CSI Training and Events Ltd take the trust of our clients and the security of data very seriously.
CSI Training and Events Ltd will be the ‘Controller’ of any personal data you provide to us. Our company registration number is 08062162 and our registered address is: V0.16a Victoria Building Teesside University, Middlesbrough, Cleveland, TS1 3BA
Unless otherwise agreed with you, we will only collect basic personal data about you, which does not include any special categories of personal information (special category data includes medical information and is often known as ‘sensitive personal data’). The type of information we may collect includes; your name, address, telephone number, email address and employment details. This list is not exhaustive.
We will also store comments or reviews, if you choose to leave them.
While you visit our shop, we’ll track:
- Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
- Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
- Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order.
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Set up your account for our store
- Comply with any legal obligations we have, such as calculating taxes
- Improve our store offerings
- Send you marketing messages, if you choose to receive them
If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.
We primarily process personal data to enable us to provide our services to our clients, and to maintain our own accounts and records. Where we are given permission, we also use data in order to keep our customers up to date with offers and new products or services.
We need to know basic personal data in order to provide services that we have been asked to provide, and to assert our right to be recompensed in return for these services, as per the services agreement or contract in place. If this information is not provided, then we will be unable to provide the services requested. We will not collect any personal data that we do not need, in order to provide and oversee the service.
We collect your personal data when you contact us about or products or services, whether this be in person, through an email, through a contact form on our website or a telephone call. We also collect your data when a purchase is made on our online shop.
Additionally, we collect information via our website www.csitrainingandevents.com. Our website collects cookies and utilises a third-party service, Google Analytics.
These are used to collect standard internet log information and visitor behaviour patterns. We use this information to find out things such as how many visitors our website has, and which pages are the most popular. The information collected does not include any personal information and no attempt is made to identify individuals who are using our website.
We are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years, after which time it will be destroyed if it is no longer required for the lawful purpose(s) for which it was obtained. If you consent to marketing, any information we use for this purpose will be kept until you notify us that you no longer wish to receive this information.
If you sign up for an account through our online store, your data will be stored until; you delete your account, you inform us that you would like us to delete it, or, your account has been inactive for a period of 18 months.
We will also store comments or reviews indefinetley, if you choose to leave them.
- We do not pass information to third parties for marketing purposes.
- All the personal data we hold about you will be processed by our staff in the United Kingdom.
- Our website is hosted on a UK server, as such any associated data will be stored at a data center in England.
- Selected third parties will have access to your personal data, where there is a service they provide to us, or there is a legal obligation for us to provide them with this. Please be aware that some of those third parties may store information on a cloud-based system, whose servers are located within the UK, European Union or the United States.
We will use technological and organisational measures to keep your information secure.
While we will use all reasonable efforts to secure your personal data, in using our website and/or sending information via email, you acknowledge that the use of the internet is not entirely secure. For this reason, we cannot guarantee the security or integrity of any personal data that is transferred from you, or to you via the internet. If you have any concerns about your information, please contact us.
We take all reasonable steps to ensure that your personal data is processed securely and more information on this can be found on our webpage: https://csitrainingandevents.com/keeping-your-information-secure/
We accept payments through the payment gateway Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as;
- Unique payment identifier
- Payment provider identifier
We would like to send you information about our products, services and future offers. However, we do not capture your data to use it for this purpose, this is an ‘opt in’ service.
Under the Privacy and Electronic Communications Regulations (PECR, regulation 22.), we may send you marketing communications if:
- You have specifically consented to electronic mail from us; or
- You are an existing customer who have bought (or negotiated to buy) a similar product or service from CSI in the past, and did not opt out of communications when we first collected your details
- You have been given the option to ‘opt out’ in all following correspondence and have not chosen to.
When sending these emails:
- We will not disguise our identity
- There will be a simple way for you to choose to opt out of emails, either via emailing email@example.com or clicking an opt out button.
You can opt in to our mailing list to receive details about future offers, new products and services from CSI Training and Events Ltd. To do this send an email to: firstname.lastname@example.org
Please be reassured that it will not affect your relationship with CSI Training and Events Ltd, or any services we provide to you, in any way if you do not give your permission for us to contact you for marketing purposes.
You also have the right to withdraw your consent to receiving marketing contact and the associated processing of your data, at any time and you can do this via phone or email.
In addition to the basic data described above, there may be times where it may benefit you to notify us of any health conditions or disabilities that you, your employees or pupils have, so that we are aware of these conditions and how they affect the individual. This will allow us to take any reasonable steps to accommodate specific needs, or requirements when providing our services to you. This type of information is known under the law as ‘special category information’ (you may also know this as ‘sensitive personal data’) and we require your explicit consent to process this information.
This kind of information will not be taken as a standard, it will only be collected if you wish to share it with us. When available, it will be used by us to assist you, it will not be shared with any third parties and will only be kept as long as it is required for this purpose, or until such time as you notify us you no longer consent to its processing.
If you do provide us with sensitive personal data, we will provide a consent form in order to enable us to process and store this.
Under data protection legislation, you have several rights regarding the use of your personal data, as follows:
• If you would like to inquire whether your personal data is being processed, and/or you would like to access any data we hold on you, you can request this via email or in writing. We will respond to this request within 1 month and provide this free of charge.
• You have the right for data you have provided us with, to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that we transmit this data directly to another organisation where it is practical for us to do so.
• You are entitled to have data corrected if it is inaccurate or incomplete.
• You are entitled to have data deleted if; it is no longer needed, there is no longer a legitimate reason for the processing, or if the data in question has otherwise been unlawfully processed. You may also request deletion of your personal data if it was processed as a result of you consenting to this, and you now withdraw your consent.
• You have the right to object to the processing of your personal data (note that this only provides you with the right to raise your objections, not a blanket right to have any and all processing cease).
• You have the right to restrict the processing of your personal data under certain circumstances, including if you have contested its accuracy, or if you have objected to its processing. Processing will seize whilst concerns are investigated.
If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact our Data Protection Officer, Dionne Watson who will investigate your concerns. Please email email@example.com .
If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the Information Commissioner’s Office (ICO). You can find further information about the ICO and their complaints procedure here: https://ico.org.uk/concerns/.