BSECA Privacy Policy

Privacy Policy & Data Protection

1. Introduction
The British Society of Evaluation and Certification Auditors (BSECA) is committed to protecting the privacy and personal data of individuals and organisations that engage with its services and platforms.
This Privacy Policy explains how BSECA collects, uses, stores, and protects personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).
2. Scope of This Policy
This policy applies to:
• Website visitors
• Applicants for accreditation or approval
• Approved organisations and professionals
• Users of BSECA’s online platforms
3. Information We Collect
BSECA may collect the following categories of information:
• Personal identification details (e.g. name, contact details)
• Professional and organisational information
• Application and accreditation-related data
• Uploaded documents submitted during application or review processes
• Technical data related to website or platform usage
Data collection is limited to what is necessary for legitimate operational and governance purposes.
4. How We Use Personal Data
Personal data may be used for:
• Processing accreditation and approval applications
• Conducting reviews, evaluations, and governance activities
• Communicating with applicants and approved parties
• Maintaining records and audit trails
• Improving services and platform functionality
• Meeting legal and regulatory obligations
BSECA does not sell or trade personal data.
5. Legal Basis for Processing
BSECA processes personal data based on one or more of the following legal grounds:
• Consent provided by the data subject
• Performance of contractual or pre-contractual obligations
• Compliance with legal obligations
• Legitimate interests related to governance and accreditation activities
6. Data Storage and Security
BSECA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
Data is stored securely and access is restricted to authorised personnel only.
7. Data Sharing
Personal data may be shared only where necessary with:
• Internal review and governance teams
• Authorised service providers supporting platform operations
• Legal or regulatory authorities where required by law
All data sharing is conducted under appropriate confidentiality and security arrangements.
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including governance, audit, and legal requirements.
9. Data Subject Rights
Data subjects have the right to:
• Access their personal data
• Request correction of inaccurate data
• Request deletion of data where applicable
• Object to or restrict certain processing activities
• Lodge a complaint with a relevant data protection authority
Requests may be submitted using the contact details provided on this website.
10. Cookies and Website Analytics
BSECA may use cookies or similar technologies to improve website functionality and user experience.
Users may manage cookie preferences through their browser settings.
11. Policy Updates
This Privacy Policy may be updated from time to time to reflect legal, regulatory, or operational changes.