1. Who We Are (Data Controller)

Alpha Training & Consulting ("we," "us," or "our") is the data controller for personal information collected through this website (asqcssbb.com) and related services.

Alpha Training & Consulting
8634 Acorn Lane, Sandy, Utah 84093, USA
Phone: 801-599-1579
Email: [email protected]

2. Information We Collect

2.1 Information You Provide

Contact & registration data — name, email address, phone number, mailing address when you enrol in a training programme, complete a contact form, or subscribe to our newsletter.
Payment data — billing details processed directly by our payment processor; we do not store full payment card numbers.

2.2 Information Collected Automatically

Usage data — IP address, browser type, operating system, referring URLs, pages visited, and time spent, collected through server logs and (with your consent) Google Analytics.
Cookies & local storage — see Section 6 and our Cookie Policy for full details.

3. Legal Bases for Processing (GDPR Art. 6)

We process your personal data under one or more of the following legal bases:

Purpose	Legal Basis
Delivering training services you have purchased	Art. 6(1)(b) — Performance of a contract
Responding to enquiries and providing support	Art. 6(1)(b) — Performance of a contract / pre-contractual steps
Analytics to improve site content and UX	Art. 6(1)(a) — Consent (opt-in via Cookie Preferences)
Sending marketing emails and newsletters	Art. 6(1)(a) — Consent (opt-in at subscription)
Fraud prevention and site security	Art. 6(1)(f) — Legitimate interests
Compliance with tax and accounting obligations	Art. 6(1)(c) — Legal obligation

4. How We Use Your Information

Process enrolments, payments, and issue receipts
Deliver training materials and course access
Respond to enquiries, provide technical support
Send service-related communications (order confirmations, reminders)
Send optional marketing emails (unsubscribe link in every message)
Analyse website traffic to improve content (with consent)
Detect and prevent fraudulent activity
Meet legal and regulatory obligations

5. Sharing Your Information

We do not sell personal data. We may share data with:

Service providers — payment processors, email platform, hosting provider, analytics (Google Analytics). Each is bound by a data processing agreement.
Legal authorities — when required by law, court order, or to protect the rights and safety of users.
Business transfers — in the event of a merger or acquisition, data may be transferred to the successor entity subject to the same protections.

6. Google Analytics & Consent Mode v2

This site uses Google Analytics 4 (GA4). We have implemented Google Consent Mode v2: by default, analytics_storage and ad_storage are set to denied, and no identifiable data is sent to Google until you grant consent through the Cookie Preferences panel. When consent is denied, Google may receive only anonymous, cookieless, aggregate signals. You can update your preferences at any time via the "Manage Cookie Preferences" link in the footer.

7. International Data Transfers

We are based in the United States. If you access our site from the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to and processed in the US. We rely on the EU–US Data Privacy Framework (DPF) and, where applicable, the UK Extension to the DPF or Standard Contractual Clauses (SCCs) approved by the European Commission to provide an appropriate level of data protection for such transfers. Copies of the SCCs are available on request.

8. Your Data Subject Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the following rights:

Access — obtain a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Erasure — request deletion of your data where it is no longer necessary, or where you withdraw consent.
Restriction — ask us to pause processing while a dispute is resolved.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Lodge a complaint — you may lodge a complaint with your local data protection supervisory authority (e.g., your national DPA within the EU, or the ICO in the UK).

Response timeline: We will respond to all verifiable requests within 30 days. Where requests are complex or numerous, we may extend this by a further 60 days with written notice explaining the reason.

To exercise any right, contact us at [email protected].

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Know — request disclosure of the categories and specific pieces of personal information we have collected about you.
Delete — request deletion of personal information we have collected, subject to certain exceptions.
Correct — request correction of inaccurate personal information.
Opt out of sale or sharing — we do not sell personal information. We do not share personal information for cross-context behavioural advertising. You may use the "Do Not Sell or Share My Personal Information" link in the footer to limit analytics sharing via the Cookie Preferences panel.
Limit use of sensitive personal information — we do not collect sensitive personal information as defined under CPRA.
Non-discrimination — we will not discriminate against you for exercising any of your rights.

To exercise California rights, contact us at [email protected] or call 801-599-1579. We will verify your identity before fulfilling a request. Authorised agents may submit requests on your behalf with written permission.

Response timeline: We will acknowledge receipt within 10 business days and fulfil requests within 45 days (extendable 45 days with notice).

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Course enrolment records are retained for 7 years to meet tax and audit requirements. Analytics data (with consent) is retained in GA4 for up to 14 months. Contact form submissions are retained for 3 years.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are directed to professionals aged 18 and older. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Where required by law, we will notify you more prominently.

14. Contact Us

Alpha Training & Consulting
8634 Acorn Lane, Sandy, Utah 84093, USA
Phone: 801-599-1579
Email: [email protected]