Privacy Notice

What is the purpose of this notice and who does it cover?

• This privacy notice (‘’notice’’) gives you information about how Chartered Accountants Worldwide (CAW) collects and processes your personal data when:
• you use this website www.charteredaccountantsworldwide.com (referred to in this notice as “our website”), and you provide personal data through the use of our website including when you sign up to our newsletters and events; and
• you provide goods or services to us and we need to process personal data in order to enter into an agreement or contract with you and manage that agreement or contract.
• Our services and our website are not intended for children, and we do not knowingly collect personal data relating to children.
• References in this notice to ‘’you’’ or ‘’your’’ are references to individuals who use our website or provide goods or services to us.
• It is important that you read this notice together with our cookie notice and any other notices we may provide to you from time to time when we collect or process personal data about you during your interactions with CAW, so that you are fully aware of how and why we are using your personal data. This notice supplements the other notices and is not intended to override them.

Who can I contact if I have any questions?

• CAW is the controller for your personal data unless we notify you otherwise. A ‘’controller’’ is a person or organisation who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. This notice is issued on behalf of CAW as controller. CAW is registered with the Information Commissioner’s Office (ICO) with registration number ZA556804. In this privacy notice, references to ‘we’, ‘us’ or ‘our’ mean CAW.
• If you have any questions about this notice or the information we hold about you, including any requests to exercise your rights under data protection law, please contact our Operations Executive, Caroline D’Amario using the contact details set out below:

Chartered Accountants Worldwide

c/o ICAEW

Chartered Accountants’ Hall

One Moorgate Place

London

EC2R 6EA

data.protectionCAW@icaew.com

What happens if this notice is updated or my personal data changes?

• This version of the notice was last updated on 8 December 2022 and any historic versions can be obtained by contacting us at data.protectionCAW@icaew.com. We will publish any changes to this notice on our website and where necessary we will also send you a copy via post or email. It is important that the personal data that we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

The personal data we collect about you

• Personal data is any information which directly or indirectly identifies an individual, for example, your name, address, date of birth, photos, videos or voice recordings. This does not include any information that does not, and cannot be used to, identify an individual.
• Special categories of personal data are a set of personal data that we are required to look after even more carefully. Special categories of personal data include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any special categories of personal data about you through our website. Nor do we collect any information about criminal convictions and offences.
• You give us your personal data in your use of our website, when you register to use our website, by completing voluntary surveys or questionnaires, or by submitting comments in our forums.
• We also collect personal data from you indirectly such as your browsing activity while on our website, (see “Cookies” below). We also collect personal data from other sources as set out below.

Personal data collected directly from you

• The personal data we collect about you depends on the particular activities carried out through our website. This information includes:

Identity Data	Your name, title, username or similar identifier.
Contact Data	Your address and contact details, including email address and telephone numbers.
Status Data	Information relating to whether you are a member of a particular member institute, and if so which institute, or whether you are a student. Information detailing which third party you have linked through to our website from.
Survey Data	Your responses to surveys, web forms and questionnaires hosted on our website.
Privacy Preferences	Details of your preferences about receiving communications from CAW including marketing communications.
Technical Data	Information gathered during your use of our website such as your IP address, the domain name from which you are accessing the server.
Marketing and Communications Data	Your marketing and communication preferences. We also track when you receive and read marketing communications from us, which information we use to improve our marketing services, provide you with more relevant information and improve the quality of our marketing materials.
Profile Data	Information collected progressively when you visit our site including your referral website, pages you visit, actions you take, patterns of page visits and information from forms you fill in.
Usage Data	Information about how you use our website.

Personal data provided to CAW by third parties

Technical Data	We receive Technical Data from analytics providers such as Google Analytics, Hootsuite, Mailchimp and SurveyMonkey.
Financial Data	Bank account details

• We do not collect any financial information on our website.

What if you do not supply your personal data

• You are under no statutory or contractual obligation to provide personal data during your use of our website or in your interactions with us in order to provide goods or services to us. However, if you do not provide us with your personal data we will be unable to send you any marketing communications or enrol you on any of our webinars.

Purposes and legal basis for which we will use your personal data

• Processing personal data from website users allows us to personalise and tailor our website and target marketing to relevant users. Processing personal data from third party suppliers who provide goods or services to us allows us to enter into an agreement or contract with them and manage that agreement or contract. In order to comply with data protection laws, we need a lawful basis to process your personal data. We use the following lawful bases to obtain and use your personal data.

• Consent - Where you have given us clear consent for us to process your personal data for a specific purpose.
• Performance of a Contract - We need to process your personal data to take steps at your request, prior to entering a contract with you or where we need to process your personal data for a contract, we have with you.
• Legal or Regulatory Obligation – In some cases, we need to process your personal data to comply a legal or regulatory obligation which we are subject to.
• Legitimate Interest - Where processing the personal data is in our legitimate interests (or those of a third party) provided that your fundamental rights do not override such interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process personal data for our legitimate interests.
• The table below describes the ways in which we use your personal data and the legal bases we rely on to do so. Where appropriate we have also set out our legitimate interests in processing your personal data.

Individual	Purpose and/or activity	Type of Data	Legal basis for processing
All website visitors	Personalising and tailoring the website – delivering relevant content to you, to measure or understand the effectiveness or the content we serve to you.	Survey Data Profile Data Status Data	Legitimate Interest – we have a legitimate interest in personalising and tailoring the website to provide users with the best experience.
All website visitors	Online feedback	Identity Data Contact Data Status Data	Legitimate Interest - we have a legitimate interest in obtaining feedback from visitors to the website to improve their experience of the website.
All website visitors	Managing your preferences	Privacy Preferences	Legitimate interests – we have a legitimate interest in sending communications including marketing communications. videos, podcasts, thought leadership and reports to users of our website, in order to keep them informed of [upcoming webinars, events hosted by member institutes, conferences, and current events.
All website visitors	Managing and improving our website	Technical Data Status Data	Legitimate Interest – we have a legitimate interest in creating an effective website for the benefit of our users and ultimately to benefit our organisation.
All website visitors	Sending you emails	Contact Data Marketing and Communications Data	Consent – where you have actively given your consent to receive marketing emails from CAW.
Suppliers and providers of goods and services to us	To set you up as a supplier or provider on our systems and enter into a contract with you	Identity Data Contact Data Financial Data	Performance of a contract Legal and regulatory obligation
Suppliers and providers of goods and services to us	To undertake relevant anti-money laundering, anti-corruption, anti-terrorism and identity checks and conflict checks to ensure we can use your services	Identity Data Contact Data Financial Data	Performance of a contract Legal and regulatory obligation
Suppliers and providers of goods and services to us	To operate our contract with you including managing payments, fees and charges and collecting and recovering any money owed to us	Identity Data Contact Data Financial Data	Performance of a contract Legal and regulatory obligation
Suppliers and providers of goods and services to us	To manage our relationship with you including notifying you about changes to our terms or this notice	Identity Data Contact Data	Performance of a contract Legal and regulatory obligation

How long will personal data be retained?

• We keep personal data that we obtain about you for no longer than is necessary for the purposes for which it is processed. How long we keep your information will depend on the nature of the information concerned and the purposes for which it is processed.

Sharing your personal data

• CAW may share your personal data with third-party processors who provide services to the organisation. These services include:
• market research organisations carrying out market research about CAW on our behalf. The only data we will share with these organisations is your email address for the purpose of allowing them to contact you independently of CAW; and
• organisations who manage our marketing database and send out marketing materials on behalf of CAW.
• We may share your personal data with organisations where we have a legal obligation, contract or other legitimate interest to do so, including Big Top Multimedia Ltd, One Young World, CAW Network USA and the member institutes.
• Your personal data may be transferred to other third-party organisations in certain scenarios:

• If we are discussing selling or transferring part or all of our business, personal data may be transferred to prospective purchases under suitable terms as to confidentiality;
• If we are reorganised or sold, personal data may be transferred to a buyer who can continue to provide services to you;
• If we are required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority, for example the police, we may need to share your personal data; or
• If we are investigating or defending any legal claims your personal data may be transferred as required in connection with defending such investigations and/or claims.

Storing your personal data

• CAW is based in the UK and will store your personal data in either the UK or Ireland.

Transferring data overseas

• In some cases, we may need to process personal data outside the European Economic Area (EEA) and/or United Kingdom (UK) therefore the processing of your personal data will involve a transfer of personal data outside the EEA and/or UK. Where this is the case, we will only share the minimal amount of personal data necessary for the purpose of processing and, where possible, we will share the personal data in an anonymised form.
• Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
• we will only transfer your personal data to countries for whom there has been an adequacy decision by the European Commission and/or an adequacy regulation granted by the UK Secretary of State (as applicable) confirming that that country provides an adequate level of protection for personal data; and
• where we use certain processors, we may use specific contracts approved by the European Commission and/or UK Data Protection laws (as applicable) which gives personal data the same protection it has within the EEA and/or UK. When we rely on this measure we will ensure that the third-party can comply with the provision of such contracts and we have confirmed that the country to which the personal data is transferred has adequate data protection laws in place to protect personal data.
• Please contact us at data.protectionCAW@icaew.com if you would like further information about the specific mechanism used by us when transferring your personal data.

How we protect your personal data

• We have appropriate security measures in place to prevent personal data from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
• We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Cookies and other tracking technologies

• Our website uses cookies and other similar technologies. Please see our Cookie Privacy Notice for more details.

Marketing

• We would like to send you information about events which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by email.
• We will only ask whether you like us to send you marketing messages when you subscribe to our newsletter by submitting your name and email address in the “Subscribe to our newsletter” section on our website.
• If you have previously agreed to being contacted in this way, you can unsubscribe at any time by:

• contacting us at data.protectionCAW@icaew.com; or
• using the ‘unsubscribe’ link in emails.

Other websites

• Throughout our website we may link to other websites. We are not responsible for the content or practices of these websites. These other third party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third party websites, please consult their privacy notices as appropriate.

Your rights

• Under data protection law, you have rights including:

• Your right of access – You have the right to ask us for copies of your personal data.
• Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete personal data you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Rights related to automated decision making, including profiling - You have the right not to be subjected to a decision based solely on automated processing (including profiling) which may significantly affect you. We do not make any employment decisions, solely using automated decision-making technologies.
• In most cases we will deal with your request as soon as possible and at the latest within one calendar month of the request. If we need to extend the time period for responding to your request, we will let you know within the one-month period. We do not charge a fee for any such requests, unless there are exceptional circumstances.
• If you wish to exercise any of your rights, please contact us at data.protectionCAW@icaew.com.

Complaints

• If you have any concerns about the personal data we use about you, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, by contacting them at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please feel free to contact us in the first instance.