The Contractors Mechanical Plant Engineers recognises that your privacy is very important to you and that it is your right to control your personal information. We know that providing personal information is an act of trust and we take that trust seriously.   Updated May 2018   The Contractors Mechanical Plant Engineers will never sell, rent or, except as set out in this Privacy Policy, otherwise disclose any of your personal information, including your Email address, to any third party without your consent. Unless you give us specific consent to act otherwise, the following policies will govern how The Contractors Mechanical Plant Engineers handles the personal information that you provide to us. This Privacy Policy sets out:

• Collection and use of information
• Information storage
• Information sharing and disclosure
• Security and prevention against loss, misuse or alteration of information
• Your ability to edit and cancel your account
• Changes to this Privacy Policy
• Contact details

This Privacy Policy is deemed to be incorporated into the Rules and Conditions of the association, which you should read together with this Privacy Policy. Capitalised words used but not defined in this Privacy Policy have the meaning given to them in the Terms and Conditions.   Collection and use of information The information held by the association is collected and collated from your completed membership form. All of this information is collected and used only in aggregate; that is, it is entered into our database, where we can use it to generate overall individual reports. You will be able to take advantage of all of the features and benefits of the association. The Contractors Mechanical Plant Engineers collects some or all of the personally identifiable information set out below when you join The Contractors Mechanical Plant Engineers, when you access and use this Website, the information we collect will vary depending on the individual circumstances.   What we collect

• Name
• Address
• Business Name
• Email address
• Web address
• Telephone number
• Mobile telephone number (optional)
• Payment method: Direct Debit, Standing Order, Cheque, etc.
• Relevant information about your business.

  Information you submit for your User Profile How we use it:

• To communicate with you regarding your membership of The Contractors Mechanical Plant Engineers

• To contact you about the products and/or services on this Website in which you have expressed an interest
• To display your User Profile to others users of this Website (in accordance with your security settings)
• To email you news and information
• To send you samples of, or marketing materials relating to, third party products or services which we believe may be of interest to you. Such materials may be sent by us separately. Please note that at no time is it necessary for us to provide your personally identifiable information to third parties in order to send you these materials
• To improve services and enhance personalisation. Additionally, authorised CMPE officers may update your registration information to accurately reflect any new information included in any communications received from you.

Communication Preferences If you do not want to receive emails from us with news and information, you can change your contact preferences at any time by completing the contact form at cmpe.co.uk or notifying the national secretary.   Information storage All information you provide to us is stored in the UK only on secure servers that are protected in secure facilities including firewall protection and located in those countries that form part of the European Economic Area or are considered to provide adequate protection for personal information under the European Union Data Protection Directive (95/46/EC).  Cookies ‘Cookies’ are small text files that are stored by the browser on your computer. Websites are able to read and write these files, which allows them to store things like personalisation details and user preferences. We use cookies for a number of purposes, including to:

• recognise you as a CMPE member;
• provide you with customised content while you are using member services;
• deliver advertisements relevant to your interests when you visit our Website and use our member services;
• provide general internal analytics to conduct research to improve our Website;
• support security measures such as are in place at this time.

In addition to our own cookies, we allow certain third parties and affiliates to set and access their cookies on your computer such as companies providing auditing, research and reporting for advertisers. Those parties’ use of cookies is subject to their own privacy policies, not our Privacy Policy. The Help menu on the menu bar of most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or visiting the website of its manufacturer. However, because cookies allow you to take advantage of some of our Website essential features, we recommend that you leave them turned on. If you do leave cookies turned on, be sure to sign off when you finish using a shared computer.   Information sharing and disclosure The Contractors Mechanical Plant Engineers is committed to protecting your personal information. We will not disclose your personally identifiable information to third parties without your consent except:

• where The Contractors Mechanical Plant Engineers is required by law to disclose information to third parties;
• where the disclosure is necessary for the performance of our operations (eg. mail delivery, protecting us from fraud, and payment of your membership); or

We also may share your personal information with third parties (ie sponsors and advertisers) specifically engaged by The Contractors Mechanical Plant Engineers to provide services to us, in which case we will require those parties to keep that information confidential and secure and to use it solely for the purpose of providing the specified services to us. Companies and individuals registered with The Contractors Mechanical Plant Engineers Affiliate Program receive aggregate information about customers that they direct to The Contractors Mechanical Plant Engineers through links on their websites. No personally identifiable information is provided to affiliate members; the information collected from our affiliates is used strictly for the affiliates program and will not be used for general marketing purposes. The Contractors Mechanical Plant Engineers also provides analysis of our members to prospective partners and other third parties. We do this so that we can understand you better, and so we can keep bringing you first-rate member services. We may also disclose, on an anonymous basis, literal statements made by our members. Linked websites are not under the control of The Contractors Mechanical Plant Engineers and we are not responsible for the conduct of companies linked to our Website. Before disclosing your personal information on any other website, we advise you to examine its terms and conditions of use and privacy policy. Please note that you have certain rights under the Data Protection Act 1998. You have the right to be told what personal information we hold about you, to correct errors in that information and to prevent The Contractors Mechanical Plant Engineers from using your personal information. Should you wish to exercise that these rights, or if you have any questions concerning The Contractors Mechanical Plant Engineers privacy policy at the contact details below.   Security and prevention against loss, misuse or alteration of information The Contractors Mechanical Plant Engineers has implemented technology and security features, as well as strict internal guidelines, to safeguard the privacy of your personal information from unauthorised access or improper use. We will continue to enhance our security procedures as new technology becomes available. While we make every effort to ensure that your information is secure on our system, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Access authorisation is granted only to key Contractors Mechanical Plant Engineers members only and to our agents if necessary for the performance of our operations or for them to provide services to us. Any information accessed by those agents is required to be kept confidential and secure and is not permitted to be used for any purpose except to provide their services to us. Backups are kept to prevent loss of information.   Your ability to edit and cancel your membership You cannot access your membership online. To update and correct the business and personal details you must contact us in writing through the contact submission form on the website. If you decide to cancel your membership of the Contractors Mechanical Plant Engineers, your membership will be deactivated immediately once any term of the membership has expired. However, we are required to retain your information for accounting, operational and administrative purposes and in accordance with applicable laws.   Changes to this Privacy Policy From time to time, administrators of The Contractors Mechanical Plant Engineers will review and may edit this policy in accordance with potential changes to our membership and as required by law. The national officers of The Contractors Mechanical Plant Engineers reserve the right to change its Privacy Policy at any time.   CMPE Privacy Policy Update 25^th May 2018 How we use your personal information This privacy notice is to let you know how CMPE promise to look after your personal information. This includes what you tell us about yourself, what we learn by having you as a member, and the choices you give us about what marketing you want us to send you. This notice explains how we do this and tells you about your privacy rights and how the law protects you. Our Privacy Promise We promise:

• To keep your data safe and private
• Not to sell your data
• To give you ways to manage and review your choices at any time

Data Protection law change – 25 May 2018 This notice sets out most of your rights under the new laws. If need be, we’ll update it again should changes come into effect. Who we are You can find out more about us at www.cmpe.co.uk. & www.cmpecoc.co.uk If, after reading this policy you have any further questions, or want more details about how we use your personal information, you can ask us by email: info@cmpe.co.uk with your specific request. How the law protects you? As well as our Privacy Promise, your privacy is protected by law. This section explains how that works. Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside CMPE. The law says we must have one or more of these reasons:

• To fulfil a contract, we have with you, or
• When it is our legal duty, or
• When it is in our legitimate interest, or
• When you consent to it.

A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is. Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are. What we use your personal information for

• To manage our relationship with you.
• To develop new ways to meet member needs and to grow our services
• To develop and carry out marketing activities
• To study how members’ use services from us
• To provide advice or guidance about our services
• To make and manage member payments
• To manage any charges due on member’s accounts
• To collect and recover money that is owed to CMPE
• To obey laws and regulations that apply.
• To respond to complaints, feedback, reviews and seek to resolve them
• To run our association in an efficient and proper manner. This includes managing our financial position, capability, planning, communications

Our reasons

• Your consent
• Our legitimate interests
• Our legal duty

Our legitimate interests

• Keeping our records up to date, working out which of our services may interest you and telling you about them
• Developing services, and what we charge for them
• Seeking your consent when we need it to contact you
• Being efficient about how we fulfil our legal duties
• Being efficient about how we fulfill our legal and contractual duties
• Complying with regulations that apply to us

Groups of Personal Information We use many different kinds of personal information, and group them together like this. Type of personal information – Description

• Contact – The most preferred method of contacting you.
• Socio-Demographic – This includes details about your work or profession
• Transactional – Details about payments from your accounts with us.
• Contractual – Details about the services we provide to you.
• Locational – Data we get about where you are.
• Behavioural – Details about how you use our services.
• Technical – Details on the devices and technology you use.
• Communications – What we learn about you from letters, emails and conversations between us.
• Open Data and Public Records – Details about you that are in public records, such as information about you that is openly available on the internet.
• Usage Data – Other data about how you use our services.
• Consents – Any permissions, consents or preferences that you give us. This includes things like how you want us to contact you.

Where we collect personal information from We may collect personal information about you (or your business) from other members within the CMPE from these sources: Data you give to us:

• When you apply for our membership
• When you talk to us on the phone or in person
• When you use our websites, mobile device apps
• In emails and letters
• Payment and transaction data
• Companies that introduce you to us
• Social networks

Who we share your personal information with

• We may share your personal information with members within the CMPE and these organisations:
• Agents and advisers who we use to help run your accounts and services, collect what you owe, and explore new ways of doing business
• Organisations that introduce you to us
• Companies that we introduce you to
• Companies you ask us to share your data with
• We may need to share your personal information with other organisations to provide you with the product or service you have chosen:
• If you pay by direct debit, credit or charge card, we will share transaction details with companies which help us to provide this service (such as GoCardless and Stripe)
• If you use direct debits, we will share your data with the Direct Debit scheme

We may also share your personal information if the make-up of CMPE changes in the future: How we use your information to make decisions We sometimes use systems to make decisions based on personal information we have about you. This helps us to make sure our decisions are efficient and correct, based on what we know. These decisions can affect the services or features we may offer you now or in the future, or the price that we charge you for them. Here are the types of automated decision we make: Pricing We may decide what to charge for some services based on what we know. Starting our service provision When you start using our service, we check that the service is relevant for you, based on what we know. We also check that you meet the conditions needed to use the service. Your rights As a person you have rights over decisions. If you want to know more about these rights, please contact us. If you choose not to give personal information We may need to collect personal information by law, or under the terms of a contract we have with you. If you choose not to give us this personal information, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform the services needed. It could mean that we cancel a service you have with us. Any data collection that is optional would be made clear at the point of collection.  Marketing We may use your personal information to tell you about relevant services. This is what we mean when we talk about ‘marketing’. The personal information we have for you is made up of what you tell us, and data we collect when you use our services. We can only use your personal information to send you service messages if we have either your consent or a ‘legitimate interest’. That is when we have a reason to use your information. It must not unfairly go against what is right and best for you. You can ask us to stop sending you services messages by contacting us at any time. Whatever you choose, you will receive notification, and other important information such as changes to your existing services. We may ask you to confirm or update your choices, if you take out any new services with us in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our association. If you change your mind you can update your choices at any time by contacting us. How long we keep your personal information We will keep your personal information for as long as you are a member of the CMPE. After you stop being a member, we may keep your data for up to 10 years for one of these reasons:

• To respond to any questions or complaints
• To show that we treated you fairly
• To maintain records according to rules that apply to us

We may keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons. We may also keep it for research or statistical purposes. If we do, we will make sure that your privacy is protected and only use it for those purposes. How to get a copy of your personal information? You can access your personal information we hold by emailing us with reference to Data Subject Access Request at this address: cmpesecretary@gmail.com Letting us know if your personal information is incorrect You have the right to question any information we have about you that you think is wrong or incomplete. Please contact us if you want to do this. If you do, we will take all reasonable steps to check its accuracy and correct it. What if you want us to stop using your personal information? You have the right to object to our use of your personal information, or to ask us to delete, remove, or stop using your personal information if there is no need for us to keep it. This is known as the ‘right to object’ and ‘right to erasure’, or the ‘right to be forgotten’. There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it. We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. In this situation, we would not use or share your information in other ways while it is restricted. You can ask us to restrict the use of your personal information if:

• It is not accurate
• It has been used unlawfully but you don’t want us to delete it
• It is not relevant any more, but you want us to keep it for use in legal reasons
• You have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it

If you want to object to how we use your data, or ask us to delete it or restrict how we use it or, please contact us at. cmpesecretary@gmail.com How to withdraw your consent? You can withdraw your consent at any time. Please contact us if you want to do so. If you withdraw your consent, we may not be able to provide certain services to you. If this is so, we will tell you. How to complain Please let us know if you are unhappy with how we have used your personal information. You can contact us by email cmpesecretary@gmail.com outlining your concerns. You also have the right to complain to the Information Commissioner’s Office. Find out on their website how to report a concern.