Privacy Policy for FreeCNATraining

Free CNA Training is determined to protect your privacy. This privacy policy clearly outlines how Free CNA Training processes your personal data and your rights in relation to each data processed. We recommend you carefully read through this document to learn more about our Privacy Policy.


In this Privacy Policy, the following definitions are adopted:

"Us", "We", "Our" and "Free CNA Training" is X Ltd (Company Registration No. 08343), the data controller of your personal data and is subject to General Data Protection Regulation ("GDPR") and any locally applicable data protection laws in the UK.

"You", "Your", "Yours" means you, the data subject.

This Privacy Policy supersedes any previous Privacy Policy which you may have been provided with.

This Privacy Policy governs Free CNA Training and its online website Free CNA, products, and services. We are not responsible or liable for any privacy issues of any third-party websites we may be linking to. We urge you to be careful when providing personal data to outside parties.

Who we are and what we do

Free CNA Training is an online platform offering a number of business services and products such as B2B data and business credit reports. We are also an aggregator of corporate data from both public and private sources and maintain a database of over 7 million companies that covers the entire UK.

Free CNA Training offers corporate credit checking facilities and platforms to its clients helping them make better financial decisions and minimise business risk. In order for us to provide this service, we are required to collect, process, and store data on companies and their historical conduct. This data comprises of information on a corporate level such as company name, company address, financial accounts, and information on an individual basis such as directors, people of significant control and shareholders.

Types of personal data we collect
When dealing with Free CNA Training, various types of personal data are collected and utilized to offer the best services to our users. Below are the specific types and descriptions:

Identity Data: This data primarily relates to identification and includes:




Date of birth Most of this data will be provided by the user themselves.

Contact Data: This category consists of information necessary to reach out to the user such as:

Home address

Email address

Telephone number

Financial Data: Whenever you make purchases, you will provide data that might include your credit/debit card and bank account details. It's important to note that Free CNA Training does not store full credit/debit card details in its database; this aspect is managed by our payment processor.

Transactional Data: This pertains to transaction-related information, which encompasses:

Payment details to and from Free CNA Training

Information on products and services purchased

Any vouchers or coupons used during a purchase

Technical Data: This category focuses on the technical aspects when a user accesses the Free CNA Training platform or website. Details might include:

Internet protocol (IP) address

Browser type and version

Specific devices used

Usage Data: This data sheds light on a user's engagement pattern, highlighting how the Free CNA Training website, products, and services are used by them.

Consents: This category keeps a record of any permissions, consents, or preferences granted by the user to Free CNA Training. This can encompass preferences such as communication methods or marketing choices.

Personal data we don't collect
Free CNA Training does not collect or process any "sensitive personal data" or other "special category data" as defined by GDPR. Examples would include information relating to ethnicity and political or religious beliefs. In addition to this, Free CNA Training does not collect or process data relating to any persons under 16 years of age.
Personal data we collect and how we collect it
This section lists all the ways Free CNA Training collects personal data.

Provided by you
From time to time, Free CNA Training will collect and store information provided by you, such as:

At the time of registering to use Free CNA Training

Subscribing to our newsletters

Updating your account information

Creating a support ticket or help request

Reporting issues with our website or products

When purchasing a product or service

The personal data you provide may be personally identifiable but do not fall under the sensitive data category as defined by GDPR (see section 4).
Free CNA Training may ask for any of the following information:

Your name including first name(s) and surname

Your email address

Your home or business address

Your telephone number

Third party social profiles such as Facebook and Twitter

Debit or Credit Card details including the name displayed across your card

As you use our products and services
As you interact with Free CNA Training, the platform will automatically collect information about your browser, internet and device, which we use to improve our products and services. Many of this data cannot be used to directly identify you, such as:

Device information including browser type, settings and operating system

Details of how you used our service, such as your navigation history

Device language, the date and time of your requests and referral pages

Your IP address (this is not directly identifiable but may be indirectly)

From outside organisations and publicly available sources
In order for Free CNA Training to provide business products and services such as corporate credit reports, it is required to collect and aggregate both commercial and personal data from a number of sources. This includes both publicly available sources such as Companies House and outside organisations such as the Registry Trust. Free CNA Training may also collect personal data from outside sources for legal reasons such as regulatory obligations.

Free CNA Training collects data from a number of external sources, such as:

Companies House, the Registry Trust (Ministry of Justice) and the TSO Gazette (Company Insolvency Information), and other suppliers. Free CNA Training receives personal data from suppliers including particulars of company directors, secretaries, shareholders and people with significant control.

Personal information including credit information, from private third party sources such as:

Credit reference agencies

Business directories

Company list brokers

Fraud prevention agencies

Government and law enforcement agencies

Website usage data from analytics providers such as Google Analytics

Information found on websites in the public domain

How we store your personal data
Your personal data is stored in Free CNA Training's data centre located in Kent, in the south-eastern region of England. The data centre has a number of security features in place to protect your personal data such as:

A secure location with physical security such as card and pin entrance barriers with 24/7 manned and patrolled external security.

Independent infrared CCTV surveillance and centrally controlled access systems with complete logs of personnel entrances and exits.

All network inbound and outbound are protected by the latest firewall and software technology.

How long we store your personal data for
Free CNA Training will only store and process your personal data for as long as it has a lawful basis to do so and will make sure your privacy is protected. A few reasons why Free CNA Training will store your personal data in particular are:

Purposes of satisfying any legal, accounting, or reporting requirements.

We are required by law to retain basic information about our customers for 6 years after they cease being customers for tax and legal purposes.

In some circumstances you can ask us to erase your data. See the "Your rights" (section 11) for more information.

The legal basis for processing

Under Data Protection Law, different grounds are considered as a ‘legal basis for processing’. The determination of the legal basis for processing should be made by the Data Controller.

Where Free CNA Training acts as the Data Processor, the legal basis is typically determined by the Customer. In most situations, the legal basis is:

‘processing is necessary for the performance of a task carried out in the public interest’

When Free CNA Training takes the role of the Data Controller, the following legal bases for processing are commonly used:

‘processing is necessary for the purposes of legitimate interests pursued by the controller’ (examples of these legitimate interests include understanding how customers use our products to improve them, providing information to help businesses comply with legal obligations, reducing financial risks, offering marketing solutions to support business growth, and protecting our business from financial losses).

'processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract' (such as registering new customers, maintaining relationships, delivering products and services, and communicating about these offerings).

'the data subject has given consent to the processing of his or her personal data for one or more specific purposes' (as seen when asking users to participate in surveys, offering recommendations and suggestions, or when users voluntarily provide data for specific purposes).

It is important to note that depending on specific circumstances, the legal basis might vary. However, Free CNA Training always operates in full accordance with Data Protection Law, ensuring that data is processed based on a fair and justified legal basis.

How we share your personal data
Free CNA Training collects business information from third parties (see section 5), which may include personal data, for the purposes of providing business products and services. Free CNA Training may share your this data with outside organisations such as service providers and regulators. This section lists the different types of organisations Free CNA Training may share your personal data with.

Cliens and suppliers with whom Free CNA Training enters into an agreement with to provide business information or commercial data.

Regulators or law enforcement agencies where Free CNA Training is required to do so.

Professional advisers where it is necessary for us to obtain their advice or assistance, including lawyers, accountants, IT or public relations advisers.

Debt collection agencies where it is necessary for Free CNA Training to recover money.

Payment processing agents where it is necessary for Free CNA Training to protect a transaction.

With third parties and their advisers where those third parties are acquiring, or considering acquiring, all or part of Free CNA Training.

Free CNA Training will not disclose or sell your personal data which you have provided to us by means of explicit consent to clients or marketing agencies.

Transferring personal data outside the European Economic Area ("EEA")
In certain circumstances Free CNA Training may share your personal data with third parties situated in countries outside the EEA. When Free CNA Training transfers your personal data out of the EEA, it will ensure a similar degree of protection is afforded to it, by ensuring at least one of the following safeguards is implemented:

The country that we send the personal data to is approved by the European Commission as providing an adequate level of protection for personal data

The transfer is to a recipient in the United States of America who has registered under the EU/US Privacy Shield

The recipient has entered into European Commission standard contractual clauses with Free CNA Training

You have explicitly consented to the transfer of your personal data

Your rights
This section explains your rights on how Free CNA Training collects, processes and stores your personal data.
Your rights under data protection laws, in relation to your personal data are:

Right of access to your personal data or commonly known as "data subject access request". This right entitles you to receive a copy of the personal data which we store about you and details on how we are processing it.

Right to rectification entitles you to have any incomplete or inaccurate data we hold about you corrected. It is important to note that before we make any amendments to your personal data, we may need to verify the accuracy of any new information you provide us.

Right to erasure of your personal data or commonly known as "the right to be forgotten". This right entitles you to request to delete or remove your personal data, where there is no lawful basis for us to continue to process it. You also have the right to request to delete or remove your personal data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. We may not always be able to comply with your request of erasure for specific reasons which will be notified to you at the time of your request.

Right to object to the processing of your personal data. This right entitles you to object if you feel our processing of your personal data affects your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms. You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to restrict processing of your personal data. This right entitles you to suspend or restrict the processing of your personal data in the following circumstances:

You want us to establish the data's accuracy

Where we are unlawfully processing your personal data and you do not want us to erase it

Where you need us to hold the data, even if we are no longer processing it, as you need it to establish, exercise or defend a legal claim.

You have objected to our processing of your personal data, but we need to establish whether we have overriding legitimate grounds to process it.

Right to data portability of your personal data. This right entitles you to request to have your personal data transferred to you or to a third party you have chosen. We will provide the personal data in a structured, commonly used, machine-readable format. This right only applies to personal data which you initially provided consent or where we processed the information to perform a contract with you.

Right to withdraw consent at any time to the processing of your personal data, where we are relying on consent as our lawful basis. If you withdraw your consent, we may not be able to provide certain products or services to you. We will inform you if this is the case at the time you withdraw your consent.

If you wish to exercise any of your rights mentioned above, please contact Free CNA Training.

Updating your personal data
You have the right to amend any personal data Free CNA Training has about you that you think is incorrect or incomplete. We'll take the necessary steps to verify any incorrect data and correct it where possible. Contact information can be found under section 17 in this Privacy Policy.

If you choose not to give your personal data
You are within your rights to refuse to give Free CNA Training any of your personal data, however this can have negative effects on how we can serve you as a customer, such as:

We may not be able enter into or fulfil a contract we have or trying to have with you

We may not be able to offer propositions or quotations on our products and services

We may have to cancel any existing products or service you have with us

From time to time, Free CNA Training may ask you for personal data that is useful but not required by law or in order to enter into a contract. We will clearly explain to you when it is optional to provide a particular data. The service or product Free CNA Training provides to you won't be affected if you choose not to provide any optional personal data.

How to withdraw your consent
You can withdraw your consent at any time to the processing of your personal data. Please contact us (see section 17) if you wish to withdraw consent. This will only affect the way we process your personal data where our reason for doing so is that we have your consent. For more information on your rights, please see "Your rights" (section 11).

From time to time, Free CNA Training may send you marketing materials about products and services it provides which it believes may be of interest to you. In addition to this, Free CNA Training may also send other information in the form of alerts, surveys, newsletters and invitations to events or functions which it believes might be of interest to you or in order to update you with information you have requested.

Free CNA Training will communicate this to you in a number of ways including by post, telephone, email or other digital channels. Free CNA Training can only use your personal information to send you marketing material if it has either your consent or a legitimate interest. It must not conflict unfairly with your own interests.

If you object to receiving marketing from us at any time, please contact us.

How to complain
Please get in touch with us if you are unhappy with how we have used your personal data.

After getting in touch with us, if you believe we haven't handled your privacy issues appropriately, you may get in touch with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can learn more about your rights and information on how to file a complaint on their website (

Contacting us
You may contact us about any of the topics set out in this Privacy Policy. If you have any questions or want more details about how we use your personal data, or wish to excercise your rights, you can contact us using our online contact form here:
https://www.Free CNA

You may also email us directly at helpdesk at Free CNA Please note at this time we do not offer telephone support for enquiries regarding your personal data and privacy concerns.