Privacy Policy
At **CEFAS UK**, accessible at **book.cefasuk.com**, one of our main priorities is the privacy of our visitors and users. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website.
If you have additional questions or require more information about this Privacy Policy, please contact us by email at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**.
This Privacy Policy applies only to our online activities and is valid for visitors to our website in relation to the information that they share and/or that is collected by CEFAS UK through this website. It does not apply to information collected offline or through channels other than this website.
By using our website, you consent to this Privacy Policy and agree to its terms.
## 1. Scope of this Privacy Policy
This Privacy Policy applies only to the actions of **CEFAS UK** and users with respect to this website. It does not extend to any websites that can be accessed from this website, including, but not limited to, links we may provide to social media websites or third-party websites.
For the purposes of applicable data protection laws, **CEFAS UK** is the **data controller**. This means that CEFAS UK determines the purposes for which, and the manner in which, your personal data is processed.
## 2. Information We Collect
We may collect and process the following personal data:
* name;
* date of birth;
* job title;
* profession;
* contact information such as email addresses and telephone numbers;
* financial information such as credit or debit card details;
* information you provide when contacting us directly, including the contents of messages and any attachments;
* information you provide when registering for an account or using our services;
* information submitted through surveys, competitions, promotions, or marketing preferences;
* technical data such as your IP address, browser type, Internet Service Provider (ISP), date and time stamps, referring and exit pages, pages visited, and interactions with our website.
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we request it.
## 3. How We Collect Data
We collect data in the following ways:
* data is given to us by you; and
* data is collected automatically.
### Data Given to Us by You
You may provide data to us when you:
* contact us through the website, by telephone, post, or email;
* register with us and set up an account;
* use our services;
* make payments to us through the website or otherwise;
* complete surveys for research purposes;
* enter a competition or promotion;
* elect to receive marketing communications.
### Data Collected Automatically
When you access the website, we may automatically collect information about your visit. This may include your IP address, browser type, ISP, the date, times and frequency with which you access the website, referring and exit pages, and the way you use and interact with the website and its content.
## 4. How We Use Your Information
We use the information we collect in various ways, including to:
* provide, operate, and maintain our website;
* provide our products and services to you;
* improve, personalise, and expand our website;
* understand and analyse how you use our website;
* develop new products, services, features, and functionality;
* communicate with you, including for customer service, service updates, and information relating to the website;
* send marketing and promotional communications where permitted by law;
* conduct internal record keeping and market research;
* process payments and returns;
* find and prevent fraud;
* detect crime, money laundering, or the collection of taxes and duties where required by law.
## 5. Legal Basis for Processing
We process your personal data only where we have a lawful basis to do so. These may include:
* **your consent**, for example where you opt in to receive marketing emails;
* **the performance of a contract**, where processing is necessary to provide services to you or take steps at your request before entering into a contract;
* **our legitimate interests**, such as improving our website, preventing fraud, or conducting internal administration, provided your rights do not override those interests;
* **compliance with legal obligations**, where we are required to process your data by law.
For direct marketing by email:
* where a **soft opt-in** applies, we may send you marketing about similar products or services where you have previously engaged with us and have not opted out;
* in other cases, we will obtain your **explicit consent** before sending electronic marketing.
You may withdraw your consent at any time by contacting us at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**.
## 6. Log Files
CEFAS UK follows a standard procedure of using log files. These files log visitors when they visit websites. This is a common part of hosting services’ analytics.
The information collected by log files may include:
* IP addresses;
* browser type;
* Internet Service Provider (ISP);
* date and time stamp;
* referring and exit pages;
* number of clicks.
This information is not linked to any information that is personally identifiable. It is used for analysing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
## 7. Cookies and Web Beacons
Like most websites, CEFAS UK uses cookies. These cookies are used to store information including visitors’ preferences and the pages on the website that the visitor accessed or visited.
We use this information to optimise users’ experience by customising our web page content based on visitors’ browser type and/or other information.
You can choose to disable cookies through your individual browser settings. However, doing so may affect the functionality of some parts of the website.
## 8. Who We Share Data With
We may share your data with the following groups of people where necessary:
* our employees, agents, and professional advisers, for the purpose of obtaining advice, administering our business, and providing services;
* third-party service providers who provide services to us and require access to personal data in order to support our website or services;
* third-party payment providers who process payments and refunds;
* relevant authorities, regulators, law enforcement agencies, or government bodies where disclosure is required by law or necessary to prevent fraud, crime, or tax evasion;
* a prospective purchaser or new owner of all or part of our business, subject to appropriate safeguards.
We do not sell your personal information.
## 9. Keeping Data Secure
We will use appropriate technical and organisational measures to safeguard your data. For example:
* access to accounts may be controlled by a unique username and password;
* we store your data on secure servers;
* payment details are encrypted using SSL technology where applicable.
We also have procedures in place to deal with any suspected data breach.
If you suspect any misuse, loss, or unauthorised access to your data, please contact us immediately at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**.
For more information about protecting yourself online, please visit **[www.getsafeonline.org](http://www.getsafeonline.org)**.
## 10. Data Retention
Unless a longer retention period is required or permitted by law, we will retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.
Even where data is deleted, it may remain on backup or archival systems for legal, tax, or regulatory purposes for a limited period.
## 11. Your Data Protection Rights
You have the following rights in relation to your personal data, subject to applicable law:
* **the right to access** – to request copies of the personal data we hold about you;
* **the right to rectification** – to request that inaccurate or incomplete data be corrected;
* **the right to erasure** – to request that we delete your personal data in certain circumstances;
* **the right to restrict processing** – to request that we limit the way we use your data in certain circumstances;
* **the right to object** – to object to our processing of your data, including processing based on legitimate interests or for direct marketing;
* **the right to data portability** – to request that we transfer your data to you or another organisation in certain circumstances.
To exercise any of these rights, please contact us at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**.
We will respond to valid requests within one month, unless a longer period is permitted by law.
If you are not satisfied with how we handle your personal data, you may complain to the UK Information Commissioner’s Office (ICO).
## 12. CCPA Privacy Rights
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to:
* request disclosure of the categories and specific pieces of personal data collected about you;
* request deletion of personal data collected about you;
* request that a business not sell your personal data.
If you would like to exercise any of these rights, please contact us at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**. We will respond within the time required by applicable law.
## 13. Children’s Information
Protecting children while they use the internet is important to us. We encourage parents and guardians to observe, participate in, and monitor their children’s online activity.
CEFAS UK does not knowingly collect personally identifiable information from children under the age of 13. If you believe that your child has provided this kind of information on our website, please contact us immediately at **[contact@cefasuk.com](mailto:contact@cefasuk.com)**, and we will use reasonable efforts to remove such information from our records promptly.
## 14. Links to Other Websites
This website may contain links to other websites. We have no control over the content, privacy practices, or policies of those websites and accept no responsibility for them.
You are advised to review the privacy policies of any third-party websites before using them.
## 15. Changes of Business Ownership and Control
CEFAS UK may, from time to time, expand or reduce its business, and this may involve the sale or transfer of control of all or part of the business.
Where relevant, personal data provided by users may be transferred as part of that transaction. Any new owner or controlling party will be permitted to use the data only for the purposes for which it was originally supplied and in accordance with this Privacy Policy.
We will take reasonable steps to ensure your privacy continues to be protected in such circumstances.
## 16. General
You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.
If any court or competent authority finds that any provision of this Privacy Policy is invalid, illegal, or unenforceable, that provision shall be deemed deleted to the minimum extent necessary, and the remaining provisions shall remain valid and enforceable.
No delay or failure by either party in exercising any right or remedy shall constitute a waiver of that or any other right or remedy.
This Privacy Policy shall be governed by and interpreted according to the laws of **England and Wales**, and any disputes arising in relation to it shall be subject to the exclusive jurisdiction of the courts of **England and Wales**.
## 17. Changes to This Privacy Policy
CEFAS UK reserves the right to update or change this Privacy Policy at any time where necessary or as required by law. Any changes will be posted on this page and will take effect immediately upon posting.
You should review this page periodically to ensure that you are happy with any changes.
## 18. Contact Us
If you have any questions about this Privacy Policy, your personal data, or would like to exercise any of your rights, you may contact us at:
CEFAS UK
Email: [contact@cefasuk.com](mailto:contact@cefasuk.com)
Website: book.cefasuk.com