Data Protection
Cifas Learning is provided by Cifas, a company registered in England and Wales under company number 02584687 and with our registered office at 6th Floor Lynton House, 7-12 Tavistock Square, London WC1H 9LT (“Cifas”, “we”, “us” or “our” in this policy). Where we decide the purpose and means for which personal data you supply is processed, we are the “data controller” in terms of the UK GDPR and the Data Protection Act 2018 (referred to collectively in this policy as “data protection legislation").
The personal data collected as part of the booking process, or collected as part of the delivery of a course, is processed on the basis that it necessary for us to do so as part of providing the course (this contractual necessity is our lawful basis under the data protection legislation). Without it, we would not be able to provide the course. If you are booking a course on behalf on someone else, then it is your responsibility to make sure that you have their permission to do so.
As part of providing the course, we may email you with updates about the course that has been booked. We may also email you with details of other similar learning courses; please let us know if you do not want us to do this.
We will share your personal data with those people and organisations needed to help deliver the course, including our payment services provider. If you book a course that is accredited by a third party, then we will also share your personal data with them on the lawful basis of our legitimate interests in the purposes of compliance monitoring, quality assurance, and the provision of certification of successful course completion (where relevant). In addition, we may disclose your information to the extent that we are required to do so by law or regulation (which may include to government bodies such as qualification regulators, or to law enforcement agencies), in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend our legal rights.
We will process your personal data in the UK, using Microsoft Azure, and keep it for six years. Accrediting bodies and regulators will keep your personal data according to their retention policies. We have implemented appropriate technical and organisational measures to protect personal data – Cifas is certified to ISO/IEC 27001:2013, the international standard for operating an information security management system, and to Cyber Essentials, the online security scheme run by the Government’s National Cyber Security Centre. Cifas commissions regular penetration testing of all systems by independent experts approved under the CREST scheme.
You have certain rights under data protection legislation: the rights of data access and portability, to ask us to correct or delete the data we hold, and the rights to object to or restrict our use of your data. If you have any questions about Cifas Learning or wish to exercise your data protection rights then please contact us at training@cifas.org.uk. The Cifas Data Protection Officer can also be contacted through this way. If you are not happy with how we have acted, then you have the right to complain to the Information Commissioner's Office at www.ico.org.uk.
Cookies
We use the Moodle learning management system to deliver and administer our courses, which includes providing information about the courses on offer. This means we need to set a cookie called “MoodleSession” that is necessary for the Moodle software to work for all visitors and registered users. It is a “session” cookie, which means it expires when you close your browser.
Payment by Card
Payment in full must be received before the course date.
Payment by Invoice
Payment in full must be received before the course date. Cifas reserves the right to re-allocate the course place to another delegate if fees are not paid on time. Failure to receive the course fees in adherence with these terms means that Cifas reserves the right to request payment on the day of the course.
Course Numbers
There are maximum - as well as minimum - numbers on each course. If a course is under-subscribed, it may be cancelled or postponed. In that case, we shall notify you at least 14 days before the course date and arrange for you to attend on another date. We cannot accept responsibility for any losses arising from cancellations or changes, beyond the course fees.
Cancellations
Cancellations received more than 30 days prior to the commencement of the course will incur an administration charge of £50 per delegate. Cancellations 15-30 days before the course incur a charge of 50% of the course fee in addition to the administration charge. No refund is given for cancellations 14 days or less before the course date. Postponements will be treated as cancellations. Substitutions can be made at any time at no extra cost. Please inform the Cifas training team here.
Course Language
All course materials, delivery and assessments are undertaken in English except where specified by law.