Privacy and Cookies Policy

Effective Date: January 2024

Welcome to the CPD NSA Privacy and Cookies Policy ("Privacy Policy"). CPD NSA is committed to respecting and protecting your personal data. This Privacy Policy outlines how we handle your personal data when you visit our website and informs you of your privacy rights and how the law protects you.

1. Important Information and Who We Are

Purpose of this Privacy Policy
This Privacy Policy explains how CPD NSA collects and processes your personal data, including any information you provide via our website (https://cpdnsa.org.uk) when you purchase our certification services, register as a member, or contact us. This website is not intended for children, and we do not knowingly collect data relating to children.

It is important to read this Privacy Policy alongside any other privacy or fair processing policy we may provide on specific occasions when collecting or processing personal data about you. This Privacy Policy supplements other notices and privacy policies and does not override them.

Controller
CPD NSA is the controller responsible for your personal data (referred to as "we," "us," or "our" in this Privacy Policy).

We have appointed a data privacy manager to oversee questions related to this Privacy Policy. If you have any queries or requests regarding your legal rights, please contact the data privacy manager at info@cpdnsa.org.uk.

Changes to the Privacy Policy and Your Duty to Inform Us of Changes.

We regularly review our Privacy Policy and may update it periodically. Any changes will be posted on our website. We recommend checking this page from time to time to stay informed of any updates. The version of this Privacy Policy was last updated on the Effective Date listed above.

It is important that the personal data we hold about you is accurate and up-to-date. Please inform us of any changes to your personal data during your relationship with us.

Third-Party Websites and Links
Our website may contain links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies or practices. We encourage you to read the privacy policy of every website you visit.

2. The Data We Collect About You

Personal Data
Personal data refers to any information about an individual from which they can be identified. It does not include anonymous data (where the identity has been removed).

We may collect, use, store, transfer, and process different kinds of personal data about you, which we have grouped as follows:

Identity Data: Includes first name, last name, username, marital status, title, date of birth, and gender.
Contact Data: Includes billing address, delivery address, postal address, email address, and telephone numbers.
Financial Data: Includes payment card details.
Technical Data: Includes IP address, login data, browser type and version, time zone setting, language preference, and other technology on the devices you use to access our website.
Profile Data: Includes username, password, purchases, preferences, and feedback.
Usage Data: Includes information on how you use our website, products, and services.
Marketing and Communications Data: Includes your preferences in receiving marketing materials and communication preferences.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. This data is not considered personal data in law, as it does not directly or indirectly reveal your identity.

We do not collect Special Categories of Personal Data or information about criminal convictions and offences.

Failure to Provide Personal Data
If you do not provide personal data when required by law or under a contract with us, we may not be able to perform the contract and may need to cancel the product or service you have with us. We will notify you if this is the case.

3. How Your Personal Data is Collected

We use various methods to collect data from and about you, including:

Direct Interactions: You may provide personal data by filling in forms on our website, corresponding with us by post, phone, email, or otherwise.
Automated Technologies or Interactions: As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions using cookies and other similar technologies.
Third Parties or Publicly Available Sources: We receive personal data from analytics providers, payment and delivery services, and publicly available sources such as Companies House and the Electoral Register.

4. How We Use Your Personal Data

We will only use your personal data when permitted by law. Most commonly, we will use your personal data in the following circumstances:

Contractual Necessity: Where we need to perform the contract we are about to enter or have entered with you.
Legitimate Interests: Where it is necessary for our legitimate interests and your rights do not override those interests.
Legal Obligation: Where we need to comply with a legal obligation.
Consent: Where you have given specific consent for us to use your personal data in a particular way. You have the right to withdraw consent at any time.

Purposes for Which We Will Use Your Personal Data
We may process your personal data for more than one lawful ground depending on the purpose for which we are using your data. If you need details about the specific legal ground we rely on, please contact us.

Third-Party Marketing
We will obtain your explicit opt-in consent before sharing your personal data with any third party for marketing purposes.

Opting Out
You can opt out of marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at privacy@cpdnsa.org.uk.

5. Cookies

When you visit our website, we may collect basic information such as your internet service provider’s domain name, pages accessed on our website, and when. We use cookies, which are small files saved to your device when you use our website. Cookies help us improve your experience and our website’s functionality.

Managing and Disabling Cookies
You can manage cookies by selecting the appropriate settings in your internet browser. However, blocking or restricting cookies may impair the functionality of our website. For more information on the cookies we use, please see the Cookies section on our website.

6. Disclosures of Your Personal Data

We may share your personal data with the following third parties:

Service Providers: To provide IT, system administration, and business support services.
Professional Advisers: Including lawyers, bankers, auditors, and insurers.
Enforcement Companies: When necessary to comply with the law or enforce our rights.
Third Parties: In the event of a business sale, transfer, or merger.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7. Data Security

We have implemented security measures to prevent your personal data from being accidentally lost, used, or accessed without authorisation. Only employees, agents, contractors, and third parties with a business need will have access to your personal data. They are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where required.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, regulatory, tax, accounting, or reporting requirements. In some circumstances, you can request the deletion of your data. See the “Your Legal Rights” section below for more information.

9. Your Legal Rights

You have rights under data protection laws concerning your personal data, including the right to access, correct, or erase your personal data, restrict its processing, object to its processing, and request data portability.

To exercise any of these rights, contact us at info@cpdnsa.org.uk.

10. International Transfers

We may transfer your personal data outside the UK and/or EEA. Whenever we transfer your personal data, we ensure a similar level of protection by implementing appropriate safeguards.

11. Contact Information

To verify a Provider or Certificate, or for any other inquiries, please contact us at info@cpdnsa.org.uk.