Privacy Policy

At ACREDA, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with us online or offline, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws worldwide.

1. Data We Collect

We may collect the following types of personal data from you:

• Personal Identification Information: Name, email address, phone number, mailing address, job title, company name.
• Technical Information: IP address, browser type, device information, operating system, and referral URL.
• Usage Data: Pages visited, time spent on our website, interaction with our content, and preferences.
• Communications Data: Any information you provide when you contact us via email, web forms, or other communication methods.

2. How We Use Your Data

We process your personal data for the following purposes:

• Service Provision: To provide you with information, products, or services that you request from us.
• Communication: To respond to your inquiries, send newsletters (with consent), and provide updates about our work and services.
• Improvement of Services: To analyze and enhance the performance of our website, services, and marketing efforts.
• Legal Compliance: To comply with our legal obligations, including GDPR and other global privacy regulations.
• Marketing: To provide information about relevant events, services, and updates, only where you have given explicit consent.

3. Legal Basis for Processing Data

We process your data under the following legal grounds:

• Consent: Where you have provided your consent for us to process your personal information.
• Contractual Obligation: To perform the services or deliver the products you have requested.
• Legal Obligation: To comply with legal requirements, including but not limited to GDPR.
• Legitimate Interest: To enhance and improve our services, provided that your interests and fundamental rights do not override our legitimate interests.

4. Sharing Your Data

We do not sell or rent your personal data to third parties. However, we may share your data with:

• Service Providers: Third-party vendors who provide services to us, such as hosting, email delivery, or analytics. These vendors are required to handle your data securely and in accordance with applicable laws.
• Legal Authorities: When required by law or legal process, we may disclose personal information to law enforcement, government officials, or other relevant third parties.

5. Data Storage & Security

We take the security of your personal information seriously and implement industry-standard security measures to protect against unauthorized access, alteration, or destruction of your data. Personal data is stored securely on servers located in United Kingdom. We will retain your data for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

6. International Transfers

As a global organization, we may transfer your personal data to countries outside of your jurisdiction. When transferring personal data internationally, we ensure that appropriate safeguards are in place, in compliance with GDPR and other relevant privacy regulations. These safeguards may include standard contractual clauses or the reliance on adequacy decisions by the European Commission.

7. Your Rights Under GDPR and Other Privacy Laws

Under GDPR and other global privacy laws, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request corrections to inaccurate or incomplete data.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where consent is the basis for processing, you have the right to withdraw consent at any time.

To exercise these rights, please contact us at [insert contact email].

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to provide functionality, analyze website performance, and deliver relevant content. You can manage your cookie preferences through your browser settings. For more detailed information on our use of cookies, please see our [Cookie Policy].

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technology. We will notify you of any significant changes by posting the revised policy on our website with an updated effective date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us at:

Email: DPO@acreda.org
Phone: 01902 683 752

Sept 2024