Privacy Notice

Your Personal Data:

What we need

The Chartered Institute of Environmental Health (CIEH) takes your data privacy seriously and will only use the details you provide to administer your account and provide you with our products and services.  Under the terms of the Data Protection Act and GDPR, CIEH is the ‘Controller’ for this information.  More information is available on the Information Commissioner’s Office (ICO) website here: https://ico.org.uk/

As a candidate completing a CIEH e-Learning course we collect personal information about you including:

  • Name

  • Email address

  • The course(s) being taken

  • The organisation delivering your course(s).

 

Why we need it

We need to know your basic personal data in order to identify and contact you to provide our services. We only collect the necessary information required for us to effectively deliver and improve these services.

What we do with it

All of the personal data we process is done so by our staff in the UK. However, in order to provide our services, we engage with a number of third parties termed ‘Processors’ who may host or process data within the EU such as our IT and hosting facilities.  We only authorise access by third parties if they demonstrate strong data privacy practices and always limit their access solely to what is required for them to provide their services.

We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.

Candidate information is solely used to process your qualification and we will never use this information for marketing or commercial purposes, nor will we share with any other third party for those purposes.  If you have purchased your course directly with us we may email you as a customer about similar courses which you can choose to opt out of here: http://www.cieh.org/my_preferences

How long we keep it

We are required under UK tax law to keep your financial transactions and basic personal data (name, address, contact details) for a minimum of six years after which time they will be destroyed.

Any additional information that we have is kept until we are reasonably certain that you no longer wish to do business with us which is typically three years from the date of your last purchase unless you request that we do so sooner.

Candidate information is kept for as long as the qualification taken is considered up to date and relevant to enable us to validate any queries and supply replacement certificates.

For candidates of our e-Learning courses we retain this information for three years.

Emails

We keep email correspondence for six years and an archive for up to 10 years.

What we would also like to do with it

We would however like to contact you about any of our services that you’re interested in. Please follow the link below to set your interests and communication preferences.

http://www.cieh.org/my_preferences

What are your rights?

If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted.

If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Compliance Officer who will investigate the matter.

If you are not satisfied with our response, or believe we are processing your personal data not in accordance with the law, you can complain to the ICO.

Our Data Compliance Officer can be reached via email or post with the details below;

DCO@cieh.org

Data Compliance Officer

CIEH Chadwick Court

15 Hatfields

London

SE1 8DJ