Privacy policy

Who we are

The data controller for LearnHGV is Webco Services Ltd. Use the contact page for privacy requests.

What we collect

• Provider and employer accounts — name, work email, organisation details, and listing or job content you submit.
• Sign-in — we email a one-time code and a sign-in link to the address you give us. Provider and employer tools use that email. We do not use passwords for these accounts. Provider and employer pages share one signed-in session. Admin sign-in uses a separate session. An employer profile is created only after this email sign-in. We keep the email address for the sign-in attempt. We do not keep the code or the link itself.
• Public directory data — business names, addresses, phone numbers, websites, courses, and similar information shown on listings (often sourced from public websites or submitted by the provider).
• Provider verification — if a signed-in training provider completes the check, we store the questionnaire answers, the email address of the signed-in account that submitted them, information requests sent by LearnHGV, the provider’s replies, internal notes, and earlier declarations and submissions. The public verification page shows the provider name, a public verification identifier, whether Verified Training Provider is currently awarded, whether 100% Direct Delivery is currently awarded, and the relevant verification date. Questionnaire answers, declaration history, information requests, replies, and internal notes are not published.
• Technical logs — standard server and hosting logs (IP address, browser type, timestamps) needed to run and secure the site.
• Abuse prevention — we keep short-lived technical records to limit repeated sign-in attempts and public form submissions. These records do not store the raw IP address.
• Messages you send us — if you use the contact form, we email that message to LearnHGV so we can reply and resolve the issue. We do not add it to the directory database.
• Profile enquiries — if you use “Message this centre” on a listing, we process your name, email, optional phone, and message to deliver them to that training centre. We also keep a record of the enquiry to operate and improve LearnHGV (for example spam prevention and understanding which centres receive interest). That record includes first-party journey context from your visit — the first LearnHGV page you landed on, the type of referring site if the browser sent one (for example Google), any UTM tags on that landing URL, and how you reached the listing (search, help-me-choose, a city page, and similar). We do not store IP addresses or device fingerprints with the enquiry for this purpose. We do not sell enquiry data. If you tick the optional follow-up box, we may email you later to ask whether you booked and how training went.
• Job applications — if you apply through a LearnHGV form on a vacancy, we process your name, email, phone, postcode, licence details, optional CPC/tachograph status, and message so we can send them to that employer. If you include a postcode, we may send the relevant UK postcode or postcodes to postcodes.io to estimate the distance to the vacancy. That distance may be stored and shown to the employer. We keep a copy in the employer’s dashboard and for operating the jobs board (including spam prevention). You may optionally upload a PDF CV. We store that CV privately with the application and make it available to the employer advertising that job. The CV is not attached to the email we send the employer. The employer can download their own copy from LearnHGV and is responsible for any copy they keep outside LearnHGV. We do not sell application data. The employer also receives your other application details by email and is responsible for how they use that copy.

We do not store public contact-form messages except profile enquiries and job applications as described above. Browse and search do not require an account. Profile enquiry forms email your message directly to the training centre so they can reply. Job application forms email your application details directly to the employer so they can contact you. A CV, if you uploaded one, is not included in that email. LearnHGV does not sell those leads.

Why we use it

• To publish and maintain training listings and job ads
• To pass job applications and training enquiries to the relevant employer or centre
• To sign training providers and employers in with a one-time code or sign-in link
• To respond to support, claim, and partnership enquiries
• To keep the service secure and diagnose faults
• To meet legal obligations where they apply

Our lawful bases under UK GDPR are typically legitimate interests (operating a public directory and jobs board), contract (providing the account tools you request), and consent where we ask for it.

Processors and hosting

We use trusted processors to run LearnHGV, including hosting (for example Vercel), a database provider, and transactional email (Resend). Resend handles sign-in emails, provider claim and verification messages, learner enquiries sent to training centres, job applications sent to employers, and other transactional account messages. Those emails may contain the details you submitted where the message needs them. They process data only on our instructions.

When a map is shown, your browser loads map tiles from OpenStreetMap. Postcode lookup and location calculation use postcodes.io. If we need to place an address and a postcode lookup is not enough, our server sends that address query to OpenStreetMap’s Nominatim service. A training-centre icon may be requested by your browser from Google’s favicon service, using the centre’s website address rather than your own details.

Cookies

We use an essential cookie for a shared provider and employer sign-in session, and a separate essential cookie for an admin session. We also use a first-party session cookie to remember how you arrived at LearnHGV during your visit, so that if you message a training centre we can attach that journey context to the enquiry. It is not used for advertising and is not shared with third-party analytics companies. We do not currently use advertising or third-party marketing cookies. If we add analytics that need consent, we will update this policy and, where required, ask before setting non-essential cookies.

Sponsored links

Some sponsored cards link away from LearnHGV. Those links can include ordinary address parameters — utm_source=learnhgv, utm_medium=sponsored, and utm_content naming the placement — so the visit can be recognised as coming from that spot on LearnHGV.

LearnHGV does not store that click as a personal advertising record. We do not use these parameters for behavioural advertising, profiling, retargeting, or cross-site tracking, and we do not sell browsing histories to advertisers. They are not advertising cookies. The site you open then applies its own privacy, cookie, and terms policies. Advertising & sponsorship explains the placements.

How long we keep data

Account and listing data is kept while the account or listing is active and for a reasonable period afterwards for security and dispute handling. Profile enquiries are kept to operate the service and will be deleted on request or when they are no longer needed. Job application information, including an optional CV, is kept for up to 12 months from the date of the application and is then deleted from LearnHGV. Application details already emailed to the employer, and any CV the employer has downloaded, remain in that employer’s own systems. LearnHGV cannot delete those copies. Emails are kept as long as needed to deal with your enquiry. Server logs are retained for a limited operational window.

Your rights

Under UK data protection law you can ask to access, correct, delete, or restrict processing of your personal data, and to object to processing based on legitimate interests. You can also complain to the Information Commissioner’s Office. Email us to exercise your rights — we may need to verify your identity.

Children

LearnHGV is aimed at adults considering professional HGV training and employment. We do not knowingly collect data from children.

Changes

We may update this policy as the product evolves. The “last updated” date at the top will change when we do. Continued use of the site after changes means you accept the updated policy.