Privacy notice

Data protection

The Chartered Trading Standard Institute group of companies (CTSI) are notified and registered with the Information Commissioner’s Office (ICO) under data protection legislation as a Data Controller.

We will use information and personal data supplied solely for the purpose of providing the services, products and consumer advice services for which the information is given, and in fulfilling our obligations for supplying these and complying with our Charter, bye-laws and financial and regulatory requirements.

We process personal data in compliance with data protection legislation. Your information will only be retained and shared within the CTSI companies, suppliers, regulatory and other agencies as appropriate to meeting our obligations. We will never sell your data to any company, and we store it safely and securely.

Data Subject rights

The General Data Protection Regulation provides the following rights for individuals in respect of the processing of their personal data.

1. The right to be informed

Individuals have the right to be informed about the collection and use of their personal data.

2. The right of access

You can request to be provided with details of your personal data we hold, through raising a Subject Access Request.

3. The right to rectification

You can have inaccurate personal data rectified, or completed if it is incomplete.

4. The right to erasure

In certain circumstances you can request to have personal data erased. The right to erasure is also known as ‘the right to be forgotten’.

5. The right to restrict processing

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances. When processing is restricted, the company can still store your personal data, but not use it.

6. The right to data portability (to other service providers)

Allows you to obtain and reuse your own personal data for your own purposes across different services. It allows you to be provided with your data and move, copy or transfer personal data from one IT environment to another. It can only be transferred where we are the Data Controller and where it is for use by another Data Controller. It will be made available in a commonly used electronic format.

7. The right to object

You have the right to object to the processing of your personal data in certain circumstances. Individuals have the right to stop their data being used for direct marketing.

8. Rights in relation to automated decision making and profiling.

We do not undertake any automated decision making based on the processing of personal data.

Subject Access Request

The right of access to your personal data is made through a Subject Access Request. This will normally be responded to within one month of the identity of the Data Subject which the request is for being confirmed.

To make a Subject Access Request please contact us electronically or in writing. If you can identify that this is a Subject Access Request this will enable us to more easily respond to your request. These should be sent to:

• email to: [email protected]. Please mark as Subject Access Request or SAR
• posted to: Data Protection, CTSI, 1, Sylvan Court, Sylvan Way, Southfields Business Park, Basildon, Essex, SS15 6TH

Making changes to your data we process

To make changes to your personal data we hold, including to update your information, restrict processing or delete your information, contact us electronically or in writing. Details of your request should be should be sent to:

• email to: [email protected]
• posted to: Data Protection, CTSI, 1, Sylvan Court, Sylvan Way, Southfields Business Park, Basildon, Essex, SS15 6TH

Further information on data protection

The ICO is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

For more details on data protection related legislation, including your rights, and reporting a concern or complaint about information rights and data protection, visit the ICO website.

Website privacy policy

See our website privacy statement.