Last modified:
18 April 2023
UKCISA privacy policy
We take your right to privacy very seriously and respect any personal information you share with us and endeavour to keep it safe, whatever your relationship is with us. This privacy policy is intended to give you an understanding of how and why we use the information that you give us.
We will never sell or share your data with someone else for them to use for their own purposes.
We keep this policy under review and any updated changes will be published here. This policy was last updated on 17 May 2018.
UKCISA is a company registered in England and Wales with company number 4507287 and a charity registered in England and Wales with charity number 1095294, whose registered office is Woburn House, 20-24 Tavistock Square, London, WC1H 9HQ.
When you join us, use our website and social media channels or provide us with your information you are consenting to this privacy policy and the ways in which we use your information as outlined in this policy. If you do not agree with this policy, then please do not provide us with your information or continue using our sites and social media channels.
Personal data is defined as “any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
UKCISA is a membership organisation and, therefore, the majority of the personal data we hold has been specifically provided to us by representatives of our member institutions or by students who subscribe to our newsletter or attend our events.
The definition of personal data is quite broad so we’ve listed below the main types of data we specifically collect.
We collect data about our primary contacts. This includes full name, job title, organisation postal address, organisation email address and organisation telephone number. We also collect this data from those who have access to member-only areas of our website.
We keep records of correspondence with members relating to the membership services we provide or any specific queries.
We hold data about those attending our training courses and conferences. This will also include the same details as above, but in addition we record which training courses were attended and by whom. We also collect information about disability access and dietary requirements if this has been specifically given to us to use as part of administering the training course.
We hold details of the calls received to our member’s advice line including the caller’s name and organisation. We also record the content of the call including the advice that was given. For our non-members advice line we do not record the caller’s name and organisation unless specifically requested to do so.
We hold the work email addresses of subscribers to our member’s e-newsletter. For the student’s e-newsletter, we hold personal email addresses.
We keep details of your visit to the website (for example, cookies).
Whilst we will seek consent at the point of collecting your data, in some cases we may process data without consent when we are legally allowed to do so and where it is in our legitimate interests. This is provided we respect your rights.
You can withdraw your consent at any time. If at any time you do not wish to receive further information about us and our services, or you wish to change your contact details or preferences, contact us communications@ukcisa.org.uk or call 020 7288 4330.
If you request to receive no further contact from us, we will keep some basic contact information in order to avoid sending you unwanted materials in the future, and to ensure that we do not accidentally store details for the same person multiple times.
We will only keep your information for as long as we need it to provide you with the services or information you have required, to administer your relationship with us, to comply with the law, or to ensure we do not communicate with people that have asked us not to. When we no longer need this information we will dispose of it securely.
The data that we collect about you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by persons operating outside the EEA. If we do send your personal data outside the EEA we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your information. By submitting your details you agree to this transfer.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. (SSL stands for ‘Secure Sockets Layer. SSL create encrypted connections)
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We understand that privacy and data are sensitive and important. You have a number of rights in relation to your data and these are;
- The right to be informed
- this privacy policy details how and why we collect, store and use your personal data
- The right of access
- You have the right to access the data and information we hold about you. Please see below for details on how to request this information
- The right to rectification
- We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate by contacting us using the contact details below
- The right to erasure
- You can request that we delete the information we hold on you. If this is because you no longer want to hear from us then we will keep some basic contact information to ensure we don’t contact you again in the future. If we completely erase your records then we wouldn’t be able to ensure we don’t contact you again in the future.
- The right to restrict processing
- You can let us know how you want us to use your data and this is one of the reasons we operate an opt-in communication model so you can choose how and what we contact you about
- The right to data portability
- You have the right to request your data be provided in an easy to use format to another supplier
- The right to object
- You can opt out of hearing from us at any point by contacting us using the details below
- Rights in relation to automated decision making and profiling.
You have a right to access the personal information we hold about you and in certain circumstances to be provided with a copy of that information (this is know as a subject access request). You can request this by email to communications@ukcisa.org.uk or by writing to us at:
Data Request, UKCISA, Woburn House, 20-24 Tavistock Square, London, WC1H 9HQ
If you are unhappy with the way in which your personal data has been handled you are entitled to make a complaint to the Information Commissioner’s Office.
Use of Cookies
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google").
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
