The company recognises its responsibility to protect the privacy of all individuals. This Privacy Notice outlines CMC’s information security handling practices in accordance with the UK Data Protection Act 2018 and the EU General Data Protection Regulations (GDPR).

We will only process your information where:

• You have given your consent to such processing by voluntarily providing us with your information, which you can withdraw at any time.
• The processing is necessary to provide our services to you.
• The processing is necessary for compliance with our legal obligations.
• The processing is necessary for our legitimate interests, or those of any third-party recipients that receive your personal information.

We typically process the following types of personal information:

• Contact name, email, address and phone number.
• Employment verification information, including employment references,  identity and criminal record checks.
• Information to support you working with us, including contractual information and provision of benefits.

You may choose to share your personal data with us by making an online enquiry or by sending us an email, by completing a survey, or by providing your details by letter, by telephone, electronically or by completing an internal form to support your employment or contractual status with the company.

This may include subscribing to any of our services; requesting newsletters, obtaining downloads, registering for events and online webinars, providing your details to us at events, contacting us through social media channels, accounting and administration (business to business), or applying for an opportunity in which you may be asked to provide your name, address, email and contact numbers, etc.

If you contact us, we may keep a record of that correspondence and we may retain details of your visits to our website including, but not limited to, traffic data, location data, weblogs and other communication data and a record of the resources you access.

We may keep a record of your website preferences and interests, other information relevant to customer surveys, offers made by us and details of the transactions you complete through the website and the fulfilment of your orders.

• We will use your personal information to contact you in response to your enquiry or application, to share information with you, to contact you about future opportunities which may be of interest to you, or to support your continued employment, customer placement, or contractual arrangements with CMC.
• We will store your contact data for recording purposes and when appropriate to provide you with information regarding other CMC products and services that you may be legitimately interested in. 
• We may also contact you to ask you to complete surveys that we use for research purposes, although you do not have to respond to them. You have the option to unsubscribe from these communications at any time. 

4.1 Responding to vacancies and processing of job applications

• The company maintains a 7-year data retention policy. Business records may be maintained for longer periods if the company has a legitimate reason to support this retention.  
• Personal data is deleted when it is no longer required by the company to support business, legal, HR or contractual requirements.  
• Staff records are maintained for the duration of employment plus a further 7 years once employment has ceased.  
• Data processed on CMC’s behalf by Broadbean Aplitrak, Daxtra and DocuSign is automatically deleted by these providers within 30 days of receipt. 
• MailGun records are deleted within 3 days.

• Where we have a legal basis to do so we may disclose your personal information to our customers, third party contractors and suppliers; including but not restricted to benefit providers, travel providers, IT service, equipment and data hosting providers and external business advisors, such as lawyers, accountants and auditors. 
• Minimal data transfer takes place within our company, but please be aware that employee and contractor personal data may be shared with third parties and transferred to their storage and sub-processing destinations (which may be outside the UK) to support resourcing, contractor placement and consultancy delivery arrangements with our customers.  You will be informed before this takes place. Please be assured that the company has contractual agreements in place with these sub-processors which include data protection standard clauses. A list of sub-processors used by us can be provided on request. 
• In the event of sale, merger, de-merger or other reorganisation of the business, your personal data will be shared and processed in accordance with the legitimate interests of CMC and the relevant third parties. 
• In all cases data sharing will only take place when appropriate contracts, including confidentiality and/or data transfer obligation where required are completed with the planned recipient/s of your data.
• We will disclose your personal information if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of use, or to protect the rights, property, or safety of our companies, our customers or others. This includes exchanging information with other companies and organisations for the purpose of fraud protection and credit risk reduction, or to comply with UK Government regulations. 

We make every effort to maintain the accuracy and completeness of your personal information; however, you can assist us by contacting us if there are changes to your personal information, or if you become aware that we have inaccurate personal information relating to you.

We will not be responsible for any losses arising from inaccurate, inauthentic, deficient or incomplete personal information that you or a person acting on your behalf provides to us.

You have the right to contact us at any time in relation to your rights below, which include:

• The right to be informed – be notified of how we process your data.
• The right of access – request a copy of the data we hold about you.
• The right to rectification – request that we amend any incorrect or incomplete data
• The right to erasure- request that we erase your data 
• The right to restrict processing – request that we stop processing your data
• The right to object – to object to us processing your data

We do not use automated decision-making or profiling. 

We can provide you with a portable copy of the data we process on your behalf on your request.  

Please email or write to the Data Protection Lead, CMC Partnership Consultancy Ltd using the following address: Excalibur House, Priory Drive, Newport, NP18 2HJ. 

You can at any time tell us not to send you marketing communications by email, by using the contact information above, or by clicking on the unsubscribe link within the marketing emails you may receive from us. 

If you want to make a complaint, please contact our data protection lead, Jane McIntosh, using the contact details above or via privacy@consultcmc.com. If you wish to make a complaint about the way we have handled or managed your data, and/or if you are not happy with the responses you have received from us, please contact the ICO directly.  CMC Partnership Consultancy Ltd is registered as a data controller with the ICO ZA469055.  

• We are committed to ensuring that your information is secure. We have reasonable security measures in place in order to protect your personal information from unauthorised access, use, alteration and disclosure.

Please note

Your personal information will only be seen by those who have a legitimate reason for seeing it.

Third parties who are authorised to access, store and manage our data sets (which include your personal information records) are bound by confidentiality agreements.

By submitting your personal data, you agree to this transfer, storing and processing.

• Our websites and the communications you receive from CMC Partnership Consultancy Ltd may contain links to other websites of interest. If you use these links, please be aware that we do not have any control over that other website and therefore we cannot be held responsible for the protection and privacy of any information which you provide whilst visiting such sites. Such sites are not governed by this Privacy Notice. Please exercise caution and look at the privacy statement applicable to the website in question.

When you access our website, use any of our mobile applications, or open electronic correspondence or communications from us, our servers may record data regarding your device and the network you are using to connect with us, including your IP address. An IP address is a series of numbers which identify your computer, and which are generally assigned when you access the internet. We may use IP addresses for system administration, investigation of security issues, and compiling data regarding use of our website, including the completion of webforms and downloads, and / or mobile applications.

A cookie is a small file which asks permission to be placed on your computer records. Most browsers are initially set up to accept HTTP cookies. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Cookies on the company’s website www.consultcmc.com are used for a variety of different purposes, but generally speaking their use breaks down into the following categories:

• Strictly Necessary Cookies: These are required for the operation of the website. They include, for example, cookies that enable approved users to log into secure areas of the website.
• Analytical/Performance Cookies: We use Google Analytics to gain insight into how our website is used, analysing information on pages visited, geographical location of our visitors, time spent on the website and the number of times a link has been clicked, amongst other useful anonymous statistics. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.  _gat, _gid and _ga are enabled. By using this website you consent to the processing of data about you by Google in the manner and for the purposes set out above.
• Functionality Cookies: These improve the functional performance of our website and make it easier for you to use. For example, such cookies are used to remember that you have previously visited the website and asked to remain logged in to it if you have a user account. Cookies are also used by us to protect the security of this site, for example by blocking multiple form submissions. In order to give the best possible browsing experience, we use session cookies to temporarily store data. Session cookies are used to keep track of your activity as you move from page to page through the website. Our session cookies do not collect any personal/traceable data about you and are automatically deleted when you close your browser.
• Targeting Cookies: These record your visit to websites identifying the pages you have visited and the links you have followed. Targeting cookies are not enabled on this site.

To ensure that you are in control of your privacy at all times, all web browsers give you the option to disable cookies. Most browsers are initially set up to accept HTTP cookies. For more information about HTTP cookies and how to disable them the following links may be helpful, or you can use the ‘Help’ option in your browser which should tell you how to stop accepting new cookies.

Cookie settings in Internet Explorer

Cookie settings in Firefox

Cookie settings in Chrome

Cookie settings in Safari web and iOS

Useful Links

If you would like to find out more about privacy, cookies and their use on the internet you may find the following links useful:

Microsoft Cookies guide

All about Cookies

The Information Commissioner’s Office