Professional Chainsaw Safety Training — DGFASLI Aligned
ChainsawCourses
HomeProductsRefresher TrainingHow it WorksAboutBlogNewsChainsaw RetailersTraining ProvidersAffiliates log in

Data ProtectionPolicy

Overleaf Publishers Ltd · Co. No. 15735226 · VAT No. 479581629 · Version 1.2 · September 2026 · chainsawcourses.com

1. Data Controller

The data controller for the Chainsaw Courses platform is Overleaf Publishers Ltd ("we", "us", "our"), the operator of the vocational chainsaw safety training service at chainsawcourses.com. Contact: info@chainsawcourses.com. This policy is prepared in accordance with UK GDPR (UK Data Protection Act 2018) and reflects IIRSM vocational training data standards.

2. Data We Collect and Why

Full name & email
Identify the licensed learner; personalise training; embed dynamic watermark on videos. Lawful basis: Contract (Art. 6(1)(b)).
Activation Code
Verify a valid purchase; prevent unauthorised sharing. Lawful basis: Contract.
Device identifier
Bond access to a single device; prevent credential sharing. Lawful basis: Legitimate interests (Art. 6(1)(f)).
Video watch progress & timestamps
Enable resume-on-return; enforce sequential module unlocking; verify completion. Lawful basis: Contract.
Quiz & exam scores
Assess competency; require 100% for each module quiz and 80% for the final exam. Lawful basis: Contract.
Digital waiver signature
Record informed consent to safety terms. Lawful basis: Legal obligation / legitimate interests.
Inspection checklist records
Personal chainsaw pre-use safety log; duty-of-care records (PUWER/LOLER). Lawful basis: Legitimate interests; legal obligation.
Risk assessment records
Dynamic risk assessment log; statutory compliance. Lawful basis: Legitimate interests; legal obligation (MHSWR 1999).
AI mock-test messages
AI-assisted exam preparation; improve AI response quality. Lawful basis: Contract / legitimate interests.
Module feedback ratings
Improve course content quality. Lawful basis: Legitimate interests.

3. Data Retention

We retain your personal training record for 3 years from the date of your last platform activity, or such longer period as may be required by applicable health and safety legislation. This retention period reflects the vocational nature of the training and supports ongoing employer and regulatory audit requirements. After the retention period, all personal data is securely deleted or anonymised.

4. Your Rights Under UK GDPR

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate data.
  • Right to erasure — ask us to delete your personal data (subject to statutory retention obligations).
  • Right to restriction — ask us to restrict processing in certain circumstances.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interests.

You may exercise the Right to Erasure directly within the Platform using the 'Delete Account' option. This permanently erases all personal data held about you. For all other rights requests, contact info@chainsawcourses.com. We will respond within 30 days.

5. Third-Party Services

Vimeo
Video hosting & streaming. IP address only (standard CDN delivery); no personal data transmitted by us.
OpenAI (Replit AI proxy)
AI mock-test & tutor responses. Chat message content only; no name, email, or identifiers transmitted.
Replit
Platform hosting & infrastructure. All platform traffic passes through Replit infrastructure; governed by Replit's DPA.
OpenStreetMap Nominatim
GPS reverse geocoding for risk assessments. Coordinates only; no personal identifiers transmitted.

6. Data Security

All data is transmitted over HTTPS. Personal data is stored in a securely hosted PostgreSQL database with access restricted to authorised personnel only. Passwords and tokens are never stored in plain text. Video streams are delivered via Vimeo's secure CDN with domain-level access restrictions. The device-lock mechanism means your training account is bound to your device, reducing the risk of unauthorised third-party access to your personal training record.

7. Cookies & Local Storage

This service uses essential cookies and browser storage for secure sessions, account access and saved preferences. We do not use advertising cookies or sell personal data. Replit may provide first-party operational analytics for service reliability and aggregate page usage; these analytics are not used for cross-site advertising or profiling.

8. Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern before you contact the ICO — please email info@chainsawcourses.com first.

For queries: info@chainsawcourses.com · Overleaf Publishers Ltd