training course T&Cs

1. definitions

In these Conditions the following expressions shall have the following meanings:

  • “DPAS” means Gooding&Co Ltd, trading as the Data Privacy Advisory Service, under Company Number 10625448.
  • The “Client” means the person, company or other legal entity identified as providing a request to DPAS to supply Services. This term is used interchangeably with “Participant”.
  • “Services” means the provision of training courses, as described in the course information summaries on DPAS’s website. All Services to be provided by DPAS to the Client under the terms of this contract shall be construed accordingly.
  • “Confirmation Date” means the date when all the following apply:
    • A request to supply Services has been received from the Client by DPAS;
    • DPAS has confirmed to the Client that the course or other Services requested are available and the price is correct; and
    • Payment has been received or alternative payment method agreed.
  • “Contract” means the contract between DPAS and the Client under which the Services are to be supplied by DPAS to the Client.
  • “Working Day” means every day of the week apart from Saturday, Sunday and statutory holidays.  “Month” means a calendar month.  “Week” means seven consecutive days.
  • “Intellectual Property” includes all training materials, course manuals, inventions, patent applications, granted patents, registered and unregistered designs, copyright works, trademarks and confidential information.


  • The price payable for the Services shall be the list price of DPAS at the sign-up date unless otherwise stated.
  • DPAS reserves the right to increase the price from that advertised on the website or in other forms at our discretion and for any reason prior to the course commencement. Where this affects the price payable by the customer and the customer has made payment of the previous advertised price (not including Purchase Orders and Reservations) and does not wish to proceed at the increased price a full refund will be payable by DPAS.
  • The price does not include travel, accommodation, meals or other related expenses unless explicitly stated.
  • All prices are exclusive of Value Added Tax and this will be charged at the appropriate rate.


  • Where the Services relate to the provision of a training course, payment by credit card, debit card or bank transfer is required no later than 25 Working Days before the course start date.  Special arrangements may be separately agreed in writing in the case of late bookings.
  • Where Services involve other services or goods, payment is required 5 Working Days prior to delivery or as otherwise agreed in writing.
  • DPAS is entitled to charge interest at 2% per Month or part thereof on overdue payments.
  • Where pre-agreed by DPAS on Training payment may be agreed by Purchase Order (from a company based within the UK only). Where payment by Purchase Order is agreed these Terms and Conditions shall remain in full force and no variation to these Terms and Conditions is accepted by DPAS on Training whether detailed by the Customer within the Purchase Order or by another means without specific acceptance by DPAS on Training in writing.  
  • Where agreement has not been provided in writing any additions or variations to these Terms and Conditions shall be null and void.


  •  Course durations are clearly stated on the website. All classroom-based courses are run on working days only, unless otherwise stated.  

5.  Cancellation, Transfers and Substitutions with respect to Training Courses 

  • DPAS reserves the right to cancel or arrange an alternative date for a course.  In such circumstances DPAS will endeavour to provide notice of cancellation or change to the Client. In the event of cancellation, the Client will be entitled to a full refund of the course fee. DPAS shall not be liable for any other loss or expenses arising.

The Client may cancel the course booking by notifying DPAS in writing by acknowledged email or by recorded delivery as soon as reasonably practicable.  The Client shall also be deemed to have cancelled the course booking if the delegate does not attend the event.  The Client shall be liable to pay a cancellation fee as follows:

  General (Online) Scheduled Courses: 

Notice Given: 

Proportion of Course Fee Payable 

 0 – 15 Working Days | 100% 

16 – 25 Working Day | 50% 

Customer Specific Courses (for example on Client’s site): 

Notice Given: 

Proportion of Course Fee Payable 

0 – 25 Working Days | 100% 

  •  In the event that the delegate is unable to attend the course booked DPAS will endeavour to transfer the delegate to an alternative course.  If this is request is 26 or more Working Days from the start date of the original course then the only charges applicable will be an administration fee of £25 (plus VAT) plus any difference in course price.  If a transfer is requested within 26 Working Days of the original date then the cancellation fee above shall be payable.
  • DPAS will endeavour to accommodate requests by the Client to substitute one delegate for another but is under no obligation to do so.  Such requests are subject to the replacement delegate meeting the pre-requisites for the course.  In the event of substitution, the Client shall pay an administration fee of £25 plus any unavoidable costs relating to the change.


  • DPAS reserves the right to assess the financial status of any organisation or individual making a booking or in the process of making a booking and also reserves the right to require payment prior to confirming a booking.   


  • DPAS’ total liability for any loss or damage shall not exceed the price payable for the Services, except in cases of direct physical damage to the Client’s property, personal injury or death.
  • DPAS shall not be liable howsoever caused for indirect or consequential loss including but not limited to: loss of profits; loss of revenue; loss of goodwill; failure to achieve savings.
  • DPAS shall not be liable for any failure of the Client’s course attendees to obtain Continuing Professional Development credits, save where the instruction given by DPAS was grossly negligent. In any such case, liability will be limited to the cost of course attendance.

8. Force Majeure 

  • DPAS shall not be in breach of this contract if there is any total or partial failure of performance by it of its duties and obligations under this contract occasioned by any act of God, fire, act of government or state, war, civil commotion, insurrection, sickness or other cause beyond its reasonable control.
  • If DPAS is unable to perform its duties and obligations under this contract as a direct result of one or more such causes, DPAS shall give written notice to the Client of such inability stating the cause in question. 

9. Data Protection and Confidentiality 

  • The policy of DPAS with respect to data protection is detailed in its Privacy Notice which should be read in conjunction with these terms and conditions of contract.
  • Where Services are for CPD accredited training courses:
    • DPAS will process the names, attendance dates, job title, and place of work data of attendees, per its obligations to fulfil the terms of this contract. DPAS will maintain this data for 6 years after the course completion date, per industry best practice and the Limitations Act 1980. This data will be processed on its CRM (provided by Arlo Software Ltd) for this purpose only. DPAS have a contract in place with this CRM provider. This data will also be shared with the trainer on the day of the course, who will have a contract with DPAS. To find out the identity of this trainer in advance of this information being shared, please contact
    • DPAS will process the payment details of the Client, through its website (hosted by Arlo Software Ltd) and using its accounting provider, Xero Ltd. DPAS will maintain a record of this payment for six years, per its legal obligations under the Limitations Act 1980. Card payment details will not be retained beyond immediate use in the payment gateway. Payment status will be held on Arlo CRM and accessed by those employees that need access to perform their roles for this purpose only. DPAS has a contract in place with Xero, whereby they and their sub-processors meet EEA standard adequacy arrangements.
    • DPAS will process information relating to attendee transport for parking reasons, disability (where required) and dietary requirements to organise the logistics of the course. DPAS will retain this information for up to a maximum of 30 working days post course completion. This data will be processed on Arlo CRM for this purpose only. For more information about this, please see the DPAS privacy notice.
    • DPAS and its trainers will access the names, of attendees, and any answer sheets and pass or fail status per its contractual obligation to award the CPD credits. DPAS will also collate statistical evidence using this personal data to evaluate the effectiveness of training, to improve upon the courses and to assist DPAS in providing further advice to the Client. DPAS will keep this in an identifiable form for 1 year only, after which, any statistical conclusions will be kept in an anonymised format. This data will be stored on Arlo CRM for this purpose only. DPAS have a contract with this software provider. DPAS will also share the pass/ fail status of attendees with the Continuing Professional Development body, where required to by contract.
  • The client may choose to object to DPAS processing its data under its legitimate interest (for example, to know your organisation name). The Client may do this by contacting Melanie Garnett, Operations Director, Melanie.garnett@dataprivacyadvisory.comTo see where DPAS rely on legitimate interest, please refer to the Privacy Notice.
  • The client may choose to withdraw its consent to process certain data (such as dietary requirements) at any time and with no detriment to the Services offered by DPAS to the Client. The Client may do this by contacting Melanie Garnett, Operations Director, For more information, please refer to the Privacy Notice.
  • All Intellectual Property associated with training courses or other Services shall remain vested in the owner be it DPAS, its Training Provider or others.
  • Intellectual Property, which is identified as, or can reasonably be deemed to be, confidential shall not be copied or reproduced or disclosed to any third party without the prior written consent of DPAS.  The Client shall ensure that its employees and all those under the Client’s control and supervision comply with this obligation.
  • Where Services are provided to the specification or special requirements of the Client, the Client shall indemnify DPAS against all costs, claims and damages incurred or arising out of any alleged infringements of Intellectual Property.

10. bcs training courses

  • DPAS offers accredited training courses and to enable delegates to sit their chosen exams DPAS must pass some personal information to the professional accrediting bodies. This will enable candidates to sit their exams and gain access to their  BCS associate membership.
  • DPAS delivers accredited training courses for the Chartered Institute for IT – BCS. DPAS has signed a Provider Contract with the BCS which allows it to deliver the following BCS Certified training courses:
    • BCS Foundation Course in Data Protection
    • BCS Practitioner Course in Data Protection
    • BCS Practitioner Course in Freedom of Information
  • DPAS is not a Data Processor for, nor does it process personal data on behalf of the BCS.
  • DPAS’ status as a  BCS Accredited Training Provider does not infringe upon its personal data collection practices. DPAS will only share personal information with BCS when it needs to  in order to fulfil its contract with a Client. DPAS share the delegate’s name and email address at their request, when they inform DPAS that they wish to sit a BCS exam. DPAS only pass across these details once the delegate has confirmed the specific exam date (usually included within the classroom training course) and where applicable have completed their exam prep and mock exam successfully. The BCS then contacts the delegate directly to create a log-in portal on their site. DPAS does not have access to the delegate portal.
  • DPAS is required to provide the BCS feedback from delegates regarding courses they have attended. Delegates receive a feedback form at the end of their course, which enables DPAS to fulfil its obligation to the BCS, and also allows DPAS to improve the quality of its training services. DPAS is grateful to all delegates that complete these forms, including giving your name to enable your comments to be used.
  • The BCS share your exam results (marks only) with DPAS as DPAS is the Accredited Training Provider (ATP). This benefits DPAS in a number of ways:
    • It enables DPAS to monitor the success of its training
    • It helps DPAS to improve the service DPAS offers you
    • It allows DPAS to maintain a record of exam results for its delegates
    • DPAS will not share this information with any third party.
  • For more information about how the BCS processes data, please view their privacy notice.

11. personal belongings

  • Personal belongings or items belonging to a Client that are brought into a training course by the aforementioned Client, are the sole responsibility of the Client. We accept no responsibility for the items or any loss or damage that may occur during the course.

12. general

  • The Contract shall only become effective at the Confirmation Date.
  • Any typographical clerical or other error or omission in any sales literature, administrative documentation, course materials, invoice or other document or information issued by DPAS or its Training Providers shall be subject to correction without any liability on the part of DPAS.
  • No variation to these Terms and Conditions shall be effective unless made in writing and signed by an authorised representative of DPAS.
  • DPAS may assign or sub-contract the whole or any part of the Contract to any person, firm or company.
  • These Terms and Conditions expressly exclude any right afforded the Training Provider or any other third party pursuant to the Contracts (Rights of Third Parties) Act 1999.
  • During the term of the Contract and for a period of 12 months thereafter, the Client shall not directly or indirectly employ or solicit for employment any employees of DPAS or its Training Providers.
  • The invalidity or unenforceability for any reason of any condition, sub-clause or paragraph of these Terms and Conditions shall not prejudice or affect the validity or enforceability of the remainder.
  • These Terms and Conditions shall be governed by and construed in accordance with English law and the parties agree to submit to the exclusive jurisdiction of the English courts.

13. company information

  • “DPAS” and “Data Privacy Advisory Service” are the trading names of Gooding&Co Ltd.
  • Company No: 10625448  VAT registration: 266679449
  • Trading (and Registered Company) Address: 10 Oaktree Place, Marsh Barton, Exeter, EX2 8WA
  • Telephone 01392 914019
  • Email