Privacy Policy

Last updated: 27 August 2026

This notice explains how Mars Training Ltd handles personal information reaching us through this website: enquiry and registration forms, the live chat window, and the server logs created the moment you load a page. It is written from what the site actually does, not from a template.

Who is responsible for your data?

Mars Training Ltd (Company No. 17142037) is the data controller. Registered office: 25 North Row, London, W1K 6DJ. ICO registration: ZC231294.

Mars Training Ltd is the data controller for personal information collected through Mars Training Centre UK, and is subject to the UK GDPR and the Data Protection Act 2018.

Decisions about why and how personal data is used are taken by senior management. Day-to-day handling sits with the training team and the booking and registration staff, and access to enquiry records is limited to those who need it to do their job. No individual is named on this page: responsibility rests with the company and with roles inside it, not with named people.

What do we collect when you contact us?

Most of what we know about you is what you typed yourself. Depending on which form you use, we collect:

• Contact and general enquiry form: first and last name, email address, phone number, and the text of your message.
• Course or event enquiry: name, email, phone, and the course or scheduled date the enquiry relates to.
• Request for tailored training: email address and the detail you give us about subjects, timing and group size.
• Course registration: each delegate's name, email, phone and job title, the employer being invoiced, the course, city and dates, and anything written into a free-text field.
• Live chat: the conversation itself, and any contact details you choose to put into it.

One thing worth stating plainly: these forms are not only emailed. Every submission is also written to our leads database so that an enquiry is not lost if an email fails. Stored with each record are the time of submission, the page you submitted from, the page that referred you, your IP address, your browser's user-agent string, and the outcome of the anti-spam check.

We do not ask you for special category data. If you tell us about an access requirement or a dietary need so that we can make arrangements for you at a course, that may be health-related information; we use it for that arrangement only, with your explicit consent, and it does not outlive the course.

And what is collected automatically?

Like any website, our server records the requests it receives: IP address, date and time, the page requested, the response code, the referring page, and the string identifying your browser and operating system. Those logs are used to diagnose faults, to see how heavily the site is being used, and to spot abuse.

The public pages of this site use no login session and no cookie that identifies you to us. Unless you submit a form or open a chat, your visit is a line in a server log and nothing more.

Cookies, browser storage and measurement

This is where the notice departs from what you usually read, and we would rather say it than write a polite sentence that is not true: this site does not show a cookie banner and does not ask you before measurement tags may run. Google Consent Mode operates on every page, but it is set to "granted" from your first page view, which means any Google measurement tag active on the site is permitted to set cookies immediately. You are not asked, and your browser is the control you have.

Alongside that:

• The live chat uses browser storage, not cookies. The widget keeps a visitor identifier and your message history in your device's localStorage so a conversation survives a page reload. Clearing site data in your browser removes it.
• Forms are protected by Google reCAPTCHA, which sets a cookie of its own and reads signals from your device to tell a person from an automated script.
• Some scripts and stylesheets load from public content delivery networks. Requesting a file from them exposes your IP address and browser to those providers, even where nothing is stored on your device.

How to stop it: every current browser lets you block third-party cookies or cookies from this site specifically, delete what is already stored, browse in a private window that keeps nothing after you close it, and switch on built-in tracking protection. Google also publishes browser-level opt-out tools for its analytics measurement. Be aware that blocking everything may stop the chat window or the form security check from working, because both depend on local storage.

What allows us to hold it?

Each use has a defined lawful basis under Article 6 of the UK GDPR:

• Performance of a contract, or steps taken before entering one — registering you on a course, sending joining instructions, and managing your place, including changes and cancellations.
• Legitimate interests — answering your enquiry, keeping a record of what was discussed, running and securing the site against abuse, and understanding which of our pages are useful. We have weighed those interests against your privacy, and you can object at any time.
• Legal obligation — keeping accounting and tax records of transactions that actually take place.
• Consent — marketing emails about upcoming courses. Consent is given by choice, withdrawing it costs you no more than the unsubscribe link in any message, and it has no effect on a booking you already hold.

Who else sees it?

We do not sell or rent your data. It reaches only:

• the infrastructure providers who host the site and its database and send our email on our behalf;
• the online booking platform we operate, where a registration and its payment are completed;
• Google, to the extent reCAPTCHA and the measurement described above process it;
• the trainer and the venue for a course, so far as needed to put you on the attendance list and get you through the door;
• our professional advisers and auditors, where there is a genuine need;
• law enforcement or a regulator, where the law requires it or where it is necessary to protect our rights or someone's safety.

Anyone processing data on our behalf does so under a written agreement that confines them to our instructions and forbids using it for their own purposes.

Does it leave the UK?

Some of the providers we rely on process data outside the UK. Where that happens we use a transfer mechanism recognised under UK law: a UK adequacy decision covering the country in question, or the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses, together with whatever additional safeguards those require.

If you attend a course held outside the UK, your name and employer naturally reach the venue in that country for registration and access.

How long do we keep it?

We do not keep things simply because we can. The period follows the purpose the data was collected for:

• An enquiry that did not become a booking — held for a limited period after our last contact, so we recognise you if you come back, then deleted or stripped of anything identifying.
• Registration and attendance records — kept for as long as you are a customer, and afterwards for the period UK accounting and tax requirements demand.
• Server logs — a short period, enough for diagnostics and for spotting abuse.
• Chat transcripts — kept with the enquiry record they produced, and follow the same period as that record.
• A record of marketing consent — kept until you withdraw it, along with a trace of the withdrawal itself so that we do not contact you again by mistake.

Your rights, and how to use them

UK law gives you rights over information about you. They are:

• Access — ask for a copy of what we hold about you and an explanation of how it is used.
• Rectification — have anything inaccurate or incomplete put right.
• Erasure — ask us to delete your data where we no longer have a reason to keep it.
• Restriction — have us pause our use of it while an objection or a correction is looked at.
• Objection — object to anything we do on the basis of legitimate interests; objecting to direct marketing is an absolute right and we act on it immediately, without asking why.
• Portability — receive what you gave us in a common electronic format, or have it sent to another organisation where that is technically possible.
• Withdrawing consent — at any time, wherever consent is the basis we relied on.

To use any of them, go through the contact page. We answer within one month. We may ask you to confirm your identity before we hand data over — that step protects you, not us — and there is no charge.

If you think we have handled your data badly, you are entitled to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. We would ask for the chance to put it right first.

Anything else worth knowing

Security. The site is served over an encrypted connection, and access to enquiry and registration records is limited to the people whose work requires it. Nobody can promise absolute security on the internet, and we are not going to make you that promise.

No automated decisions. We make no decision about you with legal or similarly significant effect by automated means alone, and we do not profile you.

Age. Our services are aimed at working professionals and their employers. They are not directed at anyone under 18, and we do not knowingly collect their data. If such data reaches us, we delete it.

Links out. Some links take you to sites we do not run, and this notice does not cover them.

Changes to this notice. We revise it whenever our practices or the tools we use change. The version on this page is the one in force, and the date at the top tells you when it last moved. Where a change materially alters how your data is used, we will make that visible rather than slip it through.