Purpose of process

This section applies to you when you have given UKCEH your personal information in your capacity as a customer or a supplier to UKCEH.

Your personal data may be processed for the purpose related to:

  • the performance of an agreement, contract, or licence to which you are a party
  • the provision to you of our products or services or publications
  • setting up and managing an account for you on one of our websites
  • managing and responding to any queries you submit to us
  • carrying out surveys or managing feedback that you give us

Information collected

  • name
  • contact details such as email address, postal address, and phone number
  • job title
  • organisations that you are affiliated with
  • bank account details
  • tax information
  • we will ask for your proof of qualification if you are contracted to carry out work in our offices
  • other relevant information provided by you for UKCEH due diligence process

Lawful basis for processing

Consent

Where you have given consent to the processing of your personal data for one or more specific purposes.

Contract

Where it is necessary for the performance of contract with UKCEH

Legitimate interests

Where it is necessary for the legitimate interests of UKCEH. Our legitimate interests includes:

  • running and developing our business
  • keeping our records updated
  • studying how customers use our products, services, websites and developing them
  • preventing fraud
  • making payments and recovering debts due to us
  • defining types of customers for our products and services in order to inform our marketing strategy
  • keeping our websites updated and relevant
  • developing our products/services
  • risk assessment and quality assurance

Data sharing

Internally, data might be shared with relevant personnel required for managing the data on a strictly need-to-know basis. We would only share information externally if requested under GDPR regulations.

Retention period

UKCEH retains your personal information only for the time period necessary for the purpose of holding the data.  Your personal data obtained by way of consent will be deleted if you withdraw your consent.

Data subject right

  • Right to be informed
  • Right to rectification
  • Right to erasure
  • Right to access
  • Right to data portability

Changes to privacy notice

This privacy notice will be revised as required and you are encouraged to revisit the privacy notice regularly to read the latest versions. This version was update on July 2025.