We may ask you for proof of identity when making a request to exercise any of these rights.  We do this to ensure we only disclose information when we know we are dealing with the right person.

We will not charge you for any of these requests unless we think your request is unfounded, repetitive or excessive. Where a fee is necessary, we will inform you before we proceed with your request.

We aim to respond to all valid requests within 30 days. It may however take us longer if the request is particularly complicated or you have made several requests. We will always let you know if we think a response will take longer than one month. To speed up our response, we may ask you provide more detail about what you want to receive or are concerned about.

We may not always be able to do what you have asked, for example, if it would impact the duty of confidentiality we owe to others, or if we are otherwise legally entitled to deal with the request in a different way.

Accessing information

You can ask us to:

  • confirm whether or not we have and are using your personal information
  • get a copy of your personal information

BCS will not provide copies of any emails sent to or received from yourself as you already have received this information. We also will not provide any internal emails or documents that may contain your name unless the information contained in the email is:

  • significantly biographical with regards to you as the data subject and/or
  • you as the data subject were the focus of attention in the document.

We will not release your examination paper or script as it may compromise the examination papers which may be re-used. For the purposes of this policy an examination paper is defined as a set of questions evaluating skill or knowledge which the candidate answers during the examination and an examination script is defined as a booklet in which a candidate records answers to examination questions.

Correcting personal information

You can ask us to:

  • correct any information about you which is incorrect. We will be happy to correct such information but will need to verify the accuracy of it first.

Erasing personal information

You can ask us to:

  • erase your personal information if you think we no longer need to use of for the purpose we collected it from you
  • erase your personal information if you have either withheld your consent to use using your information (if we originally asked for your consent to use your information), or exercised your right to object to further legitimate use of your information, where we have used it unlawfully or where we are subject to a legal obligation to erase your personal information

We may not always be able to comply with your request, for example, if we need to keep using your personal information in order to comply with our legal obligations or where we need to use it to establish, exercise or defend legal claims.

Withdrawing consent

Where we have asked for your consent to use your personal information, you will always have the right to withdraw your consent. Please contact us if you want to do this.

Objecting to the use of personal information

You can object to any use of your personal information which we have justified on the basis of our legitimate interest, if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interests in using the information. If you raise an objection, we may continue to use the personal information if we can demonstrate that we have compelling legitimate interests to use the information. You can also object to the use of your personal information for direct marketing purposes. We explain in the marketing section of this privacy policy more about our approach to direct marketing.

Restricting our use of personal information

You have the right to request that we restrict the further processing of your personal data in certain circumstances. This right arises where, for example, you have contested the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests or the processing is unlawful and you elect that processing is restricted rather than deleted. If you would like to submit a request to restrict the processing of your data, please contact us.

Requesting a transfer of personal information

You can ask us to:

  • provide your personal information to you in a structured, commonly used, and machine-readable format,
  • or you can ask to have it transferred directly to another data controller (i.e. another organisation).

You can only do this where we use your personal information in order to perform a contract with you, or where we asked for your consent to use your personal information. This right does not apply to any personal information which we hold or process based on our legitimate interest or which is not held in digital form.