PRIVACY POLICY

Access Platforms Aberdeen (APA)

Last updated: March 2026

 

  1. Who We Are

Access Platforms Aberdeen Ltd (“APA”, “we”, “us”) is a Scottish access hire and training provider based at:

Units 1, Kirkton Drive Pitmedden Industrial Estate
3 Kirkton Ave, Dyce
Aberdeen, AB21 0BF
Tel: 01224 899000
Email: info@accessaberdeen.co.uk

APA is a data controller under UK data protection law.

This policy explains how we collect, use and protect personal data when you use our website, request a quote, hire equipment, book training or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR).

 

  1. What Data We Collect

Depending on your interaction with us, we may collect:

Contact details
Name, job title, company name, business email, phone number, site address.

Hire & training information
Booking details, equipment requested, delivery address, certification and attendance records.

Website data
IP address, browser/device information, pages visited and cookie preferences.

We use:

  • Google Analytics 4 (website analytics)
  • Google Ads conversion tracking
  • Google reCAPTCHA (form protection)

reCAPTCHA may process IP address and interaction data to prevent spam.

We may also collect additional information where required for safety, compliance or contractual purposes.

We do not knowingly collect data from children under 16.

 

  1. How We Use Your Data

We use personal data to:

  • Provide hire and training services
  • Process bookings and manage equipment delivery
  • Maintain training certification records
  • Respond to enquiries and provide quotations
  • Comply with health and safety and legal obligations
  • Improve our website and services
  • Send marketing communications where permitted

We do not use personal data for automated decision-making that has legal or similarly significant effects without human involvement.

 

  1. Lawful Basis for Processing

We process your data under one or more of the following lawful bases:

  • Contract – to provide hire or training services
  • Legal obligation – compliance with HSE, LOLER, training regulations
  • Legitimate interests – managing client relationships and improving services
  • Consent – marketing communications and non-essential cookies

Under Data (Use and Access) Act 2025, certain internal security and fraud prevention processes may fall under recognised legitimate interests.

 

  1. Marketing Communications

We only send marketing emails where:

  • You have opted in; or
  • The soft opt-in applies (existing customers, similar services, with opt-out provided).

Every marketing email includes an unsubscribe option.

We do not sell personal data.

 

  1. Cookies & Website Tracking

We use cookies to operate and improve our website.

  • Essential cookies run automatically.
  • Analytics cookies may run in anonymised statistical mode.
  • Advertising cookies (Google Ads) require consent.

You can accept, reject or manage cookies via our cookie banner at any time.

Full details are available in our Cookie Policy.

 

  1. Data Sharing

We may share data with:

  • Certification bodies (e.g. IPAF, PASMA)
  • IT and website providers
  • Professional advisers
  • Regulators (where required)

We do not transfer personal data outside the UK without appropriate safeguards.

 

  1. Data Retention

We retain personal data only as long as necessary for legal, compliance and business purposes. Marketing data is retained until you unsubscribe.

 

  1. Security

We use secure systems, encrypted connections (HTTPS), controlled access and appropriate technical safeguards to protect personal data.

 

  1. Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Object to marketing
  • Withdraw consent
  • Request human review of automated processing (if applicable)

To exercise your rights, email: info@accessaberdeen.co.uk

We aim to respond within one month.

If you are not satisfied, you may contact the ICO at www.ico.org.uk.

 

  1. Complaints Procedure (Data (Use and Access) Act 2025 Two-Stage Process)

If you have a data protection concern:

  1. Contact APA directly in writing.
  2. We will investigate and respond appropriately.
  3. If unresolved, you may escalate to the Information Commissioner’s Office (ICO).

ICO: www.ico.org.uk

Under Data (Use and Access) Act 2025, individuals must first raise concerns with the organisation before escalating

 

  1. Changes to This Policy

We may update this policy from time to time. Updates will be published on this page with a revised date.