Purpose of collection |
Information category |
Data collected |
Purpose for collection |
Lawful basis for processing |
Data shared with? |
Retention period |
1. To provide you with information |
Subject matter information |
Name, company name, geographic location, email address, business sector. |
To provide appropriate online or email information about products and services that you have requested |
Contractual fulfilment |
Internally only |
Maximum 8 years from the data the information is collected.
6 months if a marketing email is left unopened |
To provide further, related, online or email information and ongoing news updates in relation to the identified area of interest. |
Legitimate interest |
Internally only |
Telephone number |
Follow-up to ensure requested information meets needs and identify further requirements |
Legitimate interest |
Internally only |
Personal contact information as provided through website forms or at trade shows or any other means. |
General mailing list subscription |
Consent |
Internally only |
2. Transactional information |
Transaction details |
Name, physical address, email address, telephone number, bank account details (for credit accounts), other medium of content delivery |
To process purchase transactions for products and services with customers, and to ensure any transaction issues can be dealt with. |
Contractual performance |
Internally only |
Maximum 8 years from the date of the performance of the contract.
6 months from the data the data subject has input personal information but has not proceeded with a transaction.
8 years for VAT records from the performance of the contract |
For accounting and taxation purposes |
Statutory obligation |
Internally and professional advisers |
Documentation should any contractual legal claim arise |
Legitimate Interest |
Internally and professional advisers |
Payment card data |
Primary account number (PAN), cardholder name, service code, expiration date |
To fulfil purchase requests using payment cards |
Contractual performance |
Payment card companies, all in line with PCI DSS |
Only retained whilst authorisation is pending. |
3. Fulfilment information |
Fulfilment data |
Name, dietary requirements |
Appropriate catering arrangements for training courses |
Contractual performance |
Internally and training venues |
Maximum 6 years from the date of the performance of the contract. |
Name, contact and identification details |
Access to training courses, attendance registers |
Contractual performance |
Internally and training venues |
Name, contact and identification details address(es), email address, |
Course attendance and issue of certifications |
Contractual performance |
Internally and external certification bodies or supplier companies with whom we contract in order to fulfil these requirements. |
4. Security |
Security information |
Technical information, as described above, plus any other information that may be required for this purpose |
To protect our website and infrastructure from cyber attacks or other threats including reporting and dealing with any illegal activity. |
Legitimate interest |
Internally, forensic and other organisations with whom we might contract for this purpose. |
Relevant statutes of limitation |
5. Communications |
Contact information |
Names, contact details, identification details |
To communicate with you about any issue that you raise with us or which follows from any interaction between us. |
Legitimate interest |
Internally and, as necessary, with professional advisers. |
Relevant statutes of limitation. |