British Accreditation Council

Privacy Policy

The British Accreditation Council is committed to good governance and transparency.  This policy sets out what we do with your information when we collect it, why we collect it and how we dispose of it.

Introduction

In May 2018 the European General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA)comes into force.  The new regulations strengthen individual’s rights over how their personal data is used.

The BAC Data Protection Officer (DPO)

The BAC Data Protection Officer is Paul Fear.  He is responsible for ensuring that the GDPR and DPA regulations are fully complied with.  He is also the first point of contact should you wish to know what information we hold on you.  He can be contacted via email: Paul.fear@the-bac.org

Or by mail at:
14 Devonshire Square
London
SW16 6JD

What are your rights?

If we have collected any of your personal data, then you have a number of rights.  These are:

  • To have confirmation of what data we hold on you and what we do with that data
  • To have a copy of the data we hold provided to you free of charge
  • The right to correct the information we hold on you if it is factually incorrect
  • The right to object to us using your information
  • Under certain circumstances you have the right to have your data erased and to tell BAC to cease further dissemination of your data to third parties
  • You also have the right for your data to be transferred to another organisation in an electronic format

When do we have to ask you for the right to collect your personal data?

If we collect Special Category Data, we might need to ask your permission.  Special category data includes any data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, data concerning health or data concerning a natural person’s sex life or sexual orientation.

BAC has no need to collect this information for any of its activities and will not collect this information under any circumstances.

We will only collect data for:

  • Employment purposes; we will collect information necessary to comply with our legal obligations on our employees and associates
  • For the purposes of legal compliance and for payment of expenses, information on our trustees and committee members
  • In order for us to provide quality assurance and accreditation activities for your organisation
  • The dissemination of BAC newsletters
  • Contacting you to follow up on an enquiry you have made to us

What we don’t do with your data

  • We will not use your data for automated decision making
  • We will not use your data for profiling purposes
  • We will never sell your data
  • We will not share your data for any other purpose than that described above

Why do we collect your data and what do we do with it?

BAC collects data for a number of reasons and the best way for us to explain why we collect the data and what we do with it is to address category of data collection separately.

Category Employees
What data do we collect? We collect the data we need to verify who you say you are, to confirm the qualifications you have on your CV are correct and collect all the information we require to register you for payroll, taxation and pension arrangements and to pay you your salary.  We will also keep records of your contractual arrangements and any other employment documents that we are required to keep or need for us to comply with employment legislation
Do we share your data with anyone outside of BAC? We outsource our payroll to a third party.  They will have access to your name, National Insurance Number, your tax code and salary and pension arrangements.  They need this to pay you and to make sure your tax and pension payments are made correctly
What is the legal basis for keeping my data? We keep your data to comply with employment legislation and to make sure that we can pay you
What would happen if I refused to give you this data? In this case we would not be able to comply with employment legislation or pay you
Who has access to my records? Once you have been employed only the CEO and Deputy CEO have full access to your records
How long will my records be kept for once I leave BAC? 6 years

 

Category Inspectors and Consultants
What data do we collect? We collect the data we need to verify who you say you are, to confirm the qualifications you have on your CV are correct and collect all the information we require to register you for payment.  We will also keep records of your contractual arrangements and any other documents that we are required to keep, or we need for us to comply with taxation arrangements.
Do we share your data with anyone outside of BAC? We will only share your name and contact details with the providers you will be inspecting or consulting for.  We may, but only with your explicit consent, forward your CV to organisations requesting consultancy support
What is the legal basis for keeping my data? We keep your data to comply with contractual needs, to ensure that we select you for appropriate inspections and to make sure that we can pay you
What would happen if I refused to give you this data? In this case we would not be able to use your services
Who has access to my records? Only BAC employees have access to your records except where you have given your explicit consent for your CV to be shared with potential consultancy clients
How long will my records be kept for once I leave BAC? 1 year

 

Category Trustees and committee members
What data do we collect? We collect your name, title and your CV and, in the case of Trustees, any other information required by Companies House and the Charities Commission.  Your CV is considered when committee members consider your appointment to a committee.
Do we share your data with anyone outside of the Committees? Except for providing Trustee information to Companies House and the Charities Commission, no.
What is the legal basis for keeping my data? To comply with company and charity law and to contact you for the purposes of committee meetings and to keep you informed of developments that are relevant to your membership of a committee
What would happen if I refused to give you this data? In this case we would not be able to use your services
Who has access to my records? Basic information on Trustees is publicly available from Companies House and the Charities Commission, otherwise contact information is only available to BAC employees
How long will my records be kept for once I leave BAC? 1 year.  Your CV will be destroyed once it has been considered by the committees

 

Category Providers
What data do we collect? We collect information on staff, senior managers and owners of the organisation
Do we share your data with anyone outside of the Committees? The information is used within BAC to ensure that accreditation requirements are met and maintained and for our records.  We also send the information to the inspectors who will be inspecting your organisation.  Once your organisation is accredited or re-inspected we list the Principal of the organisation at the time of inspection.
What is the legal basis for keeping my data? To comply with BAC accreditation requirements
What would happen if I refused to give you this data? In this case we would not be able to accredit your organisation
Who has access to my records? BAC staff and the inspectors inspecting your organisation
How long will my records be kept for once I leave BAC? Any CV’s will be destroyed once an inspection has been completed and accreditation awarded.

 

Category Newsletter Distribution List and Enquiries List
What data do we collect? We collect your name, email address and the name of the organisation you represent
Do we share your data with anyone outside of the organisation? No
What is the legal basis for keeping my data? Informed consent.  You will be asked to confirm your willingness to accept your inclusion on the Newsletter distribution and to receive further information on BAC accreditation
What would happen if I refused to give you this data? We will not be able to send you the BAC Newsletter or provide you with information on BAC accreditation
Who has access to my records? BAC staff
How long will my records be kept for once I leave BAC? You may withdraw your consent at anytime and you will continue to receive Newsletters unless you withdraw consent.

We will contact you a small number of times to follow up on any accreditation enquiries you have made but will remove your details from our enquiries list after six months

 

Category Enquiries List
What data do we collect? We collect your name, email address and organisation details
Do we share your data with anyone outside of the Committees? No
What is the legal basis for keeping my data? Informed consent.  You will be asked to confirm your willingness to accept your inclusion on our enquiries list when you submit your details
What would happen if I refused to give you this data? We will not be able to contact you to discuss your enquiry
Who has access to my records? BAC staff
How long will my records be kept for once I leave BAC? We normally hold the information for 1 year after which it is deleted from our records