The following terms and conditions (“Terms”) apply to our provision and your use, as a registered member of CAS (“CAS Member”), of the information, services and materials through the CAS Website and CAS Community Website (“CAS Website”).
These terms should read in conjunction with the guidance for using the site and our privacy and cookies policies.
Please read these Terms carefully. By accessing the website (by whatever means or device) and using the online content provided by this site you agree that you have read, understood and agreed to these terms and the privacy policy whether you are a visitor or a registered member. If you do not agree to these terms you must stop using the website immediately.
BCS is committed to ensuring data security and the fair and transparent processing of your data. This privacy policy sets out how we will treat the personal data which you provide to us in compliance with the Data Protection Act 2018 and the General Data Protection Regulations (EU) 2016/679 (GDPR).
This policy contains important information on how and why we collect, store, use and share personal data, your rights in relation to your personal data and how to contact us if you have any concerns about how we process your data.
Personal data, or personal information, means any information about you which could be used to identify you.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
We use different methods to collect data from and about you through:
Direct interactions. You may give us your identity, contact and financial data by filling in forms or by corresponding with us by post, phone, email or in person. This includes personal data you provide when you:
Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns including the IP address used; login information; browser type and version, operating systems and platforms. We may also collect information about your visit including the pages you visited; what you searched for; length of visits and methods used to browse away from the page. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies.
Please see our “Use of Cookies” statement on the BCS website https://www.bcs.org/
Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
Where necessary, BCS may collect certain sensitive personal data from you. Sensitive data is classified as information about your racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life or details or criminal offences, or genetic or biometric data). This will only be done with your explicit consent.
When we ask you to supply us with personal data, we will make it clear whether the personal data we are asking for must be supplied so that we can provide the products and services to you, or whether the supply of any personal data we ask for is optional. We may use your personal data to fulfil a contract or take steps linked to a contract:
Where the collection of data is necessary for purposes which are in our, or third party’s legitimate interests. These interests are:
Where there is a contract between BCS and your centre, training provider, school, hub or employer we will be processing your data to fulfil our obligations under such contract.
Where you have given your express permission to receive marketing communications, we may use your personal data to send you newsletters, surveys, information about our awards and events, examinations, offers and promotions, related to products and services which may be of interest to you.
We may also process your personal data if required by law, including responding to requests by government or law enforcement agencies or for the prevention or crime or fraud.
We have set out below, in a table format, a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
---|---|---|
To register you as a new member | (a) Identity (b) Contact |
Performance of a contract with you |
To make an assessment for award of professional registrations | Profile | Performance of a contract with you |
To process and deliver services to you including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us |
(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing & Communications |
(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) (c) consent |
To manage our relationship including: (a) Notification about changes to our terms or privacy policy; (b) Asking you to leave a review or take a survey. We may cross-reference your survey responses with information that we already hold about you. This would be for research purposes only, unless you expressly request otherwise. | (a) Identity (b) Contact (c) Profile (d) Marketing & Communications |
(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how members use our products / services) |
Recording of calls made to our customer services department. | Identity Contact |
Legitimate interest for training purposes and to improve future customer experience. |
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact (c) Technical |
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing & Communications (f) Technical |
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
Visitors | Identity | Necessary to ensure the correct person is allowed access to BCS and for Health and Safety and Fire evacuation reasons |
To conduct the disciplinary procedure for BCS members | (a) Identity (b) Contact (c) Membership (d) Behaviour |
Necessary for our legitimate interests to investigate an alleged infringement of the BCS Member Code of Conduct |
To register you for an event | (a) Identity (b) Contact |
Necessary to know who has registered for an event and to provide follow up information |
To take payment | (a) Identity (b) Contact (c) Payment Information |
We need this information to complete your purchase. |
To process scholarship applications | (a) Identity (b) Contact (c) Education / Career |
Consent |
Interviewing for Apprenticeships / Examinations | (a) Identity |
Consent |
We may use personal information to send direct marketing communications about our products and services that we feel you will be interested in. This may be in the form of email, post, telephone or by SMS. You can always choose to opt out of receiving direct marketing as all our marketing communications included unsubscribe links, alternatively, you can contact us to stop further communications.
We also carry out customer insight analysis from our interactions with you to help improve our products and services.
BCS uses Eventbrite for its events bookings and participants will register directly with them. Please refer to their GDPR policy for details of how they will process your data. If you require updates, amendments or deletion you should contact Eventbrite directly.
Organisations using Role Model are responsible for maintaining up to date records for staff.
For updates, amendments or deletion, you must contact your Role Model administrator directly.
BCS will collect and use your information to process your scholarship application and administer the scholarship scheme. We will share your data with the Department for Education (who is a Joint Controller) who may retain and use your information for the purposes of teacher recruitment and retention statistics. The legal basis for DfE processing this data is that such processing is necessary for them to perform a task in the public interest pursuant to Section 14 of the Education Act 2002. BCS has a data sharing agreement with the DfE for these purposes.
To support you in your journey towards a new career in teaching, we would like to register you with the DfE Teaching Line which is administered by Teleperformance UK Limited. The service offers a Premier Plus service to those who hold (or are predicated to gain) a first class, 2:1 or 2:2 degree). Premier Plus provides tailored advice about initial teacher training, support with your application from a dedicated advisor as well as help in securing school-based experience and invitations to exclusive events. Your data will only be processed in this way if you give your consent to being registered with the DfE Teaching Line. If you do give your consent, then DfE will share your data with Teleperformance UK Limited.
As part of our involvement in the activities around the National Centre for Computing Education, we are under a contractual obligation to share data with our consortium partners, STEM Learning Limited and Raspberry Pi Foundation. We may also be required to share data for certification and verification purposes. This data will ultimately be shared with the DfE. You can choose to update your preferences at any time by updating your CAS online profile with your preferred communication preferences.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the BCS website may become inaccessible or not function properly. You can also turn off advertising by visiting http://www.youronlinechoices.com/uk/ and adjusting your privacy settings in your browser.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
All examination results will be held for a period of 15 years as this is a record of a person’s qualifications unless there is a specific request to delete the data via a right to be forgotten request.
BCS will not delete any data which relates to financial transactions that is less than seven years old as we are legally required to hold this information for seven years.
We take reasonable steps to protect your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and the relevant Regulator(s) such as the ICO of a suspected data security breach where we are legally required to do so.
Where you have a username and password (or other identification information) which enables you to access certain services or BCS portals, it is your responsibility to keep this information secure. Please do not share your password with anyone. Unfortunately, the transmission of information via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to the BCS website; any transmission is at your own risk. Once we have received your personal data, we will use strict protocols and security features to try to prevent unauthorised access.
You have legal rights under the data protection laws in relation to your personal data. Read below to learn more about each right you have.
We may ask you for proof of identity when making a request to exercise any of these rights. We do this to ensure we only disclose information when we know we are dealing with the right person.
We will not charge you for any of these requests unless we think your request is unfounded, repetitive or excessive. Where a fee is necessary, we will inform you before we proceed with your request.
We aim to respond to all valid requests within 30 days. It may however take us longer if the request is particularly complicated or you have made several requests. We will always let you know if we think a response will take longer than one month. To speed up our response, we may ask you provide more detail about what you want to receive or are concerned about.
We may not always be able to do what you have asked, for example, if it would impact the duty of confidentiality we owe to others, or if we are otherwise legally entitled to deal with the request in a different way.
You can ask us to:
BCS will not provide copies of any emails sent to or received from yourself as you already have received this information. We also will not provide any internal emails or documents that may contain your name unless the information contained in the email is:
significantly biographical with regards to you as the data subject and/or
you as the data subject were the focus of attention in the document.
We will not release your examination paper or script as it may compromise the examination papers which may be re-used. For the purposes of this policy an examination paper is defined as a set of questions evaluating skill or knowledge which the candidate answers during the examination and an examination script is defined as a booklet in which a candidate records answers to examination questions.
You can ask us to:
You can ask us to:
We may not always be able to comply with your request, for example, if we need to keep using your personal information in order to comply with our legal obligations or where we need to use it to establish, exercise or defend legal claims.
Where we have asked for your consent to use your personal information, you will always have the right to withdraw your consent. Please contact us if you want to do this.
You can object to any use of your personal information which we have justified on the basis of our legitimate interest, if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interests in using the information. If you raise an objection, we may continue to use the personal information if we can demonstrate that we have compelling legitimate interests to use the information. You can also object to the use of your personal information for direct marketing purposes. We explain in the marketing section of this privacy policy more about our approach to direct marketing.
You have the right to request that we restrict the further processing of your personal data in certain circumstances. This right arises where, for example, you have contested the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests or the processing is unlawful and you elect that processing is restricted rather than deleted. If you would like to submit a request to restrict the processing of your data, please contact us.
You can ask us to:
You can only do this where we use your personal information in order to perform a contract with you, or where we asked for your consent to use your personal information. This right does not apply to any personal information which we hold or process based on our legitimate interest or which is not held in digital form.
We accept third party requests from individuals such as friends, relatives, solicitors or from persons who have power of attorney where:
If you would like to contact us about the use of your personal data, or exercising your personal rights then please contact us at:
Email: dataprivacy@bcs.uk
Phone: + 44 (0) 1793 417 417
Lines are open Monday to Friday, 08:30 to 17:15 BST (UK Time)
Live Chat: This service is available Monday to Friday, 09:30 to 16:30 BST (UK Time).
If you believe that your data protection rights have been breached and we have been unable to resolve your concern, you have the right to report your concern to your local data protection supervisory authority. In the UK this is the Information Commissioner’s Office (ICO) and you can raise your concerns by going to https://ico.org.uk/concerns.
We do ask that you please attempt to resolve any issue with us before contacting the ICO.
We will review this policy on an annual basis in line with departmental quality standards and regulatory criteria.