This privacy notice provides an overview on how we use your personal data. We believe it is very important to respect the privacy of individuals, and to make only safe and ethical use of the information that is provided.
What is covered:
- What personal data do we collect?
- Why do we collect your personal data?
- How do we protect your personal data?
- Your rights
- Who will have access to your personal data?
- Data protection office
What personal data do we collect?
Personal data is defined as information which directly or indirectly identifies an individual.
Why do we collect your personal data?
The reason we collect personal data changes depending on the activity we need it for .
We collect personal data to comply with our legal obligations e.g. providing information to regulators, law enforcement and statutory bodies.
We collect personal data when you want to enter a contract with CCAB.
Responding to general CCAB enquiries, supporting members and students.
We process personal data where you have given consent for us to do so. CCAB membership, training, events, and marketing.
How do we protect your personal data?
CCAB has implemented stringent information security and personal data protection policies. Employees who come into contact with your personal data have obligations to adhere to our policies, and are regularly trained in security and privacy best practice.
We apply appropriate technical and organisational measures in order to protect data, computing devices and the network from accidental / malicious activities or theft. Where appropriate, we encrypt our data and devices with confidential information securely destroyed when no longer required.
Our offices are protected 24×7, with physical access via swipe cards and / or staffed receptions. Additional security measures are in place limiting access to our data centres.
Data protection laws give you a number of rights with respect to how organisations process your personal data.
Right to be Informed
You have the right to be informed of the use that your personal data will be put to, along with details of the Data Controller and your rights.
Where you provide your personal data directly to CCAB these details will be made available at the time your data is obtained.
Where CCAB obtains your personal data from a third party, these details will be made available within a reasonable period of having obtained the data. If your personal data is to be used to communicate with you, these details will be provided at the latest, when the first communication takes place. If disclosure to another recipient is envisaged, these details will be provided at the latest, before the data is disclosed. In all cases, notification will take place, within one month of receipt of your personal data.
Right to Access
You have the right to access and obtain a copy of your personal data held and processed by CCAB, on request.
CCAB exercise a number of exemptions:
- Employment references.
- Contract negotiations.
- Ongoing investigations into professional conduct were it would prejudice the outcome.
You exercise this right through the submission of a formal, written Subject Access Request to the CCAB Data Protection Office email: firstname.lastname@example.org or
Data Protection Office
321 Avebury Boulevard
Right to Rectification
You have the right to request CCAB to correct inaccurate or incomplete personal data.
Right to Erasure (to be Forgotten)
You have the right to request CCAB to erase your personal data from its systems and records. This is not an absolute right however, and does not normally apply to purposes covered by Legal Obligation or which is necessary for the performance of a Contract.
Right to Restrict Processing
You have the right to request CCAB to stop or restrict the processing of your personal data. This could be for example, if your personal data is no longer necessary for purpose of processing.
Right to data portability
You have the right to request a copy, in a portable format, of the personal data which you have provided directly to CCAB and which is automatically processed.
Right to object
You have the right to object to the processing of your personal data, where CCAB relies upon Legitimate Interest as the lawful basis for processing.
Rights related to automated decision making including profiling
You have the right not to be subject to a decision based solely on automated processing (including profiling), which may significantly affect yourself.
If you are unhappy with how your personal data is processed by CCAB, you have the right to complain to the Data Protection Office. If you remain unhappy, following CCAB’s response to your complaint, you have the right to lodge a further compliant with our Supervisory Authority, The Information Commissioners Office (ICO).
The ICO’s address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Cheshire, SK9 5AF. You can also contact them by telephone on +44 (0)1625 545 745 or via their website at www.ico.org.uk.
Who will have access to your personal data?
- CCAB staff with particular access to administer CCAB Network Member logo license agreements, and online and offline CCAB events and activities.
- Processors – We will share your personal data with third party processors who provide services to CCAB these include: Website content and hosting providers including analytics.
- Separate controllers – CCAB may share your personal data with member bodies to validate your entitlement to use the CCAB Network Member logo, participation in, engagement with or registration for online and offline CCAB events and activities.
Data protection office
Although CCAB Ltd (Company Number: 1864508) and its website are organised independently, the company is a subsidiary of The Institute of Chartered Accountants in England and Wales (ICAEW) and, as such, CCAB is subject to ICAEW’s data protection policy..
The data protection office has been established to ensure CCAB’s compliance with data protection laws.
Data Protection Office
321 Avebury Boulevard
T:+44(0)1908 248 250
Cookies are used on this site. Cookies allow us to measure and analyse general visitor information and can also be used to personalise your web experience.
Most web browsers automatically accept cookies but you can alter your settings so that you are prompted every time a cookie is sent to you. You can choose not to receive cookies at all. If you have ‘disabled’ cookies in your browser this way you may not be able to use certain features on this website.
Independent information about cookies is available at allaboutcookies.org.
If you would like to disable “third party” cookies generated by advertisers or providers of targeted advertising services, you can turn them off by going to the third party’s website and getting them to generate a one-time “no thanks” cookie that will stop any further cookies being written to your machine.