Privacy Policy.
Last updated: 17 October 2026
1. Introduction
Medical and Mental Trauma Services (MMTS) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact us, enquire about our services, book or attend training courses, or purchase products.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations (PECR).
This policy also explains your rights and how you can contact us about your personal information.
2. Who We Are
Medical and Mental Trauma Services (MMTS) is a trading name of Henshaws Ltd, a private limited company registered in England and Wales.
Registered company: Henshaws Ltd
Trading name: Medical and Mental Trauma Services (MMTS)
Company number: 16664842
Registered office: 25 Culloden Way, Wokingham, England, RG41 3UN
Email: info@mmtsglobal.co.uk
Website: https://mmtsglobal.co.uk
Henshaws Ltd is the data controller for personal information where it determines the purposes and means of processing.
Throughout this policy, references to “MMTS”, “we”, “us” and “our” refer to Henshaws Ltd trading as Medical and Mental Trauma Services.
3. Information We Collect
Depending on how you interact with MMTS, we may collect the following information.
Personal and Contact Information
Full name
Email address
Telephone number
Postal or business address
Job title and organisation details
Information provided through enquiries or correspondence
Training and Course Information
When you enquire about, arrange or attend training, we may collect:
Delegate names and contact details
Course registrations and attendance information
Training dates and course history
Assessment results, where applicable
Certificates and qualification records
Relevant training requirements
Information needed by awarding or certification bodies
Customer and Payment Information
When you purchase products or services, we may collect:
Billing and delivery details
Products or services purchased
Order and transaction records
Payment status and payment references
Refund and customer service information
We accept payments by bank transfer (BACS) and online payments processed through Stripe.
Stripe processes payment card information through its payment services. MMTS does not ordinarily receive or store full payment card numbers or card security codes.
For bank transfers, we may receive payment references, payer names and relevant transaction details needed to identify and reconcile payments.
Website and Technical Information
When you visit our website, we may collect:
IP address
Browser and device information
Operating system
Pages visited
Website interactions
Referral sources
Cookie preferences
Website usage information
We use Google tools, including Google Analytics where enabled, to understand website performance and how visitors use our website.
Medical and Accessibility Information
Where relevant and necessary for delivering training or other services, we may collect medical or accessibility information directly from individuals.
This may include information about reasonable adjustments, accessibility requirements or relevant medical considerations.
We only request information that is necessary for the purpose concerned.
Medical information may be classed as special category personal data under UK GDPR and is subject to additional legal protections.
Where we collect this information, we identify an appropriate lawful basis and special category processing condition, restrict access to authorised individuals and apply suitable security measures.
4. How We Collect Personal Information
We may collect information when you:
Visit or browse our website
Complete a contact or enquiry form
Contact us by email or telephone
Request a quotation
Enquire about or arrange training
Attend a course or training event
Purchase products or services
Download resources or educational materials
Subscribe to marketing communications
Provide feedback or complete a survey
Communicate with our representatives
We may also receive information from employers, organisations or training coordinators arranging services on behalf of other individuals.
5. How We Use Your Information
We use personal information to operate our business and provide our services.
This includes:
Responding to enquiries
Preparing quotations and proposals
Arranging and delivering training courses
Managing attendance and certification records
Providing medical, trauma management and emergency response services
Processing orders and payments
Managing refunds and customer support
Maintaining appropriate business records
Communicating important service information
Improving our website and services
Analysing website usage and performance
Sending marketing communications where permitted
Maintaining website and information security
Meeting legal and regulatory obligations
We only process personal information where we have a lawful basis to do so.
6. Our Legal Basis for Processing Information
Under UK GDPR, we rely on different lawful bases depending on why information is collected and how it is used.
Contractual Necessity
Where processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract.
For example, arranging training, delivering services or processing purchases.
Legal Obligations
Where we must process information to comply with legal or regulatory requirements.
This may include tax, accounting and other statutory obligations.
Legitimate Interests
Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
This may include responding to business enquiries, maintaining customer relationships, preventing fraud, improving our services and protecting our systems.
Consent
Where you have given permission for a specific purpose, such as certain marketing communications or non-essential website cookies.
You can withdraw consent at any time.
Special Category Information
Where we process medical or other special category information, we will identify both a lawful basis under Article 6 and a separate condition under Article 9 of UK GDPR.
Where we rely on explicit consent, we will explain the purpose of collection and allow consent to be withdrawn.
We will not assume that providing medical information automatically constitutes valid consent.
7. Training, Attendance and Certification Records
As a provider of specialist medical, mental trauma, emergency response and related training, MMTS maintains records relating to course participation where necessary.
These records may include:
Delegate names
Course titles and dates
Attendance records
Assessment outcomes
Qualifications and certificates
Certificate reference numbers
Relevant training history
We use these records to administer training, issue or verify certificates, support refresher training and meet applicable certification requirements.
Where training is arranged by an employer or organisation, relevant attendance or certification information may be shared with that organisation where lawful and appropriate.
We may also share necessary information with awarding bodies, certification organisations or training partners.
Training records may be retained for longer than our standard retention period where justified by refresher requirements, certificate validity, awarding body rules or other legitimate purposes.
8. Marketing Communications
We may send information about MMTS training courses, services, products, events, company updates and educational resources.
We will only send electronic marketing communications where permitted by UK data protection and electronic marketing legislation.
Where consent is required, we will obtain it before sending marketing communications.
Where applicable, we may rely on an exemption permitted by law, such as the soft opt-in for eligible existing customer communications.
You can unsubscribe from marketing emails at any time by following the instructions in the message or contacting info@mmtsglobal.co.uk.
Opting out of marketing does not prevent us from sending necessary communications about your orders, training or existing services.
9. Sharing Your Information
We do not sell your personal information.
Where necessary, we may share relevant information with trusted third parties, including:
Training instructors and delivery partners
Awarding and certification bodies
Stripe, for online payment processing
Banks and payment service providers
Google, where relevant to website analytics and other services
Website hosting and IT support providers
Email and communication service providers
Delivery and fulfilment companies
Professional advisers, including accountants and solicitors
Regulatory authorities or law enforcement agencies where legally required
We only share information where necessary and where there is an appropriate legal basis.
Where third parties process personal information on our behalf, we use appropriate contractual and security arrangements.
Some third parties, such as payment providers, may also act as independent data controllers for particular processing activities.
10. International Data Transfers
MMTS may provide services internationally, and some of our technology providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that appropriate safeguards are in place where required by law.
These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or other permitted transfer mechanisms.
You can contact us for further information about safeguards applicable to your personal information.
11. How We Protect Your Information
We take reasonable and appropriate steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Depending on the information and systems involved, these measures may include:
Secure website connections
Password-protected accounts and systems
Access restricted to authorised individuals
Secure storage arrangements
Software and security updates
Appropriate administrative procedures
Security arrangements with third-party providers
Medical and accessibility information is handled with additional care, with access limited to individuals who need the information for an appropriate purpose.
Although we take steps to protect information, no electronic storage or transmission method can be guaranteed to be completely secure.
12. How Long We Keep Your Information
Our standard retention period for general personal information is 12 months, unless there is a legitimate reason or legal requirement to retain it for longer.
Different types of information may be retained for different periods.
General Enquiries
Information relating to general enquiries and correspondence is normally retained for up to 12 months after the last relevant interaction, unless it is needed for an ongoing business relationship or another lawful purpose.
Training and Certification Records
Training and certification records may be retained for longer than 12 months where necessary to support refresher training, verify qualifications, comply with awarding body requirements or meet other justified obligations.
We review the continued need to retain these records and do not keep them indefinitely without a valid reason.
Financial and Transaction Records
Financial, accounting and transaction records may be retained for longer periods where required by applicable tax, accounting or other legal obligations.
Medical and Accessibility Information
Medical and accessibility information is retained only for as long as necessary for the relevant purpose, subject to any applicable legal or regulatory requirements.
Where the information is no longer needed, it will be securely deleted or anonymised as appropriate.
Marketing Information
Marketing information is retained while there is a valid basis for using it. If you unsubscribe, we may retain limited information on a suppression list to ensure we respect your preferences.
When information reaches the end of its applicable retention period, we will securely delete, anonymise or otherwise dispose of it.
13. Cookies and Google Analytics
Our website uses cookies and similar technologies to support website functionality and understand how visitors interact with our content.
We use Google Analytics where enabled to help us understand website traffic, visitor behaviour and website performance.
Analytics information may include pages visited, approximate location, device information, traffic sources and interactions with our website.
Non-essential analytics cookies will only be used where the necessary consent has been obtained.
Our website may also use cookies associated with essential website functions, security, payments and other services.
Visitors can manage their cookie preferences through the consent controls provided on our website.
Further information is available in our separate Cookie Policy.
14. Your Data Protection Rights
Under UK GDPR, you have certain rights regarding your personal information.
These may include:
Right of access: You can request access to personal information we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete information.
Right to erasure: You can request deletion of your information in certain circumstances.
Right to restrict processing: You can ask us to restrict how we process your information in certain circumstances.
Right to object: You can object to certain processing activities, including direct marketing.
Right to data portability: You may request certain information in a structured, commonly used and machine-readable format.
Right to withdraw consent: Where processing relies on consent, you can withdraw it at any time.
You also have rights relating to certain decisions made solely through automated processing, including profiling, where applicable.
These rights are subject to applicable legal conditions and exemptions.
To exercise your rights, email info@mmtsglobal.co.uk.
We will respond within the timescales required by law, normally within one calendar month of receiving a valid request, subject to permitted extensions.
15. Third-Party Websites
Our website may contain links to websites operated by third parties.
These websites may have their own privacy policies and data protection practices.
We are not responsible for how independent third-party websites collect or process personal information.
We recommend reviewing their privacy policies before providing personal information.
16. Children’s Personal Information
Our website and services are primarily intended for adults, businesses and professional organisations.
Some training activities may involve individuals under the age of 18.
Where we collect or process children’s personal information, we will take appropriate steps to ensure it is handled lawfully and with suitable safeguards.
Where required, we will obtain appropriate consent or other authorisation.
17. Complaints
If you have concerns about how MMTS handles your personal information, please contact us at info@mmtsglobal.co.uk.
We will investigate your concerns and respond appropriately.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
You do not need to contact us before raising a complaint with the ICO.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website, business operations or applicable legislation.
Any changes will be published on this page, and the last updated date will be amended.
We encourage visitors to review this policy periodically.
19. Contact Us
For questions about this Privacy Policy, requests relating to your personal information or concerns about how your data is handled, please contact:
Medical and Mental Trauma Services (MMTS)
A trading name of Henshaws Ltd
Company number: 16664842
Registered office: 25 Culloden Way, Wokingham, England, RG41 3UN
Email: info@mmtsglobal.co.uk
Website: https://mmtsglobal.co.uk