CORGI Technical Services Limited and The Association of Safety and Compliance Professionals

Privacy Policy

CORGI Technical Services and the Association of Safety and Compliance Professionals is committed to protecting your privacy in everything we do and ensuring that you are always clear on how your personal information is used. We understand that your privacy and the security of your personal information is extremely important. We are committed to protecting your privacy when you provide your details for our services, attend an event or training, or interact with us in any way.

This Privacy Policy explains what personal information we collect, what we do with it, our legal basis for processing and how we secure your information. We will also explain your rights in relation to the personal information we hold about you and how you can exercise your rights or register a complaint.

CORGI Technical Services Limited is the data controller. Our registration number with the Information Commissioner’s Office is Z213595X.

Contact details: CORGI Technical Services Ltd, First Floor 11 Campbell Court, Bramley, Tadley, Hampshire, RG26 5EG

Telephone: 01256 548040

Email: PrivacyCorgi@corgitechnical.com

Personal information we collect:

We collect information we require to provide our auditing, training, investigation, accreditation, consultancy, membership, witness and other services.

Members

We currently collect and process the following personal information to provide our membership services: name and surname, address (physical/postal), telephone number, email address, registration numbers with regulatory and accreditation bodies, bank account details, date of birth, notes relating due diligence and VAT information.

Training and Compliance Services

We currently process the following personal information if you use our training or compliance services: name and surname, address (physical/postal), telephone number, email address, date of birth, training notes and qualification certificates.

Vendors

We currently process the following personal information of vendors who provide services to us: name and surname, address (physical/postal), telephone number, email address, bank and payment details, details of products and services that you provide to us.

Consultancy Clients

We currently process the following personal information if you use our consultancy services: name and surname, address (physical/postal), telephone number, email address, consultancy and investigation notes.

You are under no obligation to provide any information but if you do not, then it might be impossible for us to provide our services. In some instances, we have legal obligation to collect information.

Auditors and Contractors

We currently collect and process the following personal information of 3rd party auditors and contractors working for us as well as for applicants who wish to provide these services to us: name and surname, address

(physical/postal), telephone number, email address, driver’s licence or passport if we require proof of identity, registration numbers and qualifications – as well as proof of these – with regulatory and accreditation bodies, bank account details, date of birth, notes relating due diligence and audits, VAT and PAYE records.

How we obtain and use personal information:

Most of the personal information we process was provided directly by you for one of the following reasons:

  • You used our services or became a member.
  • To respond to enquiries, correspondence or contact requests.
  • You attended our training or other events.
  • You agreed to receive marketing communications from us.
  • You are providing contracted services to us as a vendor.

In some instances, your information was provided to us to by other service providers in order that we can provide our services to you.

Legal basis for processing personal information:

As a company we provide different services and our legal basis for collecting and using the personal information described in this Privacy Policy will depend on the type of personal information and the specific context in which we collect and use it.

We will normally collect and process your personal information only when you have given your consent or when we are providing our services as part of our contractual obligations. In some cases, the processing of your personal information may be based on our legitimate interest as a company such as informing you of our events and training offers but not when overridden by your data protection interests or fundamental rights and freedoms. We carry out balancing and necessity tests to ensure that your rights are protected when we rely on our legitimate interest as a business for processing. We may also have a legal obligation to collect personal information to meet our obligations to comply with financial, legal and regulatory requirements. We always process personal data legally as required by law.

What we do with the information:

We use personal information in the following ways as part of our business operations:

  • To provide our contracted services.
  • To promote our company and services.
  • To contact you following your enquiry or to reply to questions.
  • To deal with complaints.
  • To provide information required by law.
  • To provide specific benefit services.

Sharing of Information:

In most cases the sharing of your information will be related to the contracted services we provide to you. When you attend events, we share you information with sponsors with your agreement.

We also share data within our Group of companies for analytic and other purposes related to the provision of our services and with professional advisors. In some cases, we are required to share information with regulatory authorities to comply with our obligations.

Data Transfers:

We use processors who are based within and outside of the United Kingdom. When we are required to transfer data outside of the United Kingdom, we ensure that appropriate safeguards such as standard contractual clauses, adequacy or other transfer safeguarding measures are used and that you are aware of this transfer.

How we store your information:

We have put in place appropriate organisational and technical measures to meet our legal obligation to ensure the security of your personal information. We use industry standard security and firewalls. We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your information. We keep personal information for only as long as necessary for our business purposes and to meet our legal and contractual obligations. In most cases, our retention period will come to an end when we no longer require your information and is deleted six years after your relationship with us ends. In some instances, we are required to retain data for longer to meet regulatory and legal requirements. We dispose of information by deleting it from all our systems and securely disposing of paper files. Please email PrivacyCorgi@corgitechnical.com to obtain more information about our retention periods.

Cookie Notice:

We use cookies on our website to enhance your browsing experience and to generally ensure the efficient running of the website. Cookies are small files normally consisting of letters and numbers which store information on the user’s device. They are used in numerous ways, such as to analyse visitor traffic to our website through Google Analytics and to help the website load faster. We also have links on our website to our social media sites. Some of the cookies on our website are classified as non-essential cookies which you can decline. Personal information we collect when you visit our website includes information about your device and IP address.

Cookie Settings

Your data protection rights:

Under data protection law, you have individual rights pertaining to your personal information, including:

  • Your right of access – You have the right to ask us for copies of your personal information we hold.
  • Your right to rectification – You have the right to ask us to correct information you think is inaccurate or complete information you think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances. We maintain a retention policy and will inform you if we are not able to delete your information immediately.
  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
  • Rights in relation to automated decision making and profiling.

You do not need to pay a fee for exercising your rights. If you make a request, we are required to respond to you within one month unless there are reasons why it will take longer to collect the information you requested. If that is the case, we will inform you. In some cases, we will require you to provide proof of your identity if we are unable to confirm your identity through other information we hold about you. This is required to ensure the security of the personal information we hold and to meet our legal obligations. Please email PrivacyCorgi@corgitechnical.com if you want to exercise any of your rights.

How to complain:

In the first instance please send complaints to: PrivacyCorgi@corgitechnical.com

You can also write to: Data Protection Officer, CORGI Technical Services Ltd, First Floor 11 Campbell Court, Bramley, Tadley, Hampshire, RG26 5EG

If you are not happy with the response you receive, you can send your complaint to the Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113, www.ico.org.uk

Changes to our policies may result in periodic changes to this Privacy Notice. We recommend that you check back regularly but we will notify you of any changes through our website. The date released will always be listed below.

Last updated: January 2023

Close

Close