The Chartered Institution of Wastes Management (CIWM) is committed to protecting your personal information. It’s your information, it’s personal, and we respect that. We also want to maintain the trust and confidence of every one of our members, employees, those who purchase our products and services, volunteers, as well as each visitor who uses CIWM’s website.
This policy (together with our terms of website use, terms and conditions and any other documents referred to on this website) gives you detailed information on when and why we collect your personal information, how we use it and how we keep it secure.
We may change this policy from time to time in accordance with the changes at the CIWM or to reflect changes to regulation or legislation. Please check this page regularly to ensure that you’re happy with any changes. By using our website and sharing personal information with us you are agreeing to be bound by this policy.
500 Quadra Pavilion Drive
Northampton Business Park
- Who are we?
We are known as CIWM, the professional membership body for resource and waste management. CIWM is a company incorporated by Royal Charter and registered in England (number RC000777); and is a charity registered in England and Wales (no. 109096) and in Scotland (no. SCO37903). The registered office address is 7-9 St Peter's Gardens, Marefair, Northampton, NN1 1SX.
CIWM comprises of its regional centres and its trading subsidiary CIWM Enterprises Ltd (Registered Company Number2731563), a wholly owned subsidiary of CIWM which trades only to raise funds for its parent company (collectively referred to herein as “the controllers”, “we”, “us”, “our”).
Please note that CIWM and CIWM Enterprises Ltd are the joint data controllers of your personal data and we are regulated by the Information Commissioner’s Office (ICO) in the UK.
- How do we collect information from you?
We only collect personal data that you want to provide to us or that is needed to provide (and improve) our service to you. For example, we collect your information:
- when you provide it to us directly by filling in forms on CIWM’s website, or when you correspond with us by phone, email or otherwise;
- when you register for a new account with us to become a member, affiliated organisation, purchase our products and services or it could be when you opt-in on the preference page to receive communication from us ( there is an option on this page so that you can unsubscribe at any time);
- when you provide permission to other organisations to share it with us (includes Facebook, Linked-in or Twitter etc.) or when you use our websites or other applications;
- when you have given it to a third party and have provided permission for them to pass your information on to us;
- What information do we collect about you?
We only collect the information that’s necessary to carry out our business, provide the service you’ve requested and to keep you informed.
The personal information we collect or you give us may include (but not be limited to) your prefix (Dr, Miss, Mr, Mrs, Mx, etc), name, contact information including address, email address phone number and fax, date of birth, gender, education history, employment information, information related to your professional qualifications, designations and memberships, payment information including debit/credit card details, and other information necessary in order to enter into a contract with us and for us to perform that contract.
You are not required to provide us with all of the Personal Data listed above, but if you do not provide the data we have marked as essential, we may not be able to effectively provide you with our products, services and information.
We may also collect other information with regard to each of your visits to our site and linked third party websites, which includes products and services, IP address, and information regarding what pages are accessed and when.
Our website, which has a URL starting https://, is a secure website which is scanned regularly (at least once per calendar quarter) for compliance with the credit card companies' security requirements. We do not store any financial information, including debit/credit card details, on our website. Where you choose to pay online via debit/credit card to purchase any of our services or products your payment will be processed and managed through our secure website and links automatically to an independent third party payment solution provider.
- How we use the information we collect?
We use this information:
- to manage your account with us and personalise your use of the website;
- to determine eligibility for membership, and other career development opportunities;
- to respond to your requests and inquiries;
- to serve relevant advertisements to you when you visit our sites or other third-party sites;
- to process your order or request for our products or services (For example, membership, training, webinar, events, directory listing etc.);
- to process payments, accounting and administration (including, but not limited to, membership subscriptions and renewals, registration fees, or processing the delivery and payments for any products or services that you choose to purchase from us);
- to evaluate your performance on learning courses and assist you in the tracking of your progress
- to carry out our obligations arising from any contracts entered by you and us (for example, if you have purchased any product or service with us) or where we are required to do this by law or other regulations.;
- to seek your views or comments on the services we provide;
- to notify you of changes to our services and policies;
- to send newsletters and communications about events and other products and services offered by CIWM and its trading subsidiary that we think may be of interest to you;
- to request your participation in surveys, focus groups, or other initiatives which help us to gather information used to develop and enhance our products and services;
- to manage reporting and business planning - we produce internal documents to monitor our own activities.
Depending on the communication preferences you have provided, we may contact you by email, phone, fax or mail about the subjects you have opted into. Further, if we contact you or you contact us by phone, email or online contact form on any of the CIWM’s website, the information you provide will be transferred and stored on our database application “IMIS” (Hosted by our third-party service provide ‘iFINITY’) for processing your request and for possible follow-ups to serve you better.
The legal basis for the processing of your personal data is your consent and/or any other applicable legal basis, such as our legitimate interest in engaging in commerce and offering products and services of value to you; where such processing is necessary to perform our contract with you or to take steps before entering into our contract with you; and/or where such processing is necessary to comply with our legal obligations, resolve disputes and enforce our contractual agreements;
Please note that, any consent you provide may be withdrawn at any time by following the contact methods listed in Section 13 and 14 below.
- Where do we store your data?
All the personal data we process is stored and processed by our staff in the European Economic Area ("EEA"). However, for the purposes of some IT hosting and maintenance (e.g., CIWM Job board) your information may be situated outside of the "EEA". In such circumstances, we ensure that your data is managed in accordance with the EU Data Protection laws and that any third party handling your data acts only on CIWM instructions and implements all technical measures necessary on an ongoing basis to keep your personal data secure.
If you wish to know more about international transfers of your personal data, you may contact our Compliance team at firstname.lastname@example.org.
- How long do we retain your data?
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations.
We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us or to comply with any relevant legal reasons. We may choose to delete your data and any related CIWM account at any time without notice to you should we determine that we do not need to retain your data any longer.
- Disclosure of your information?
We will not sell or rent your information to any third parties.
We will not share your information with any third parties for marketing purposes.
- Hosting providers for the secure storage and transmission of your data;
- Learning technology and online event providers including our e-learning courses and webinars, for the delivery and improvement of web events and learning programs and the tracking of your progress;
- Database software providers for the management and tracking of your data (internal use);
- Regulatory bodies such as the Environment Agency;
- Individuals including interviewers for delivering interviews in respect of applications to upgrade your membership status; tutors and professionals from universities and other educational institutions, who assist us in delivering training; courses and/or marking course assessment papers;
- Print house for delivery of our monthly journal;
- Payment solution providers for the secure processing of payments you provide to us;
- Technology providers who assist in the development and management of our website and its functionality;
- Volunteers in CIWM’s regional centre who perform various functions related to delivering locally based events on our behalf;
- Legal and compliance consultants, such as external counsel, external auditors, or tax consultants;
- Our subsidiaries (i.e. CIWM Enterprises Ltd – the trading subsidiary of CIWM) and business partners where necessary;
- Legal and/or statutory authorities and agencies, if we receive a complaint about any content you have posted or transmitted to or from one of our sites, to enforce or apply our Terms & Conditions or if we believe that we need to do so to protect and defend the rights or property or safety of CIWM, our websites or the personal safety of our employees or visitors and for other lawful purposes;
- Further we may disclose aggregate statistics about our site visitors, supporters, customers and sales to describe our services and operations to prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics won’t include any personally identifying information;
- How we protect your personal information?
We use reasonable measures to strive to safeguard and secure the personal data we collect. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. Technology, such as, but not limited to, Transport Layer Security (TLS) and Secured Socket Layer (SSL), is used to enhance security and reduce risk of loss.
Please note that any transmission of personal information to us is at your own risk. Further, our security practices, processes or technology do not guarantee absolute security of your information and you should take all normal personal precautions such as, but not limited to, not sharing passwords, closing browsers, and not using public networks (e.g., internet cafes, etc.).
We may use the information you provide to us and which we obtain from other sources to analyse your personal information and create a profile of your interests and preferences so that we can contact you with products, services and information which you might be most interested in. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risks. This practice is called “profiling”, which involves making automated decisions about you based on this information in order to better enable us to tailor our interactions with you to make them more relevant and interesting. You may object to such profiling at any time by contacting us (see Your Rights below Section 13).
- Use of 'cookies'
- Links to other websites
- Children’s privacy
We do not knowingly process any information of children aged 16 or under.
- Your rights
You have the right to ask CIWM to provide you with all the information it stores on you. If you wish to access your personal data you can click on and log into “View/Edit Account” where you will have the opportunity to update your personal data or preferences. You have the right to ask CIWM to rectify, block, complete and delete your personal data, to restrict its use, and to port your data to another organisation. You have the right to request additional information about the handling of your personal data. You also have the right to object to the processing of your data by CIWM in some circumstances and, where we have asked for consent to process your data, to withdraw this consent. Additionally, you may contact our Compliance team at email@example.com if you would like assistance with any of the aforementioned rights.
There are exceptions to these rights, however. For example, access to personal data may be denied in some circumstances if making the information available would reveal personal information about another person or if CIWM is legally prevented from disclosing such information. In addition, where CIWM can demonstrate that it has a legal requirement to process or keep your data, CIWM may be able to retain the data even if you withdraw your consent.
Any excessive access request may be subject to a fee to meet our costs in providing you with details of the information we hold about you.
- How to opt-out/unsubscribe for our marketing & promotional check box
Please note that if you select the unsubscribe all link this will not affect CIWM’s obligation (legitimate interest, legal and contractual obligations) to send the key member benefit communications and other administrative communications to members and customers.
- Complaint to our supervisory authority
If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Controller on the above address or e-mail firstname.lastname@example.org, who will investigate the matter. If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can complain to the Information Commissioner’s Office (ICO) https://ico.org.uk
This policy was last updated: May 2018