1. Who we are
Abfiel is a trading name of Elis Ventures Ltd, a company registered in England & Wales with its registered office at 20-22 Wenlock Road, London N1 7GU. For the purposes of UK data protection law, Elis Ventures Ltd is the data controller for personal data collected through this website and in the course of our consultancy and training services.
Data protection enquiries: privacy@abfiel.com.
Learners: when your employer enrols you on our training, your employer is the controller of your training records and we process them on your employer's behalf under a data processing agreement. Your employer's own privacy notice explains how it uses your information. We are a controller in our own right for our certificate register (your name, employer, course, date, certificate number, assessor and result), which we keep so that we can verify certificates and meet our legal, quality and insurance obligations.
2. The personal data we collect
- Enquiry and consultation data — name, work email, organisation, phone number, the topic of your enquiry and any notes you provide.
- Training booking data — delegate name, email, organisation, number of delegates, course and date requested, access requirements you choose to disclose.
- Training record data — course enrolments, attendance, progress, completion dates, assessment results, competency assessment records and certificates.
- Assessment data — answers you submit to our AI Readiness Assessment and the resulting scores and report.
- Account data — where you create a client portal account, your name, email address and authentication identifiers from your chosen sign-in provider.
- Marketing data — email address and name where you subscribe to our briefing.
- Technical data — IP address, browser type and pages visited, collected through essential logging and security controls.
We do not ask for, and you should not send us, special category data or information about the people you care for through this website. Where an engagement requires access to such data, it is governed by a separate data processing agreement.
3. Why we use it and our lawful basis
- To respond to enquiries and deliver services — performance of a contract, or steps taken at your request before entering a contract.
- To administer training bookings, certificates and records — performance of a contract and our legitimate interest in maintaining accurate training evidence.
- To send our briefing and course dates — your consent, or the soft opt-in for existing clients. Every email carries an unsubscribe link.
- To secure and improve the site — our legitimate interest in operating a safe, reliable service.
- To meet legal and regulatory obligations — compliance with a legal obligation, including accounting and training-record requirements.
4. Who we share it with
We share personal data only where needed, with: our associate trainers, who deliver training on our behalf under written confidentiality and data protection terms; processors who support our services (cloud hosting and database providers, our transactional email provider, our learning platform provider, our Microsoft 365 environment and our customer relationship management system); your employer or the organisation that arranged your training, to report attendance, completions, results and certificates; professional advisers and insurers; and regulators, law enforcement or the courts where the law requires it. All processors are bound by written terms and process data only on our instructions. We do not sell personal data or share it with advertisers.
Where data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
- Enquiries that do not lead to an engagement: 24 months after our last contact.
- Client contracts and financial records: 6 years after the end of the financial year in which the engagement ends.
- Learner training records held for an employer: while that employer's contract with us is in force, or as the employer instructs; then returned to the employer and deleted within 30 days.
- Our certificate register and competency assessment records: 6 years from the date of the certificate or assessment.
- Marketing subscriptions: until you unsubscribe, then a suppression record only.
- Portal accounts: for the life of the account, then deleted within 30 days of closure.
6. Your rights
You have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time where consent is our lawful basis. To exercise any right, email privacy@abfiel.com. We respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to resolve it first — see our complaints procedure.
7. Security
Access to personal data is restricted to authorised personnel, protected by multi-factor authentication and role-based access controls, and encrypted in transit. Database access is governed by row-level security so that clients can only see their own records.
8. Cookies
Details of the cookies and similar technologies we use are set out in our cookie notice.
9. Changes
We review this notice annually and whenever our processing changes materially. The date at the side of this page shows the current version.