How long we keep your information for

We only keep your information for so long as is reasonably necessary. Generally speaking, we keep your personal information for the following periods of time:

• General enquiries – 2 years from when we resolve your enquiry, unless it results in us entering into a contract with you or your organisation, in which case the below time period applies instead.

• Members - the duration of your membership plus 7 years.

• Customers and staff of customers - the duration of the customer contract plus 7 years.

• Suppliers and staff of suppliers - the duration of the supplier contract plus 7 years.

 

Who is your information shared with?

We share your personal information with third parties only where we are required to do so to comply with the law, to protect our rights, to perform our contractual obligations or to efficiently operate our business. In order to achieve these purposes, we share your data with the following people or group of people:

• If you are an employee or representative of a customer or supplier of ours then we may share your information with your employer and colleagues for the purpose of managing the business relationship between your organisation and us.

• Our outsourced service providers. These organisations have strict contractual obligations to handle your information in accordance with data protection law and to keep it confidential at all times.

• Our professional advisers (including accountants and lawyers). These people are subject to professional duties of confidentiality.

• Potential acquirers of our organisation may be given access to redacted information about our members, suppliers and their staff/representatives. Before we share this information the potential purchaser would need to sign a non-disclosure agreement which protects your personal information.

 

If the recipient of your information is based outside of the UK and is not based in a country which offers equivalent protections for personal data then your data will be safeguarded by an International Data Transfer Agreement or equivalent terms.

 

Your rights

Under UK data protection law you have the following rights:

• The right to be informed about what we do with your information. This Policy provides you with this information.

• If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by and notifying us using the details set out at the start of this policy.

• The right to access a copy of your information which we hold. This is called a ‘data subject access request’. Additional details on how to exercise this right are set out in the ‘Access to Information’ section below.

• The right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing.

• The right to object to us processing your personal information in certain other situations.

• The right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate.

• The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.

• The right, in certain circumstances, to request that we erase, rectify, cease processing and/or delete your information.

 

You have the general right to complain to us in the first instance if you are not happy with how we are processing your personal information. If you would like to complaint, please contact us using the details set out at the start of this Policy. If you are not satisfied by our response then you can complain to the Information Commissioner’s Office (ICO) via www.ico.org.uk.

 

Access to information

Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information we hold on you. You must send us proof of your identity, or proof of authority if making the request on behalf of someone else, before we can supply the information to you. Requests should be sent to us using the contact details set out at the start of this policy.

You do not need to pay a fee to exercise this right unless you are requesting copies of documents you already possess, in which case we may charge our reasonable administrative costs. We are also allowed to charge you for our reasonable administrative costs in collating and providing you with details of the requested information which we hold about you if your request is clearly unfounded or excessive. In very limited circumstances, we are entitled to refuse to comply with your request if it is particularly onerous.

In certain circumstances, you are entitled to receive the information in a structured, commonly used and machine-readable form.

 

Cookies

For information about how we use cookies on our website, please refer to our Cookies Policy at: 

 

Changes to this Policy

This Policy was last updated on 15th April 2024.