At EngineeringUK we use your personal data to help us provide services to promote engineering and technology to the public. We take our responsibilities to look after your personal data extremely seriously. In the sections below, we describe how we collect, process, store, and share your personal data.
Who is responsible for your data and how to contact us
The Engineering and Technology Board (trading as EngineeringUK) is the Data Controller and responsible for your data. Our registered address is:
EngineeringUK
Northern & Shell Building
5th Floor, 10 Lower Thames Street
London
EC3R 6EN
UK
How to contact us
You can email us at [email protected] or write to the Associate Director of Business Services, Northern & Shell Building, 5th Floor, 10 Lower Thames Street, London EC3R 6EN.
What personal data do we collect about individuals?
Below is a list of the personal data we collect, what we use it for, and how long we'll keep it.
Delivery of programmes and events
What data we collect for these purposes:
- Name and contact details
- Age
- School address (if you are a home educator, we may also collect the address you use to educate from)
- Gender
- Pronoun preferences
- Photography and video recordings
- Dietary information (including allergies and health conditions)
- Information about your role, work, and/or school
- Information about support requirements
- Records of meetings and decisions
- Records of consent, where appropriate
- Website user information (including user journeys and cookie tracking)
- Information relating to compliments or complaints
Special category data
We use the following data to evaluate our services. This data is usually collected anonymously but may be identifiable for a short time:
- Racial or ethnic origin
- Health information, such as disabilities
How long we will keep your data
We keep this data in an identifiable format for the duration of your interaction with our programme or event. After the event or programme, we may retain your details as necessary to respond to complaints or comply with legal obligations.
- Photography and video recordings may be kept for up to 5 years unless you withdraw consent earlier.
- Data not required for legal obligations or complaint resolution is anonymised either at collection or within 2 years post-event.
In some cases, external partners may help administer our events (eg software or apps). These partners may process some personal information beyond what we request. We encourage you to review their privacy policies as they may have different retention schedules.
Receive donations, funding, and organising fundraising activities
What data we collect for these purposes:
- Name and contact details
- Taxpayer information (for gift aid purposes)
How long we will keep your data
We keep this data as long as required to comply with our legal obligations.
Service updates or marketing purposes
What data we collect for these purposes
- Name and contact details
- Age
- School address
- Region
- Marketing preferences
- Recorded images (eg photos and videos)
- Cookies
- Website and app user journey information
- Records of consent, where appropriate
- Form autofill data stored in local browser storage
How long we will keep your data
We keep data for marketing purposes until you notify us otherwise. You can unsubscribe at the bottom of our emails or contact us using the details provided above.
Cookies can be managed through toggles on our websites. For more information, please see our Data and cookie Policy.
Form autofill data is stored for 12 months after submission.
Research or archiving purposes
What data we collect for these purposes:
- Age
- School or home address for carbon footprint research
- Sex or sexual orientation
- Website and app user journey information
- Records of consent, where appropriate
- Racial and ethnic origin
- Health information, such as disabilities
How long we will keep your data
Data is collected anonymously when possible, but identifiable information may be held briefly. We use ‘suppression’ techniques to prevent re-identification.
Compliance with legal requirements (where applicable)
What data we collect for these purposes:
- Name
- Contact information
- Identification documents
- Financial transaction information
- Health and safety information
How long we will keep your data
We retain this data for the duration legally required.
Recruitment purposes
What data we collect for these purposes:
- Contact details
- Date of birth
- National Insurance number
- Photo ID (eg passport copies)
- Employment and education history
- Right to work information
- Details of any criminal convictions
- Marital/civil partnership status
- Carer status
- Socioeconomic background
To monitor and evaluate our workforce we also collect:
- Racial and ethnic origin
- Religion or belief
- Health information
- Gender information
- Sex and sexual orientation
How long we will keep your data
Employee data for monitoring and evaluation is kept throughout employment and for 6 years after. Non-employee data is kept for 12 months after application.
Dealing with queries, complaints, and claims
What data we collect for these purposes:
- Name and contact details
- Address
- Purchase or service history
- Accounts and records with us
- Correspondence
How long we will keep your data
We retain this data as long as required to fulfil legal obligations.
Social media
Please remember that any personal information you post on our social media sites or comment areas is visible to all and not monitored by us.
How do we process your data and our legal grounds
1. Why we process your data
We collect and use personal data for various essential purposes, including:
- Event Management: Registering and administering attendees at events (e.g., visitors, exhibitors, and volunteers).
- Relationship Management: Maintaining partnerships and communications with our partners and trustees.
- Feedback and Evaluation: Gathering and responding to feedback or evaluations to improve our services.
- Job Applications: Processing applications for employment opportunities.
- Resource Provision: Providing resources or information you request.
- Employment Administration: Managing employment-related processes and records.
2. Legal grounds for processing your data
Our use of personal data is based on these legal grounds:
- Legitimate Interest: We process data to support our mission, administer interactions, and ensure smooth operations, while minimizing any potential risks to your privacy.
- Consent: When you explicitly provide permission, we rely on consent as the basis for processing.
- Contractual Obligations: In cases where data processing is essential to fulfilling a contract.
- Legal Compliance: We use data to comply with applicable laws and regulations.
- Vital Interest: Where necessary to protect someone’s physical or mental health in urgent situations.
Where do we collect data from?
We may collect data directly from you or from sources such as:
- Teachers or carers
- Charities, schools, colleges, universities
- Public sources and councils
- Marketing research organisations
- Suppliers and service providers
How do we use cookies and form autofill data?
We use cookies to enhance your experience on our websites. Autofill data helps to avoid repeated form entries. See our Data and Cookie Policy for more details.
Managing marketing messages
You may receive email marketing communications if you have opted in. To unsubscribe, use the link in our emails. Note that we may keep minimal data to ensure no further communications are sent.
Data protection
We use extensive encryption and password protection to safeguard data. EngineeringUK holds ISO9001:2015 Quality Management accreditation, ensuring secure data collection and storage practices.
Data sharing
We may share your data with the following categories of recipients:
- Event logistics and delivery partners
- Careers material distribution providers
- Communications (e.g., social media, media outlets)
- Evaluation providers
- Office services, marketing software, funders, regulatory bodies, and relevant authorities
For employee-specific data sharing, we may share information with:
- Benefit providers, HMRC, and professional advisors
Children’s data
EUK Education processes children’s data with strict safeguards, including health and safety data for events and evaluation data. Parent or carer consent is required for participation.
Data transfers outside the UK
Some systems may store data outside the UK. We ensure these are in GDPR-compliant locations or under binding agreements. For questions, email [email protected].
Your rights
You have rights to:
- Access copies of data we hold on you
- Request data corrections, deletions, or transfers
- Make subject access requests via our Contact Form and add the subject line: “Subject access request”
If you registered for our events, you may edit your details through the registration system. Unsubscribe links are included in marketing emails.
How to make a complaint
If you are unsatisfied with our data processing, contact us at [email protected]. You can also contact the Information Commissioner’s Office (ICO) if your concern persists.
Changes to this policy
This policy may change from time to time. Updates will be communicated as needed.
Last updated October 2024.