Privacy Policy
Last updated: 19 October 2026
Woodlands International Ltd, trading as Emerging Risks Global (ERG), is committed to protecting your personal data and complying with UK GDPR and the Data Protection Act 2018. ERG is the data controller for the personal data described here and is registered with the Information Commissioner’s Office (registration ZB919466). Registered office: Southgate Chambers, 37–39 Southgate Street, Winchester SO23 9EH. Company number 11256211.
What we collect
Contact details: name, email, phone and organisation
Enquiry information you send us
Information needed to deliver our consultancy, assessment and training services
Website analytics and cookie data
Subscription and marketing preferences
HR and recruitment information, where applicable
How we use your data and our lawful bases
We use personal data to respond to enquiries, deliver our services and training, manage client relationships, improve our services and website, send newsletters and updates with your consent, and meet our legal obligations. We rely on contract, legitimate interests, consent and legal obligation as our lawful bases.
Sharing your data
We may share data with service providers that support our business (such as hosting and email platforms), with associates and subcontractors who help deliver our services under written confidentiality and data protection terms, with awarding bodies where you take a qualification with us, and with regulators or authorities where the law requires it. We never sell personal data.
International transfers
Where data is transferred outside the UK, we make sure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.
How long we keep it
We keep personal data only as long as necessary. Enquiries: 18 months. Client engagement records: 7 years after the contract ends. Assessment data: 18 months, then anonymised. Financial records: 6 years. HR records: 12 months for unsuccessful applicants and 6 years after employment ends.
Learners and Service leavers
This section applies to people who book and attend our training courses, including Service leavers using their resettlement entitlement.
We collect your name, contact details, the course booked, the information needed to register you with our awarding body (SFJ Awards), payment and invoicing details, and any reasonable adjustment you ask for, which is used only to put that adjustment in place.
We use this to book and deliver your course, register you for assessment and certification, invoice, respond to your enquiries and handle any complaint. Our lawful bases are contract and, for invoicing records, legal obligation. We never use learner data for marketing without your consent.
We share it only with SFJ Awards, with the trainers and quality assurers delivering your course, and with the Career Transition Partnership where it asks us to confirm attendance or an employment outcome, or handles a complaint. Assessments are completed and held on SFJ Awards’ online platform.
Learner data is held electronically on Microsoft OneDrive with multi-factor authentication and restricted access. We hold no learner records on paper. Our controls are certified to Cyber Essentials Plus and IASME Cyber Assurance Level 2, and everyone with access to learner data holds UK government security clearance.
We keep booking and contact details only until your course and certification are complete, then delete them securely. Invoices are kept for six years, as HMRC requires. We keep no assessment records ourselves.
Cookies
Non-essential cookies are used only with your consent, and you can change your preferences at any time.
Your rights
You can ask to see, correct or delete your data, restrict or object to how we use it, or receive a copy of it. We respond within one month. Contact our Data Protection Officer, Dr Paul Wood, at information@emergingrisksglobal.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.