UK government guidelines for the retention of clinical records (typically 8 to 25 years depending on the nature of the treatment and age of the patient).

• Training Records: We retain records of your certifications for the duration of their validity plus a standard audit period.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data (Subject Access Request).

• Request correction or erasure of your personal data.

• Object to the processing of your personal data.

• Request restriction of processing.

• Request transfer of your personal data.

• Right to withdraw consent.

If you wish to exercise any of these rights, please contact us at the email address provided above.

8. Third-Party Links

Our website may include links to third-party websites (such as the CQC or accreditation bodies). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

9. Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.