This policy was last updated on 24 May 2018.
As an Informi user, there are many ways you can use the services we offer, some of which require you to share your personal data with us. In these instances, we act as the data controller, making us responsible for deciding the purpose and means for dealing with your personal data.
Informi is an ATSL brand. ATSL is a wholly owned subsidiary of AAT (Association of Accounting Technicians), a company limited by guarantee (No. 1518983), registered charity (No. 1050724), (“Informi”,“we”, “us”, “our”) and is committed to the privacy of your personal data.
- what personal data we collect about you in the course of your engagement with our services, why we collect it, who it goes to and how long we keep it
- how we use your personal data
- how we protect your personal data
- your legal rights in respect of your personal data, including how to access and update the information we hold about you.
You can navigate to the relevant sections of the policy by clicking the links in the sidebar.
By continuing to use our services, you agree to our use of your personal data on the terms outlined in this policy.
About the policy
This policy provides you with information on how we’re using your information and the actions we take to protect your privacy.
On specific occasions, we may provide you with additional information when we collect your personal data. This policy is designed to supplement any specific notices and they should always be read in conjunction with each other, so you’re fully aware of how and why we’re using your data.
If you have an Informi account, it’s important that your personal data is accurate and up to date, so we can effectively provide our services to you. You can check and update your details by logging in to your Informi account.
What data are you collecting?
We collect personal data, meaning data that can be used to identify you. This can include, among other things, any personal data you provide to us through our website, informi.co.uk and via your communications with us through email and in person.
Some of the services you receive from us may require the collection, storage and transfer of different kinds of personal data. To find out more about the ones that relate to you, select the relevant category from the section “Specific information about my data” below.
Why are you collecting my data?
We can only process your personal data if we have a legal basis to do so. In addition to the specific instances where you’ve provided your consent, we may also process your personal data when it’s necessary for one or more of the following:
- meeting our legal obligations
- our legitimate interests
- performing our contract with you.
To find out what we mean by each of these legal bases, and to see which purposes and legal bases concern you, select the relevant category from the section “Specific information about my data” below.
On occasions, it may be necessary to process your data for reasons unrelated to those outlined in this policy. On these occasions, we’ll notify you and explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Will my personal data be shared with anyone?
In general, we don’t sell or share your personal data with third parties. However, it might be necessary for us to do so on occasion, to deliver the required service to you or to comply with our legal obligations. If so, we’ll always tell you first.
For more information on who we might share your data with, select the relevant category from the “Specific information about my data” section below.
We take your email and communication privacy seriously and will not pass your contact details to third parties for marketing purposes without your prior consent. If you have an Informi account, you can login and change your communication preferences at any time.
Alternatively, if you’re subscribed to our fortnightly newsletter you can unsubscribe at any time by clicking on the ‘Unsubscribe’ link in the email footer.
How long will you keep my data?
We keep your data for as long as it’s necessary to meet the relevant purposes for which we’ve collected the data, including for the purpose of satisfying any legal, accounting or reporting requirements.
To determine the appropriate length of time for holding your data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm, from unauthorised use or disclosure of your personal data, the purpose for which we process your data and whether we can achieve those purposes through other means, along with the applicable legal requirements.
We may need to keep different types of information about you for different time periods, depending on your circumstances. For more details on how long we keep your data, select the relevant category from the “Specific information about my data” section below.
As a general rule, Informi will retain all email correspondence in live systems for up to 1 year and in archive for 10 years.
And in all cases, data may be retained for longer for research and archiving purposes or if it cannot be deleted for legal, regulatory, verification of achievements, statistical or technical reasons. In these cases, steps will be taken to ensure that data is held securely and processing is restricted.
Where do you get my data from?
In general, you provide your personal data to us directly, when you communicate with us through various channels, such as our website, social media channels, email or face to face meetings with our representatives. The instances when you might provide us with your personal data include when you:
- register as an Informi account holder or subscribe to our fortnightly newsletter
For more details on how else we might receive your personal data, select the relevant category from the “Specific information about my data” below.
Specific information about my data
The reasons and methods for collecting, using and transferring your personal data varies depending on why and how you’re using our services. Please select the relevant category from the below list to see more specific information regarding how we process your personal data in connection with the services you receive from us.
- an Informi account holder
- You’ll have supplied us with your email address, first name, last name and a password in order to set up and access your own personalised account. This will allow you to access to exclusive downloads, create your own reading lists, and receive the latest updates from Informi. Through your profile, you’ll be able to log further information about your business which may be used by us to tailor the content and support we provide – for example, personalised email communications.
- an Informi email subscriber
- You’ll have supplied us with your email address either by signing up on the Informi website or consenting to be contacted by us on third-party sites such as Facebook. This will subscribe you to receive our newsletter email.
Will my personal data be sent abroad?
If you are a UK-based member of our services, we will generally only process your personal data within the EEA. However, some of the external parties we work with to provide our services to you are based outside of the European Economic Area (“EEA”). Such parties include third party service providers.
This may require us to occasionally transfer some of your personal data outside the EEA (including to countries which may not be subject to equivalent standards of data protection laws). We’ll ensure that any such international transfers are made subject to appropriate safeguards (including the use of EU Commission approved standard contractual clauses) as required by data protection laws to ensure a similar degree of protection is afforded to your personal data.
You may request further information on the specific recipient countries of your personal data or the legal rules and copies of the model clauses in use for transferring data outside the EEA by contacting us at the details below (see “Contact us”)
How do you protect my data?
We’re committed to protecting the security of your personal data, and as such we’ve put in place appropriate measures to:
- prevent your data from being accidentally lost, used or accessed in any unauthorised way, altered or disclosed
- deal with, and notify you and any applicable regulators, of any suspected personal data breaches where we’re legally required to do so
- limit access to your personal details to only those employees, agents, contractors and other third parties who have a business need. They will only be able to process your personal data on our instructions and will be subject to a duty of confidentiality.
Informi uses secure HTTPS protocol. This means that the transmission of information, including any payment information, is encrypted and protected using Secure Sockets Layer (SSL).
What are my rights?
You may have the right to:
- Request access to your personal data. You’ll be able to request a copy of the personal data we hold about you and check that we’re processing it legally.
- Request correction of your data. You’ll be able to correct and update any incomplete or inaccurate data we hold about you, however, we may need to verify the accuracy of the new data you provide.
- Request erasure of your personal data. You’ll be able to ask that we delete or remove your personal data where there is no good reason for continued processing. You’ll also have the right to ask that we delete or remove your personal data where an objection to processing has been successful, where we may have processed your data unlawfully or where we’re required to delete data to comply with local law. We will ensure your data is deleted within 30 days of your request.
- Object to the processing of your data. You’ll be able to request that we stop using your personal data:
- for direct marketing purposes
- which is being processed on the basis of legitimate interest (see your relevant category in the ‘Specific information about my data’ section above, when you feel the processing impacts on your fundamental rights and freedom. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which would override your request.
- Request restriction of processing your personal data. This enables you to ask us to suspend processing your personal data in the following scenarios:
- if you want us to establish the data’s accuracy
- where our use of the data is unlawful but you don’t want us to delete it
- where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend a legal claim
- you’ve objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
- Right to withdraw consent, where we’re relying on consent to process your personal data. This will not affect the lawfulness of any processing carried out prior to your request. If you withdraw your consent, we may not be able to provide certain products or services to you. We’ll advise you if this is the case when you request to withdraw your consent.
What are the requirements and consequences of making a request?
Requests relating to changes to our handling of your personal data will generally be free of charge, and we’ll aim to respond to all requests within one month. However, please note:
- we may need you to supply additional information to confirm your identity and ensure your right to access your personal data (or exercise your rights). This is to ensure that personal data is not disclosed unlawfully
- we may need to contact you to help speed up the resolution of your request
- an administrative fee may be charged for any unfounded, repetitive or excessive requests, or for additional copies of personal data you request
- occasionally, it may take longer than one month to resolve your request, but in these cases we’ll notify you and keep you updated on timing
- any requests to restrict or delete your data will limit your ability to access our services and products, and/or result in ending your relationship with us.
Please note that these rights apply by law, only to certain types of personal data and processing, and may not be applicable to your circumstances.
If you have any concerns about how we handle your data, please contact us (see details below). If you are not satisfied after we’ve tried to resolve your issue, you’ll be entitled to lodge a complaint with our data protection regulator, the Information Commissioner’s Office (ICO). Please see the ICO website for further details, www.ico.org.uk
If you wish to exercise any of the above rights, you’ll need to contact us in writing.
Third party websites
Informi, Data Protection
140 Aldersgate Street