Purpose of process
This section applies to you when you have given UKCEH your personal information in your capacity as a customer or a supplier to UKCEH.
Your personal data may be processed for the purpose related to:
- the performance of an agreement, contract, or licence to which you are a party
- the provision to you of our products or services or publications
- setting up and managing an account for you on one of our websites
- managing and responding to any queries you submit to us
- carrying out surveys or managing feedback that you give us
Information collected
- name
- contact details such as email address, postal address, and phone number
- job title
- organisations that you are affiliated with
- bank account details
- tax information
- we will ask for your proof of qualification if you are contracted to carry out work in our offices
- other relevant information provided by you for UKCEH due diligence process
Lawful basis for processing
Consent
Where you have given consent to the processing of your personal data for one or more specific purposes.
Contract
Where it is necessary for the performance of contract with UKCEH
Legitimate interests
Where it is necessary for the legitimate interests of UKCEH. Our legitimate interests includes:
- running and developing our business
- keeping our records updated
- studying how customers use our products, services, websites and developing them
- preventing fraud
- making payments and recovering debts due to us
- defining types of customers for our products and services in order to inform our marketing strategy
- keeping our websites updated and relevant
- developing our products/services
- risk assessment and quality assurance
Data sharing
Internally, data might be shared with relevant personnel required for managing the data on a strictly need-to-know basis. We would only share information externally if requested under GDPR regulations.
Retention period
UKCEH retains your personal information only for the time period necessary for the purpose of holding the data. Your personal data obtained by way of consent will be deleted if you withdraw your consent.
Data subject right
- Right to be informed
- Right to rectification
- Right to erasure
- Right to access
- Right to data portability
Changes to privacy notice
This privacy notice will be revised as required and you are encouraged to revisit the privacy notice regularly to read the latest versions. This version was update on July 2025.