Privacy notice - Clinical Training Academy (external delegates)
About us
Who we are
When we say Bupa in this notice, we mean Bupa Insurance Services Limited, the data controller responsible for the use and protection of your personal information.
Bupa UK’s Digital and Data Protection Team can be contacted by email at [email protected] or by post at the following address: Bupa, Digital and Data Protection Team, 1 Angel Court, City of London, EC2R 7HJ, United Kingdom.
How we collect your personal information
From you
We collect your personal information from you and your interactions with the Clinical Training Academy when:
- Browsing our website.
- Registering for one of our courses.
- Completing forms we send to you in preparation for your attendance at one of our courses or venues
- Interacting with learning content.
- Getting in touch with us in relation to the Clinical Training Academy by email.
What personal information we collect
Identifiers
Name, email address, postal address (if applicable, to send your manuals), job title, company/place of work, professional registration number.
Learning data
Learning progress and completion, course certificates, in-person course booking and attendance information, learning recommendations.
Information you complete on course attendance forms
Such as dietary requirements and allergies, required adjustments and any additional personal data you provide within the form.
Cookies
When you use our websites and apps, we and third-party companies use cookies and similar technologies such as pixel tags to collect information.
- A cookie is a text file containing small amounts of information which a server may download to your computer, mobile or tablet when you visit a website or use an app.
- A pixel tag (sometimes called a web beacon) is an invisible image with a line of code placed in an email or on a web page.
For simplicity, we refer to all such technologies as 'cookies'. You can use our cookies management tool to see and control what cookies we use, how they are categorised and how long they last.
How long we keep your information for
In general, we will keep your information for 7 years after the date your course ends. However, there may be circumstances that mean we must keep your personal information for longer.
How we decide the retention period for your information
Retention periods depend on several factors:
- How long it is reasonable to keep records to show we have met the obligations we have to you and by law.
- Any periods for keeping information which are set by law or recommended by regulators, professional bodies or associations.
- Any time limits for making a claim.
- Any tribunal, court or other relevant proceedings that apply
Your choices and rights
You have rights under privacy law about your personal information.
Right of access
You can request a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct or remove inaccurate information we hold about you.
Right to restriction of processing
You can ask us to use your information for restricted purposes only.
Right to portability
You can request that we transfer your information to you or to someone else in a format that can be read by computer.
Right to erasure
You can ask us to delete your information if there is no good reason for us to keep it. We may have a legal obligation or need to keep it for an overriding reason; in these cases, we won’t be able to meet your request. We’ll tell you if this applies when you make your request.
Right to withdraw consent
We do not normally rely on consent to allow us to process your personal information. We will only ask for your permission in very limited circumstances and, if we do so, we will make it obvious to you when we are asking for permission and what it is for. You can withdraw any consent you’ve given us. We’ll let you know if we have to stop certain activities as a result. Even if you exercise this right, the way we used your information previously will remain lawful.
Right to object
You can object to us processing your information in these scenarios:
- we are processing it for a legitimate interest, for example, to send you marketing
- our processing is based on a task carried out in the public interest
However, we may not be able to comply with your objection if there is an overriding reason or the processing is necessary for legal claims. We’ll tell you if this applies when you contact us. In other scenarios, you don’t always have the right to object. We’ll let you know if this is the case and our reasons for turning down your objection.
Rights in relation to profiling and automated decision making
You can ask us not to make solely automated decisions about you or use profiling where this has a legal or similarly significant effect on you
You can also ask us to reconsider an automated decision and find out more how the decision was made. In this case, we’ll consider whether our team can review the decision and let you know the outcome
We may not be able to comply with your request if:
- the automated decision making or profiling is necessary for us to enter into a contract
- we’re authorised by law to make an automated decision or undertake profiling
How to exercise your rights, make a complaint or get in touch
If you want to exercise your rights (including withdrawing consent where relevant), have any questions, comments or complaints about this notice, or any other concerns about the way in which we process information about you, you can get in touch with us at [email protected] or by post at the following address: Bupa, Digital and Data Protection Team, 1 Angel Court, City of London, EC2R 7HJ, United Kingdom.
How we use the personal information we collect
We use your personal information to manage and deliver courses on our Clinical Training Academy, to allow for your professional and personal development. In particular, your personal data is used for the purposes listed in the table below.
|
Purpose |
Personal data in scope |
Legal basis |
|---|---|---|
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to understand the effectiveness of the programmes and their impact on upskilling external delegates |
|
Purpose |
Personal data in scope |
Legal basis |
|---|---|---|
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to manage our relationship with our learners and support their professional and personal development |
|
|
|
Legitimate interests We have a legitimate interest to understand the effectiveness of the programmes and their impact on upskilling external delegates |
