Cifas Homepage
NewsroomCareersContact Us

Website Privacy Notice

If you have been referred to this page when applying for services or finance, or in the context of being employed by or working for an organisation, then please go to the Fair Processing Notices for Cifas' Databases page instead.

1. Introduction and general terms

This website is operated by Cifas, a company registered in England and Wales under company number 02584687 and with our registered office at 6th Floor Lynton House, 7-12 Tavistock Square, London WC1H 9LT (“Cifas”, “we”, “us” or “our” in this policy).  Where we decide the purpose and means for which personal data you supply through this website is processed, we are the “data controller.”

If you have any questions or comments about this privacy policy please contact our data protection officer: 
Cifas 
6th Floor, Lynton House
7 - 12 Tavistock Square
London
WC1H 9LT

or use our general enquiry form.

Cifas is committed to safeguarding your personal information when you visit our website. This privacy policy relates to our use of any personal information you provide to us through this website and any other electronic communications networks such as emails.

This privacy policy explains the following:

Whenever you provide personal information, we are legally obliged to use your information in line with the General Data Protection Regulation and the Data Protection Act 2018 (referred to collectively in this privacy policy as “data protection legislation").

This website contains hyperlinks to websites owned and operated by third parties. These third party websites have their own privacy policies, including cookies, and we urge you to review them. They will govern the use of personal information you submit or which are collected by cookies whilst visiting these websites. We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of them is at your own risk.

2. What information will Cifas collect about me?

We collect and process the following information which may include your personal data.  

Information about your use of our services

When you contact us regarding one of our services, such as Training or Speakers for Events, the forms you complete may include information about you. This can include your name as the contact point for an organisation, your email address and the organisation's address.

Job applications

When you submit a job application through our website, the application forms we ask you to complete include personal data about you.

If you are successful, we will retain the information in accordance with your employment contract and our internal data protection policies, which will be notified to you in the course of the application process.

Your enquiries

When you email us for further information on topics such as Internal Fraud or Protective Registration, you will be providing us with your email address and any other information you include in the message.

How you use our website (analytics)

Our website provider uses cookies to collect standard internet log information, such as internet protocol (IP) addresses, and responses to polls we might post on the website, to help analyse how visitors use the site and to compile statistical reports on website activity. Our site also uses Google Analytics and you can find out more about "How Google uses data when you use our partners' sites or apps". To learn how to opt out of Google Analytics please visit Google Analytics Opt-out Browser Add-on or your Google Ads Settings. 

We may use third party analytics providers, in particular, Google Analytics.  Before we do so, we will ask for you to give your consent.

Financial transactions

All our website financial transactions are handled through our payment services provider, Protx, a division of Sage (UK) Limited.

All content you submit to us

If you send offensive, inappropriate or objectionable content to cifas.org.uk, or otherwise engage in any disruptive behaviour on cifas.org.uk, Cifas may process your personal data as might be included in such message to stop such behaviour.

Cifas will not (and will not allow its website provider to) use the information and/or any statistical analytics tool to track or to collect any personally identifiable information about visitors to our site. We will not associate any data gathered from this site with any personally identifying information from any source.

Where Cifas proposes using your personal information for any other uses we will ensure that we notify you first. You will also be given the opportunity to withhold or withdraw your consent for uses other than those listed above.

3. Your rights in relation to personal data which we process relating to you

You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest.

(i) to ask for a copy of data we are processing about you and have inaccuracies corrected

(ii) to object to us processing data about you

You can ask us to restrict, stop processing, or to delete your personal data if:

(iii) to obtain a machine readable copy of your personal data, which you can use with another service provider

(iv) to make a complaint to the Information Commissioner’s Office 

3. Will Cifas share my personal information with anyone else?

We keep your information confidential, but may disclose it to any of our employees, officers, agents, suppliers or subcontractors insofar as it is reasonably necessary for the purposes as set out in this privacy policy. 

We will share information with our payment services provider, Sage Pay Europe Limited, and Google, Inc., as described in section 2.

In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

Except as provided above, we will not provide your information to third parties.

4. What if I am aged 16 or under?

If you are aged 16 or under, please get your parent/guardian's permission beforehand whenever you provide personal information through the Cifas website. Users without this consent are not allowed to provide us with personal information.

5. How long will Cifas keep my personal information?

We will hold your personal information on our systems for as long as is necessary for the relevant service, or as otherwise described in this privacy policy.

6. Security of my personal information

We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

7. Changes to Cifas's privacy policy

This privacy policy may be updated from time to time so you may wish to check it each time you submit personal information through the website. The date of the most recent revisions will appear on this page.

8. Information about cookies

A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser. 

Find out more about the use of cookies

We use cookies to identify you when you visit this website. 

Most browsers allow you to turn off cookies or to receive a warning before a cookie is stored on your hard drive.

Please refer to your browser instructions or help screen to learn more about how to do this. If you decide to disable any cookies we place on your computer, you may not be able to use certain services or facilities on the website.

For details of how Cifas uses cookies, please read the Cookie Notice.

9. Information about calls

Cifas records calls on the basis of our legitimate interests in staff training, security, and maintaining the quality of service. The recordings are stored in the UK and will be kept for 30 days as standard. Recordings are only accessible to Cifas and our advisors where necessary. We also keep a log of the phone number you’re calling from along with the date and duration of the call. You have rights in relation to the processing of personal data, including the right to complain to the ICO. 

Last updated: June 2022