Information about how TRL Group Training Centre operates this website and handles your information.
Last updated: 8 October 2026
TRL Group Training Centre (“TRL”, “we”, “us” or “our”) is a trading name of TRL Group Co. W.L.L., a company registered in the Kingdom of Bahrain under commercial registration number 179060-1, whose address is Shop 04, Building 2118, Road 1529, Block 115, BIW Hidd, Kingdom of Bahrain.
For the purposes of Law No. (30) of 2018 with respect to Personal Data Protection of the Kingdom of Bahrain (the “PDPL”), we are the data manager (also known as the data controller) of the personal data described in this policy. This means we decide how and why your personal data is used.
This policy explains what personal data we collect, how we use it, who we share it with and the rights you have. It applies to visitors to our website, people who contact us, learners who train with us, candidates for our workforce provision service, and contacts at our clients and suppliers.
| Category | Examples | Where it comes from |
|---|---|---|
| Enquiry and contact details | Name, company, email address, phone number, the type of enquiry, the content of your message and our correspondence with you | You, through our contact form or email |
| Learner and enrolment details | Full name as shown on your identity document, date of birth, nationality, CPR or passport number, photograph, employer, job role, contact details, prerequisite certificates, attendance, assessment results and certificate details | You, or the employer that books your place |
| Workforce candidate details | CV, employment history, qualifications and certificates, visa and right-to-work information, passport details, references and availability | You, your referees, previous employers or recruitment partners |
| Health and fitness information | Medical fitness declarations where a course or deployment requires them, for example for confined space rescue will be collected using our course declaration form | You |
| Client and supplier details | Names, job titles, business contact details, contract and billing information | You or your organisation |
| Payment records | Invoices, payment references and amounts for training and services | You or your organisation |
| Website usage information | IP address, device and browser type, pages visited, the site you came from and approximate location | Cookies and similar technologies, only where you consent. See the Cookie Policy |
We only use personal data where the PDPL allows us to. The table below sets out each purpose and the lawful basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and preparing a quotation | Taking steps at your request before entering into a contract; our legitimate interest in responding to business enquiries |
| Enrolling you on a course, delivering the training and assessing your competence | Performing our contract with you or with your employer |
| Registering learners with ECITB and issuing certificates | Performing our contract; complying with our obligations as an ECITB Licensed Provider |
| Confirming whether a certificate is genuine when an employer asks us | Our legitimate interest, and that of employers, in preventing certificate fraud |
| Assessing workforce candidates, sharing profiles with clients and arranging mobilisation | Your consent; taking steps at your request before entering into a contract; performing that contract |
| Checking medical fitness where a course or role requires it | Your explicit consent |
| Invoicing, accounting and VAT | Complying with our legal obligations |
| Measuring and improving how our website performs | Your consent, given through our cookie banner |
| Sending news about courses and services | Your consent. For existing clients, our legitimate interest in telling you about similar services. You can opt out at any time |
| Keeping our systems secure, preventing fraud and dealing with legal claims | Our legitimate interests; complying with our legal obligations |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms, and concluded they are not. You can ask us for more detail.
Health information is sensitive personal data under the PDPL. We only collect it where a course or deployment genuinely requires it, we ask for your explicit consent first, and access is limited to the staff who need it to keep you and others safe. We do not ask for information about race, ethnic origin, religious or philosophical beliefs, political views, trade union membership or sexual life.
We share personal data only where it is necessary for the purposes above.
We do not sell personal data.
Some of the organisations we share data with are based outside the Kingdom of Bahrain, including ECITB in the United Kingdom and our website hosting and analytics providers, which may store data in the United States and other countries. We only transfer personal data outside Bahrain in the circumstances the PDPL permits, and we require recipients to protect it to an appropriate standard.
| Type of record | Retention period |
|---|---|
| Enquiries that do not lead to a booking | 12 months from our last contact with you |
| Learner records, assessment evidence and certificate details | 12 months after the course ends, or longer if ECITB requires it, so that certificates can be verified |
| Workforce candidate records | 24 months from our last contact with you, unless you ask us to delete them sooner |
| Contracts, invoices and accounting records | For the period required by Bahrain commercial and VAT law |
| Website analytics data | 14 months |
When the retention period ends, we delete personal data or anonymise it so it can no longer identify you.
We use technical and organisational measures appropriate to the risk, including encrypted connections to our website, access controls so that staff see only the records they need, confidentiality obligations on staff and suppliers, and regular review of who holds access. If a security incident affects your personal data, we will notify you and the Authority where the law requires us to.
Under the PDPL you have the right to:
To exercise any of these rights, email enquiries@trlgroup-global.com or write to us at the address above. We may ask you to confirm your identity first. We will respond within the time limits set by the PDPL.
If you are in Saudi Arabia or the United Arab Emirates, you may also have rights under the personal data protection laws of those countries, and we will respect them where they apply.
Our services are intended for adults of working age. We do not knowingly collect personal data from anyone under 18.
Our website links to other websites. Those websites have their own privacy policies and we are not responsible for how they handle your data.
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.
TRL Group Co. W.L.L., trading as TRL Group Training Centre
Shop 04, Building 2118, Road 1529, Block 115, BIW Hidd, Kingdom of Bahrain
Email: enquiries@trlgroup-global.com
Data protection contact: HR Manager
Contact our team and we will help.
