Privacy Policy

The Environmental Health Registration Board (EHRB) subcontracts the administration and processing duties for the awarding body to the Chartered Institute of Environmental Health (CIEH).

Under the terms of the Data Protection Act and GDPR, EHRB and CIEH are ‘Joint Controllers’ for this information. More information is available on the Information Commissioner’s Office website.

Your Personal Data:


What we need

Both EHRB and CIEH take your data privacy seriously and will only use the details you provide to administer your account and provide you with our products and services.

When applying for registration and certification with EHRB we collect information from you including:

  • Name
  • Work contact details
  • Financial information
  • Accrediting University and Course
  • Sponsoring organisation (optional)

Why we need it

We need to know your basic personal data in order to identify and contact you to provide our services. We only collect the necessary information required for us to effectively deliver and improve these services.

What we do with it

All of the personal data we process is done so by our staff in the UK. However, in order to provide our services, we engage with a number of third parties termed ‘Processors’ such as our hosting and webinar facilities who may host or process data outside the UK. We will always ensure the area of processing is in an area that the GDPR lists as providing suitable protection of your data rights. In instances where this is outside of the EU we will clearly inform you so that you may choose not to opt in to that service.

We only authorise access by third parties if they demonstrate strong data privacy practices and always limit their access solely to what is required for them to provide their services.

We have a Data Protection regime in place to oversee the effective and secure processing of your personal data.

Your candidate information is solely used to process your qualification, we will never use this information for marketing or commercial purposes, nor will we share with any other third party for those purposes.

How long we keep it

We are required under UK tax law to keep your financial transactions and basic personal data (name, address, contact details) for seven years, after which time they will be destroyed.

Any additional information that we have is kept until we are reasonably certain that you no longer wish to do business with us which is typically three years from the date of your last purchase unless you request that we do so sooner.

For those on the qualification process with us:

  • We keep your assessment and exam materials for up to a year after the event
  • We keep your candidate records for up to a year after you have been certified
  • We keep you listed on the EHRB register of practitioners for seventy five years
  • In the event that you do not complete the qualification process and gain an EHRB Certificate of Registration we will keep your registration details until you inform us you do not intend to complete certification or ten years has passed from your last activity.

Emails

We keep email correspondence for seven years and an archive for up to ten years.

What are your rights?

If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted.

If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Compliance Officer who will investigate the matter.

If you are not satisfied with our response, or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).

Our Data Compliance Officer can be reached via email or post with the details below:

DCO@cieh.org 

Data Compliance Officer
CIEH
Chadwick Court
15 Hatfields
London
SE1 8DJ

Hygeia the EHRB logo