Privacy Notice

NXT-LVL Training & Development Limited Privacy Notice

NXT-LVL Training & Development Limited (“NXT-LVL”) respects your privacy and is committed to protecting your personal data.

This privacy notice provides information on how NXT-LVL collects, processes and protects personal data received about you through you using this NXT-LVL website and/or through the provision of NXT-LVL’s services and/or other dealings with NXT-LVL.

It is essential that you read and understand this privacy notice and any related policies that NXT-LVL may issue so that you may be aware of how and why NXT-LVL is using personal data.

NXT-LVL Training & Development Limited registered in Isle of Man with number 022177V of The Mansion House, The Nunnery, Old Castletown Road, Isle of Man, IM2 1QB 

NXT-LVL is a data controller responsible for your personal data and is registered with the appropriate regulator in the applicable jurisdiction.

NXT-LVL keeps this privacy notice under regular review. It is important that the personal data NXT-LVL holds about you is accurate and current. NXT-LVL should be informed if your personal data changes during your relationship with NXT-LVL.

If you have any questions about this notice or wish to make a written subject access request, please contact adminteam@nxtlvl.training.

What is Personal Data or Personal Information?

Personal data, or personal information, refers to any information about an individual from which that person can be identified. It does not include data from which the identity has been removed (e.g., anonymous data).

Through NXT-LVL’s website and the provision of services, NXT-LVL may collect, use, store and transfer different kinds of personal data about you, which is grouped as follows:

• Identity Data includes your name or similar identifier, first name, maiden name, last name, previous names, title and date of birth.
• Employment Data includes information about your current or previous employer and any qualifications you have gained during any periods of employment with any employer in the Island of Jersey, the Isle of Man or other applicable jurisdiction.
• Contact Data includes billing address, postal and email address and landline and mobile telephone numbers.
• Financial Data includes details about payments and bank account details.
• Technical Data includes your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on your devices to access NXT-LVL’s website.
• Usage Data includes information about how you use NXT-LVL’s website.
• Marketing and Communications Data includes your preferences for receiving marketing from NXT-LVL and its third parties, your communication preferences, and any opinions you express when participating in market research.

NXT-LVL also collects, uses, and shares aggregated data, such as statistical or demographic data, for data analysis purposes. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, NXT-LVL may aggregate your Usage Data to calculate the percentage of users accessing a specific NXT-LVL site feature. However, suppose NXT-LVL combines or connects aggregated data with your personal data so that it can directly or indirectly identify you. In that case, NXT-LVL treats the combined data as personal data, which will be used per this privacy notice.

NXT-LVL does not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data).

How is Personal Data collected?

NXT-LVL uses different methods to collect data from and about you, including through:

• Direct input by you. You may provide NXT-LVL with your identity and contact data by completing booking request forms, contacting NXT-LVL by email and/or post and/or by corresponding with NXT-LVL via this website or through alternative communication and web applications.
• Automated technologies or interactions. As you interact with NXT-LVL’s website, NXT-LVL may automatically collect technical data about your equipment, browsing actions and patterns. NXT-LVL collects this personal data using cookies and other similar technologies. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is utilised by NXT-LVL to track visitor use of its website and to compile statistical reports on its website activity.
• Third parties or publicly available sources. NXT-LVL may receive personal and technical data about you from various third parties and public sources, including analytics providers.

How is Personal Data used?

NXT-LVL will only use personal data in the manner permitted by the law. Most commonly, NXT-LVL will use personal data in the following circumstances:

• To send you further information about NXT-LVL’s services.
• Where NXT-LVL needs to perform contractual services with you.
• Where it is necessary for NXT-LVL’s legitimate interests (or those of a third party) and your interests and fundamental rights, do not override those interests.
• Where NXT-LVL needs to comply with a legal or regulatory obligation.
• Where NXT-LVL needs to pursue our legitimate interest.
• To process the information to enter into or carry out an agreement with you.
• The need to establish, exercise or defend NXT-LVL’s legal rights.

NXT-LVL does not rely on consent as a legal basis for processing personal data other than in relation to sending third-party direct marketing communications to you via email or text message.

You have the right to withdraw consent to marketing at any time by contacting adminteam@nxtlvl.training.

Purposes for which Personal Data is used?

NXT-LVL has described below how it plans to use personal data and which legal bases it relies upon to do so. NXT-LVL has identified legitimate interests where appropriate.

Legitimate interest means the interest of NXT-LVL in conducting and managing the business to enable it to give you the best service/product and the best and most secure experience. NXT-LVL makes sure it considers and balances any potential impact on you (both positive and negative) and your rights before it processes your personal data for its legitimate interests. NXT-LVL does not use your personal data for activities where NXT-LVL’s interests are overridden by the impact on you (unless it has your consent or is otherwise required or permitted to by law).

NXT-LVL may process your personal data for more than one lawful ground, depending on the specific purpose.

Please contact adminteam@nxtlvl.training if you require further details about the specific legal ground NXT-LVL relies on to process your personal data, which has more than one ground set out below.

Purpose/Activity

To register you as a potential new customer or intermediary.

Type of data

(a) Identity
(b) Contact

Lawful basis for processing, including basis of legitimate interest 

Necessary for legitimate interests to expand NXT-LVL’s customer base to allow for the growth of the business.

Purpose/Activity

To manage the relationship with a customer, including notifying you of changes to NXT-LVL’s terms and conditions or privacy notice and any request to provide feedback, undertake a review or a survey.

Type of data

(a) Identity
(b) Contact
(c) Marketing and Communications

Lawful basis for processing, including basis of legitimate interest 

Necessary for the performance of a contract with you.
Necessary to comply with a legal obligation.
Necessary for legitimate interests to keep NXT-LVL’s records updated and to understand how customers use NXT-LVL’s services.

Purpose/Activity

To administer and protect NXT-LVL’s business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).

Type of data

(a) Identity
(b) Contact
(c) Technical

Lawful basis for processing, including basis of legitimate interest 

Necessary to comply with a legal obligation.
Necessary for legitimate interests (for the provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation).

Purpose/Activity

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising.

Type of data

(a) Identity
(b) Contact
(c) Usage
(d) Marketing and Communications
(e) Technical

Lawful basis for processing, including basis of legitimate interest 

Necessary for legitimate interests (to study how customers use NXT-LVL’s products/services, develop them, grow the business, and inform NXT-LVL’s marketing strategy).

Purpose/Activity

To use data analytics to improve NXT-LVL’s website, products/services, marketing, customer relationships and experiences.

Type of data

(a) Usage
(b) Technical

Lawful basis for processing, including basis of legitimate interest 

Necessary for legitimate interests (to define types of customers for NXT-LVL’s products and services, keep our website updated and relevant, develop our business, and inform NXT-LVL’s marketing strategy).

Purpose/Activity

To make suggestions and recommendations to you about goods or services that may be of interest.

Type of data

(a) Identity
(b) Contact
(c) Usage
(d) Technical

Lawful basis for processing, including basis of legitimate interest 

Necessary for legitimate interests (to develop NXT-LVL’s products/services and grow the business).

Change of Purpose

NXT-LVL will only use your personal data for the purposes for which it was collected unless NXT-LVL reasonably considers that it needs to be utilised for another reason, and that reason is compatible with the original purpose.

If you would like an explanation of how the processing for the new purpose is compatible with the original purpose, please contact.

If NXT-LVL needs to use your personal data for an unrelated purpose, NXT-LVL will notify you and will explain the legal basis which allows NXT-LVL to do so, where it is permitted to do so by the law in the applicable jurisdiction.

Data Security

NXT-LVL has established appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, NXT-LVL limits access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. Such parties will only process your personal data on NXT-LVL’s instructions and are subject to a duty of confidentiality.

NXT-LVL has implemented procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Sending information over the internet to NXT-LVL is generally not completely secure, and NXT-LVL cannot guarantee the security of your personal data while it is in transit. NXT-LVL has procedures and security features in place to keep data secure once it is received.

Data Sharing

NXT-LVL may pass your personal data to a third-party service provider contracted to NXT-LVL as a consequence of providing services to you.

If an employer is paying for your course, NXT-LVL will share your personal data, course attendance, course feedback and any applicable results with the employer. NXT-LVL will also share your personal data with ACCA and ICAEW institutions.

NXT-LVL requires that all third parties respect the security of your personal data and treat it in accordance with the relevant Data Protection law in the applicable jurisdiction.

NXT-LVL does not allow third-party service providers to use your personal data for their own purposes. NXT-LVL only permits them to process your personal data for specified purposes per NXT-LVL’s instructions.

Transferring information overseas

If we transfer your personal data outside the EEA, we ensure a similar degree of protection by transferring it only to countries that the European Commission has deemed to provide an adequate level of protection for personal data.

How long will Personal Data be kept?

NXT-LVL will only retain your personal data for as long as necessary to fulfil the purposes it has been collected for, including to satisfy any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, NXT-LVL considers the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure of the data, the purposes for which NXT-LVL processes the data, whether NXT-LVL can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask NXT-LVL to delete your personal data.

In some circumstances, NXT-LVL may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes. NXT-LVL may use this information indefinitely without further notice to you, as it will no longer constitute personal data.

Legal Rights

Under certain circumstances, you have rights under the data protection laws in the applicable jurisdiction concerning your personal data.

You have the right to:

1. Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data NXT-LVL holds about you and to check that NXT-LVL is lawfully processing it.
2. Request correction of the personal data that NXT-LVL holds about you. This enables you to have any incomplete or inaccurate data held by NXT-LVL corrected, though NXT-LVL may need to verify the accuracy of the new data provided.
3. Request erasure of personal data. This enables you to ask NXT-LVL to delete or remove personal data when there is no good reason to continue processing it. You also have the right to ask NXT-LVL to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where NXT-LVL may have processed your information unlawfully or where NXT-LVL is required to erase your personal data to comply with local law. Note, however, that NXT-LVL may not always be able to comply with your request of erasure for specific legal reasons, which will be noted, if applicable, at the time of a request.
4. Object to processing of your personal data where NXT-LVL is relying on a legitimate interest (or those of a third party), and there is something about your particular situation that makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You also have the right to object where NXT-LVL processes your personal data for direct marketing. In some cases, NXT-LVL may demonstrate that it has compelling legitimate grounds to process your information, which overrides your rights and freedoms.
5. Request restriction on processing your personal data. This enables you to ask NXT-LVL to suspend the processing of your personal data in the following scenarios:
   - If you want NXT-LVL to establish the data’s accuracy.
   - If NXT-LVL’s use of the data is unlawful, but you do not want NXT-LVL to erase it.
   - If you need NXT-LVL to hold the data, even if NXT-LVL no longer requires it, you need it to establish, exercise, or defend legal claims.
   - You have objected to the use of your personal data, but NXT-LVL needs to verify whether it has overriding legitimate grounds for using it.
6. Request the transfer of your personal data to yourself or a third party. NXT-LVL will provide you, or the chosen third party, with your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information you initially provided consent for NXT-LVL to use or where NXT-LVL used the information to perform a contract with you.
7. Withdraw consent at any time when NXT-LVL is relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, NXT-LVL may be unable to provide certain services. NXT-LVL will advise you if this is the case when you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us. You also have the right to complain to the data protection regulator in your country of residence or work at www.inforights.im.

No fee is usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, NXT-LVL may charge a reasonable fee if the request is deemed unfounded, repetitive or excessive. Alternatively, NXT-LVL could refuse to comply with your request in these circumstances.

What NXT-LVL may require from you

NXT-LVL may need to request specific information to help confirm your identity and ensure your right to access the personal data (or to exercise any of your other rights). This security measure ensures that personal data is not disclosed to anyone with no right to receive it. NXT-LVL may also contact you for further information concerning the request to speed up NXT-LVL’s response.

Response Times

NXT-LVL will aim to respond to all legitimate requests within one month. Occasionally, it could take longer than a month if the request is particularly complex or you have made several requests. In this case, NXT-LVL will notify you and keep you updated.

What we need you to do

You are responsible for ensuring that the information you provide to us is accurate and up to date. If anything changes, you must tell us as soon as possible. If you provide information to someone else, such as your employer, you should direct them to this notice. If we need that person’s consent, we will ask you to confirm that you have obtained such consent and may request proof of receiving the permission.

Amendments

NXT-LVL may update this notice from time to time. You should check this page periodically to ensure you are happy with any changes. This notice is effective from 1 January 2025.