Privacy Policy

CCAR.UK CIC is committed to protecting and respecting the security and integrity of your personal data in line with General Data Protection Regulation (GDPR).

GDPR

The EU General Data Protection Regulation simplifies and clarifies rules and strengthens citizens’ rights in relation to their personal data, and abolishes the single country data protection acts and combines the data protection for all EU member states. The UK has become an EU approved country and GDPR will continue to form part of UK law. We adhere to the GDPR as enshrined in the UK Data Protection Act 2018.

This Privacy Statement describes how CCAR.UK CIC processes your information and explains the choices available to you with respect to your information.

Table of Contents

Our Relationship With You
Information We Process
How We Use Your Information
How We Disclose Your Information
Protection, Storage, and Retention of Your Information
Other Important Information
Your Privacy Rights
Changes To Our Privacy Policy
Contact Us and Privacy Questions

Our Relationship With You

CCAR.UK CIC is the processor/service provider (a provider that processes personal data on behalf of or at the direction of a controller, or other similar designation under the law) and our customer (usually a company or organisation) is the controller/business (the entity that decides how and why information is processed) of the information provided to CCAR.UK CIC via their use of CCAR.UK CIC products and services.

CCAR.UK CIC is the controller of the information.

For example, if you create an account with

your corporate email address, your company is the controller of that information.
a free email domain (like gmail.com) or personal email account, CCAR.UK CIC is the controller.

CCAR.UK CIC products and services can be used by companies or by individual users:

If you’re using CCAR.UK CIC Products through your company, educational institution, or with your company email address, your company or educational institution’s own CCAR.UK CIC administrator is responsible for the accounts associated with that company or institution and can: restrict, suspend, or terminate your access to or ability to use the services, access information about you, access or retain information stored with us and restrict your ability to edit, restrict, modify, or delete information associated with your use of our products and services.

Information We Process

CCAR.UK CIC processes information we receive directly from you, automatically collected when you use any CCAR.UK CIC products or services or visit one of our websites and collected by CCAR.UK CIC from third parties. However, please note that this Privacy Policy does not apply to the processing of your information by third parties through your use of any third-party integrations available via our services. Please visit those third-party websites directly for more information on their privacy and data protection practices.

Information CCAR.UK CIC Receives Directly From You

Information needed to create an account

This includes information that is needed for CCAR.UK CIC to create an account for you and manage your ability to log in and out of CCAR.UK CIC products and services:

Identifiers, such as first and last name and email address
Your password for CCAR.UK CIC products and services (hashed) - unique, long, and strong, please
Information related to a third-party authentication identity provider, such as Google Authenticator

CCAR.UK CIC may collect:

Billing information, such as name, address, and telephone number
Financial information, such as credit card information collected by our payment processors on our behalf
Information about your chosen course, membership or account plan
Information you provide to us through your use of CCAR.UK CIC learning platforms and services
Information uploaded to CCAR.UK CIC earning platforms, such as attachments

Information from emails you forward to any CCAR.UK CIC email addresses including info@ccar.uk
Profile photo and other information you provide to describe yourself, which we only collect if you do choose to provide it, such as your gender pronouns
Video and audio recordings, and transcripts of those recordings, if you use video messaging
Professional or employment information, such as your title or role at your company
Any other information you choose to provide while using CCAR.UK CIC learning platforms products and services that identifies or can be reasonably associated with you

Other information you may provide to us when you interact with CCAR.UK CIC and in other ways

You may voluntarily provide us with information when you interact with us in other ways. If you directly interact with CCAR.UK CIC Staff, such as our sales, user research, or user operations groups, CCAR.UK CIC may process:

Your requests, questions, and responses to us via forms or email
Information you provide in connection with contests, or research studies, if you choose to participate
Information to verify your identity
Geographic information, such as region and country
Social media information
Your date of birth
Your audio and video, if you participate in a sales call or user research study and do not opt out of call recording, which also involves the collection of biometric information associated with the call recordings

Information automatically processed when you visit our websites or use our mobile or desktop app

Information related to your use of CCAR.UK CIC products and services including websites and CCAR.UK. We may also collect the following:

Metadata and inference information related to your use of CCAR.UK CIC websites, CCAR.UK and third-party integrations to better understand the way you work within our products and services.
We may log the actions you take as you use CCAR.UK CIC products and services and CCAR.UK.
Internet network activity, cookies, and similar tracking technologies, including data our servers automatically record, such as your web request, IP address, browser type and settings, referring/exit pages and URLs, number of clicks, date and time stamp information, language preferences, and other such information.
Information collected as a result of participation in beta testing, such as error reports or feedback provided by you
Information about how you interact with our marketing websites, like ccar.uk, such as where you click, how long you visit a page, your scrolling, mouse hovers, and other data to help us better understand your experience and provide you with the best user experience
Device information and activity when you use CCAR.UK CIC products and Services and CCAR.UK via a mobile device, such as the type of device you are using, device IDs, operating system version, and mobile network information to ensure that we are serving you the correct version of our application
Derived device geolocation information, such as approximate geographic location inferred from an IP address

Information CCAR.UK CIC Receives from Other Sources

Sometimes CCAR.UK CIC receives your information from third parties (other individuals, marketing services, third-party integrations), which may include

Information processed from you by third party integrations set up with CCAR.UK CIC. For example, a third-party integration may give us access to information stored in that third party that CCAR.UK CIC will process to facilitate the integration
Name, email, and business contact information
Information about you provided to us from other individuals or users of CCAR.UK CIC products and services and CCAR.UK.

How We Use Your Information

CCAR.UK CIC uses your information to operate our products and services, communicate with you, process transactions when you use our services, for security and fraud prevention, and to comply with the law. Specifically, we may process your information to:

Provide services to you and operate our business

Maintain, provide, and improve our products and services
Help us better understand user interests and needs, and customise CCAR.UK CIC products for you
Analyse and research how you interact with our websites and applications
Protect CCAR.UK CIC and you, for example:
- Securing our systems and products against fraud or unauthorised activity
- Identifying, troubleshooting, and fixing bugs and errors
- Complying with global laws and regulations
Comply in good faith with a valid legal request, or other lawful process
If you use CCAR.UK CIC products as part of an organisation, company, or academic institution, CCAR.UK CIC will process your information as required by our contract with your organisation or academic institution. Those contractual terms may differ from, and, in the event of a conflict, take precedence over, the uses described in this Privacy Policy.

In addition, we use information about your use of CCAR.UK CIC products, account information (such as your email address and name), and information related to third-party integrations to:

Communicate with you:
- About CCAR.UK CIC by phone, text, email, or chat
- To provide important notices and updates, product changes, and other necessary notices such as security and fraud alerts
- To advertise or market CCAR.UK CIC services to you. You have the ability to unsubscribe from promotional communications at any time
Facilitate reporting and analyse performance of the CCAR.UK CIC products and services or CCAR.UK features
Provide webinars or public presentations
Process your information at your direction
Provide cross-device management of your account. For example, we may locate or try to locate the same unique users across multiple browsers or devices (such as smartphones or tablets), or work with service providers that do this, in order to save your preferences across devices and analyse usage of our products and services. If you wish to opt out of Google’s ability to locate you across devices in this way, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Provide you with support and get your feedback

Respond to your requests for information
Help identify and troubleshoot any issues with your account and answer your questions
Resolve support requests
Provide you with reports about usage
Survey your opinions through surveys, research studies, and questionnaires

Combined Information

Unless otherwise prohibited by law, we may combine the information that we collect through your use of our products and services with information that we receive from other sources, both online and offline, and use that combined information as set out above.

How We Disclose Your Information

We need to disclose the information we collect about you to make our products and services run smoothly and to operate our business under the following conditions:

Service providers and subprocessors. We may provide access or disclose your information to select third parties that use the information on our behalf to assist in providing CCAR.UK CIC’s services, website and features. These third parties provide a variety of services to us, including without limitation sales, marketing, provision of content and features, advertising, analytics, research, data storage, security, fraud prevention, and other services.
Advertising and marketing. We may provide information collected when you visit an CCAR.UK CIC website (such as email addresses) to service providers, who may “match” this information in de-identified form to cookies (or mobile ad identifiers) and other proprietary IDs, in order to provide you with more relevant CCAR.UK CIC ads when you visit other websites.
Because you ask us to disclose. We may disclose your information to third parties when you ask us to do so. This includes when you connect CCAR.UK CIC with other tools.
Consistent with your settings within our products and services. Please note that the information you submit through and post to CCAR.UK CIC products and services may be viewable by other users in your workspace, team, division, or organisation, depending on the specific settings you have selected and if an organisation has been created for your domain.
Affiliates and subsidiaries. We may disclose the information we collect within the CCAR.UK CIC family of companies to provide All Recovery’s services to you.
Business transfers. If the ownership of all or substantially all of our business changes, or all or some of our assets are sold as part of a bankruptcy or other proceeding, we may transfer your information to the new owner so that the services can continue to operate. In such case, your information would remain subject to the promises and commitments contained in this Privacy Policy until the acquiring party updates it. If such transfer is subject to additional mandatory restrictions under applicable laws or agreements, CCAR.UK CIC will comply with those restrictions.
Compliance with legal obligations. To comply in good faith with a valid legal request, or other lawful process. We will notify individuals or customers of that request unless: we are prohibited from doing so by law or court order; or there are exceptional circumstances, such as an emergency involving the risk of bodily injury or death to a person or group of people or potential harm to minors.
Your company’s own CCAR.UK CIC account administrator (if you have one). If you’re using CCAR.UK CIC in connection with an organisation, academic institution, or company domain, your company’s own CCAR.UK CIC account administrator can export data associated with the domain they manage.
Public Forums. Our public forums, such as CCAR.UK CIC communities, make it possible for you to upload and post comments or feedback publicly with other users. Any information that you submit through such public forums is not confidential and CCAR.UK CIC may use it for any purpose (including in testimonials or other CCAR.UK CIC marketing materials). Any information you post openly in these ways will be available to the public at large and potentially accessible through third-party search engines. Such information can be read, collected and/or used by other users and could be used to send you unsolicited messages.

We use and disclose the categories of information we collect from and about you consistent with the various business purposes we discuss throughout this Privacy Statement. We do not disclose your information to third parties for their own direct marketing purposes.

Protection, Storage, & Retention of Your Information

Security

CCAR.UK CIC takes technical and organisational measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access. However, no method of transmission over the Internet and no means of electronic or physical storage is absolutely secure, so we cannot ensure or warrant the security of that information. We are constantly updating and improving our safeguards.

Storage

Where we store your personal data:

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Data Retention

We will retain your information for the period necessary to fulfil the purposes outlined in this Privacy Policy to make our products and services available to you, or as instructed by you, unless a longer retention period is required or permitted by law.

Other Important Information

Use by children under 16

If you are under the age of 18, you may not have an CCAR.UK CIC account or use CCAR.UK CIC’s products or services. We do not knowingly process any information from, or direct any of our products or services to, children under the age of 16.

Marketing Practices and Choices

If you receive email from us, we may use certain analytics tools, such as clear GIFs, to capture data, such as when you open our message or click on any links or banners within our emails. This data allows us to gauge the effectiveness of our communications and marketing campaigns.

You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions, and special events that might appeal to your interests by contacting us at info@ccar.uk. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails.

Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain transactional, operational, or service-related emails, such as those reflecting our relationship or transactions with you.

Legal Bases for Processing Your Information

The laws in some jurisdictions require us to inform you of our legal bases for processing your information. Our legal bases for collecting and using your information described above will depend on the particular type of information and the specific context in which we collect it. However, some examples of legal bases for processing that we rely on:

Where use of your information is necessary to perform our obligations under a contract with you
Where use of your information is necessary for our legitimate interests or the legitimate interests of others (for example, to provide security, operate our products and services, prevent fraud, analyse use of and improve our products and services, and for similar purposes)
Where use of your information is necessary to comply with a legal obligation (for example, to comply with our legal obligations to collect and store tax or invoice information for a certain period of time)
Where we have your consent to process data in a certain way

Your Privacy Rights

CCAR.UK CIC users from around the world use our products to bring clarity to their work. Regardless of what country you’re located in, we respect your ability to know, access, correct, export, restrict the processing of, and delete your information, and have extended those rights globally. We will not discriminate against you for exercising your privacy rights.

Information about your rights

Upon your request, and subject to applicable legal exceptions, we will:

provide access to and/or a copy of certain information we hold about you
provide you with information about categories of information we collect or disclose about you, the categories of sources of such information, the business or commercial purpose for collecting your information, and the categories of third parties to which we disclose your information. For your convenience and so you don’t have to request it, we’ve included that information in this Privacy Policy.
prevent the processing of your information for promotional purposes (including any direct marketing processing based on profiling)
update information which is out of date or incorrect
delete certain information which we have about you
restrict the way that we process and disclose some of your information
transfer your information to a third-party provider of services
revoke your consent for the processing of your information

You have a right to lodge a complaint with CCAR.UK CIC or with ICO (The Information Commissioner’s Office) directly, should you have a concern about our information rights practices.

If you request these rights, we will need to verify your identity and may need to verify your relationship with CCAR.UK CIC (for example, if you’re an administrator of an CCAR.UK CIC's, division, or workspace and you’re making a request on behalf of another individual) for security and to prevent fraud.

We may take additional steps to verify that you are authorised to make the request. If you are an end user of CCAR.UK CIC’s products and services and not a direct customer of CCAR.UK CIC (for example, your company uses CCAR.UK CIC products and services and you’re an employee or authorised representative of that company), you should direct requests relating to your information to the administrator of your company’s CCAR.UK CIC account. We will redirect you to your administrator or notify the administrator directly.

Please note, however, that certain information may be exempt from such requests in some circumstances (for example, if we need to keep processing your information for our legitimate interests or to comply with a legal obligation). Depending on applicable law, you may have the right to appeal our decision to deny your request. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you.

In the case of a data breach:

The client will be informed as soon as we are aware, we will do what we can to recover data and we will take steps to prevent this from happening again.

Changes To Our Privacy Policy

We will update this Privacy Policy to make sure it accurately reflects our data collection and use practices, our amazing features, advances in technology, or as applicable laws require. We will comply with applicable legal requirements regarding providing you with notice and/or consent when we make such changes, depending on the type of change made. We also provide information about how our Privacy Policy has changed over time below.

CCAR.UK CIC is a Community Interest Company incorporated in England and Wales Company Number 13111946 whose registered office address is Sparkhouse, Ropewalk, Lincoln, LN6 7DQ.

If you wish to contact us or if you have any questions about or complaints in relation to this notice, please contact us at info@ccar.uk.