Privacy Policy
The British Accreditation Council is committed to good governance and transparency. This policy sets out what we do with your information when we collect it, why we collect it and how we dispose of it.
Introduction
In May 2018 the European General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) came into force. The regulations strengthened individual’s rights over how their personal data is used.
The BAC Data Protection Officer (DPO)
The BAC Data Protection Officer is BAC’s CEO, who is responsible for ensuring that the GDPR and DPA regulations are fully complied with. They are also the first point of contact should you wish to know what information we hold on you. The CEO can be contacted via email:
What Are Your Rights?
If we have collected any of your personal data, then you have a number of rights. These are:
• To have confirmation of what data we hold on you and what we do with that data
• To have a copy of the data we hold provided to you free of charge
• The right to correct the information we hold on you if it is factually incorrect
• The right to object to us using your information
• Under certain circumstances you have the right to have your data erased and to tell BAC to cease further dissemination of your data to third parties
• You also have the right for your data to be transferred to another organisation in an electronic format
When do we have to ask you for the right to collect your personal data?
If we collect Special Category Data, we might need to ask your permission. Special category data includes any data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
BAC has no need to collect this information for any of its activities and will not collect this information under any circumstances.
We will only collect data for:
• Employment purposes; we will collect information necessary to comply with our legal obligations on our employees and associates
• For the purposes of legal compliance and for payment of expenses, information on our trustees and committee members
• In order for us to provide quality assurance and accreditation activities for your organisation
• The dissemination of BAC news
• Contacting you to follow up on an enquiry you have made to us
What we don’t do with your data
• We will not use your data for automated decision making
• We will not use your data for profiling purposes
• We will never sell your data
• We will not share your data for any other purpose than that described above
Why do we collect your data and what do we do with it?
BAC collects data for a number of reasons and the best way for us to explain why we collect the data and what we do with it is to address category of data collection separately.
| Category | Employees |
|---|---|
| What data do we collect? | We collect the data we need to verify who you say you are, to confirm the qualifications you have on your CV are correct and collect all the information we require to register you for payroll, taxation and pension arrangements and to pay you your salary. We will also keep records of your contractual arrangements and any other employment documents that we are required to keep or need for us to comply with employment legislation |
| Do we share your data with anyone outside of BAC? | We outsource our payroll to a third party. They will have access to your name, National Insurance Number, your tax code and salary and pension arrangements. They need this to pay you and to make sure your tax and pension payments are made correctly. We also share your name and bank account details with our bank, so they can transfer money to your bank account. Finally, we share your name and other basic information with NEST, our pension provider, so they can set up your pension account and contact you |
| What is the legal basis for keeping my data? | We keep your data to comply with employment legislation and to make sure that we can pay you |
| What would happen if I refused to give you this data? | In this case we would not be able to comply with employment legislation or pay you. This means we would not be able to employ you. |
| Who has access to my records? | Once you have been employed, only the CEO and Governance and Business Development Manager have full access to your records. |
| How long will my records be kept for once I leave BAC? | 6 years |
| Category | Inspectors and Consultants |
|---|---|
| What data do we collect? | We collect the data we need to verify who you say you are, to confirm the qualifications you have on your CV are correct and collect all the information we require to register you for payment. We will also keep records of your contractual arrangements and any other documents that we are required to keep, or we need for us to comply with taxation arrangements. |
| Do we share your data with anyone outside of BAC? | We share your name and contact details with the providers you will be inspecting or consulting for and with our bank so they can transfer money to your bank. We may, but only with your explicit consent, forward your CV to organisations requesting consultancy support |
| What is the legal basis for keeping my data? | We keep your data to comply with contractual needs, to ensure that we select you for appropriate inspections and to make sure that we can pay you |
| What would happen if I refused to give you this data? | In this case we would not be able to use your services |
| Who has access to my records? | Only BAC employees have access to your records except where you have given your explicit consent for your CV to be shared with potential consultancy clients |
| How long will my records be kept for once I leave BAC? | 1 year |
| Category | Trustees and committee members |
|---|---|
| What data do we collect? | We collect your name, title and your CV and, in the case of Trustees, any other information required by Companies House and the Charities Commission. Your CV is considered when committee members consider your appointment to a committee. |
| Do we share your data with anyone outside of BAC? | Trustee information is shared with the Charities Commission, Companies House and in some cases, listed as a signatory with the BAC bank and investment managers. |
| What is the legal basis for keeping my data? | To comply with company and charity law and to contact you for the purposes of committee meetings and to keep you informed of developments that are relevant to your membership of a committee |
| What would happen if I refused to give you this data? | In this case we would not be able to use your services |
| Who has access to my records? | Basic information on Trustees is publicly available from Companies House and the Charities Commission, otherwise contact information is restricted to those BAC staff who will need to contact you for the purposes of meetings or other agreed activities |
| How long will my records be kept for once I leave BAC? | 1 year. Your CV will be destroyed once it has been considered by the committees |
| Category | Providers |
|---|---|
| What data do we collect? | We collect information on staff, senior managers and owners of the organisation. We also collect student names for the purposes of conducting student interviews |
| Do we share your data with anyone outside of BAC? | No. The information is used within BAC to ensure that accreditation requirements are met and maintained and for our records. We also send the information to the inspectors who will be inspecting your organisation. Once your organisation is accredited or re-inspected we list the Principal of the organisation at the time of inspection on the inspection report. |
| What is the legal basis for keeping my data? | To comply with BAC accreditation requirements |
| What would happen if I refused to give you this data? | In this case we would not be able to accredit your organisation |
| Who has access to my records? | BAC staff and the inspectors inspecting your organisation |
| How long will my records be kept for once I leave BAC? | Any CV’s will be destroyed once an inspection has been completed and accreditation awarded. Other information, such as student and staff names will be destroyed when the inspection is completed. |
| Category | BAC Communications List |
|---|---|
| What data do we collect? | We collect your name, email address and the name of the organisation you represent |
| Do we share your data with anyone outside of BAC? | No |
| What is the legal basis for keeping my data? | Informed consent. You will be asked to confirm your willingness to accept your inclusion on the list and to receive further information on BAC accreditation |
| What would happen if I refused to give you this data? | We will not be able to send you the BAC news or provide you with information on BAC accreditation |
| Who has access to my records? | BAC staff involved in the distribution of any BAC news or communications |
| How long will my records be kept for once I withdraw my consent? | You may withdraw your consent at any time. This will mean you will not receive any further news from BAC. Any information we hold on you will be removed from the BAC contacts database immediately |
| Category | Enquiries List |
|---|---|
| What data do we collect? | We collect your name, email address and organisation details |
| Do we share your data with anyone outside of BAC? | No |
| What would happen if I refused to give you this data? | We will not be able to contact you to discuss your enquiry |
| Who has access to my records? | BAC staff who have the responsibility of following up on your enquiry |
| How long will my records be kept for once I withdraw my consent? | We will contact you three times to follow up on any accreditation enquiries you have made but will remove your details from our enquiries list after six months |
The Website
This website and it’s owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website comply’s to all UK national laws and requirements for user privacy.
Use of Cookies
This website uses cookies to better the users experience while visiting the website. Where applicable this website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their computer / device. This complies with recent legislation requirements for website’s to obtain explicit consent from users before leaving behind or reading files such as cookies on a users computer / device.
Cookies are small files saved to the users computers hard drive that track, save and store information about the users interactions and usage of the website. This allows the website, through it’s server to provide the users with a tailored experience within this website.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and it’s external serving vendors.
This website uses tracking software to monitor it’s visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website but will not store, save or collect personal information. You can read Google’s privacy policy here for further information
[ http://www.google.com/privacy.html ].
Other cookies may be stored to your computers hard drive by external vendors when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.
External Links
Although this website only looks to include quality, safe and relevant external links users should always adopt a policy of caution before clicking any external web links mentioned throughout this website.
The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should therefore note they click on external links at their own risk and this website and it’s owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and it’s owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor it’s owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Shortened Links in Social Media
This website and it’s owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy url’s [web addresses] (this is an example: http://bit.ly/zyVUBo).
Users are advised to take caution and good judgement before clicking any shortened url’s published on social media platforms by this website and it’s owners. Despite the best efforts to ensure only genuine url’s are published many social media platforms are prone to spam and hacking and therefore this website and it’s owners cannot be held liable for any damages or implications caused by visiting any shortened links.
Resources & Further Information
- Data Protection Act 1998
- Privacy and Electronic Communications Regulations 2003
- Privacy and Electronic Communications Regulations 2003 – The Guide
- Twitter Privacy Policy
- Facebook Privacy Policy
- Google Privacy Policy
- Linkedin Privacy Policy
- Mailchimp Privacy Policy
- Information Commissioner Office
Privacy Policy updated by Governance and Business Development Manager, © 2022
Edited & customised by: The BAC – British Accreditation Council