Privacy & cookies policy

Privacy Notice

Construction Skills Certification Scheme Limited (“CSCS”/“We”/“Us”/”our“) are committed to protecting and respecting your privacy lawfully, fairly, and transparently.

This Privacy Notice (and any other documents referred to in it) together with our terms of use give you information on our privacy practices and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us or on our behalf.

This Privacy Notice applies to our website at www.cscs.uk.com (“Website“) and will apply whether you access our Website using a computer, mobile phone, tablet, TV, or other device.

The aim of this Privacy Notice is to give you information on how we collect and process your personal data through your use of this Website or otherwise in your dealings with us.

Please read the following carefully and contact us if you have any questions by email on [email protected] or by using the details set out in section 16 below. You may find it helpful to click on the headings below for further information on our privacy practices.

This version of our Privacy Notice was last updated 1st October 2018


  • 1. Who we are and the CSCS Scheme
    • CSCS is a not-for-profit limited company registered in England and Wales under registered number 03024675. The address of our registered office is The Building Centre, 26 Store Street, London WC1E 7BT.
    • CSCS is the leading skills certification scheme within the UK construction industry (“Scheme“). A key aspect of the Scheme is the provision of CSCS membership cards which provide validation that individuals working on construction sites have the required occupational competencies, training and qualifications for the type of work that they carry out.
    • The Scheme keeps a database of members who are individuals working in construction who have achieved or who have indicated a commitment to achieving a recognised construction-related qualification.
    • Holding a CSCS membership card is not a legislative requirement. It is entirely up to the principal contractor or client whether workers are required to hold a card before they are allowed on site. However, most principal contractors and major house builders require construction workers on their sites to hold a valid CSCS card.
    • The Scheme’s application processing and contact centre is delivered under contract by the Construction Industry Training Board (“CITB“). The CITB is a charity registered in England and Wales with Charity Number 264289 and in Scotland with Charity Number SC044875, whose registered office is Bircham Newton, Kings Lynn, Norfolk PE31 6RH. Please see section 6 for further details on the CITB.
  • 2. CSCS is the data controller
    • For the purposes of the General Data Protection Regulation ((EU) 2016/679)(“GDPR“) and for the UK data protection regime, CSCS is the “controller” in respect of the data processing described in this Privacy Notice.
    • CSCS is registered as data controller with the UK Information Commissioner’s Office (“ICO“) under registration number Z8156332.
    • If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact the CSCS by email on [email protected] or by using the alternative contact details set out in section 16
  • 3. The categories of personal data which we may collect from you
    • We may collect, use, store and transfer different kinds of personal data about you in the provision of our services and the operation of the Scheme, including the following:
      • Identity data: including your name, title, date of birth, national insurance number, , qualifications, training history.
      • Contact data: including your home and/or business addresses (postal and email) and telephone number(s).
      • Technical and usage data: including internet protocol (IP) addresses, the type of browser used while visiting the Website, the numbers of users who visit the Website, details of your visits to the Website including, but not limited to, usage session dates and duration, page views, and how you use the Website and our services, traffic data, location data, weblogs and other communication data and the resources that you access.
      • Marketing and communications data: including your preferences in receiving marketing from us and your communication preferences.
    • If you are applying for multiple CSCS cards on behalf of multiple individuals via our ‘Employer Applications’ page, we will ask you to provide data in respect and on behalf of those individuals.
    • You should bring the content of this Privacy Notice to the attention of such individuals at or before the time at which you provide their respective personal data to us and you should have obtained their consent to do so.
  • 4. How your personal data are collected
    • We may collect and process your personal data if you:
      • sign up to our newsletter;
      • communicate with us by telephone, post or email (we may keep a record of that correspondence);
      • meet our representatives in person;
      • make an application for CSCS membership and/or to become a cardholder;
      • complete the Scheme membership application formalities including filling in applicable forms and providing us with copy documents and certificates showing and/or information relating to your occupational competencies, qualifications and/or training;
      • become a CSCS member and/or cardholder;
      • make enquiries about CSCS, the Scheme or its members and/or cardholders;
      • are a user of CSCS resources;
      • report a problem with the Website;
      • complete our voluntary surveys that we may use from time to time for research purposes upon request from us (although you do not have to respond to them); and/or
      • respond to a request via our marketing materials.
    • We may also collect:
      • details of interactions you carry out through the Website and of the fulfilment of any of your requests;
      • information that is drawn from publicly-available sources; and/or
      • information that is otherwise collected in the normal course of our provision of our services and the operation of our Scheme.
    • The above information includes information provided at the time of your use of the Website or by requesting services or whether in person, online or by post or telephone.
  • 5. How we use personal data
    • CSCS uses your personal information to:
      • administer and provide the CSCS Scheme and membership cards;
      • send communications to you such as information, news or surveys about the Scheme;
      • carry out our obligations arising from any contracts entered into between you and us including the terms of Scheme membership;
      • manage and record our relationship with you, and to deal with any complaints that you may have about it;
      • prevent fraud and other prohibited or illegal activities;
      • meet our legal and regulatory requirements;
      • monitor and improve the effectiveness of our services;
      • notify you about changes to our services, including contacting you by email, telephone or post;
      • otherwise, as disclosed to you at the point of collection; and/or
      • for any other purpose for which you provide us with your personal data.
    • Where one or more of the following lawful processing grounds applies we may process your personal data for any of the above purposes:
      • the processing is necessary to perform a contract with you, or to comply with your request before entering that contract including in respect of your membership of the Scheme;
      • the processing is necessary for our legitimate interests of you or a third party under the Scheme or otherwise;
      • the processing is necessary for us to comply with a legal obligation; and/or
      • you have consented to the processing.
    • We may combine the personal data that we collect from you to the extent permitted by applicable law. For example, we may combine various different databases that contain your personal data to allow us to provide better support services and more personalised content (such as marketing).
  • 6. Other parties with whom we may share personal data
    • We may share your personal information with our suppliers who administer the CSCS scheme in order to provide you with the relevant Scheme membership card on our behalf. We may also disclose your personal information to third parties:
      • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation;
      • in order to enforce or apply our terms of use and other agreements;
      • to protect the rights, property, or safety of CSCS, our clients, our members, or others (this includes exchanging information with other organisations for the purposes of fraud protection and credit risk reduction);
      • with whom you request us to share your personal data;
      • such as your organisation;
      • to help CSCS or our affiliates analyse and/or improve our communication or relationship with you; and/or
      • in the event that all or substantially all of our business or assets are or are intended to be sold or otherwise assigned to another entity.
    • If you have a CSCS membership card, by allowing your CSCS membership card to be used with a card-reader or smartphone (with near-field communications (NFC) or other capability), you acknowledge and agree that the person using the reader or smartphone will be able to view your name and occupational competencies and other personal data either stored on or accessed by using the CSCS membership card to which you have given your consent.
    • Except as described above, we will not disclose your personal data to third parties for their own marketing purposes unless you have provided consent.
    • CSCS accepts no responsibility or liability for any issues arising in connection with the third party’s use of your personal data stored on the CSCS membership card.
    • The Scheme’s application processing and contact centre is delivered under contract by the Construction Industry Training Board (“CITB“). The CITB is a charity registered in England and Wales with Charity Number 264289 and in Scotland with Charity Number SC044875, whose registered office is Bircham Newton, Kings Lynn, Norfolk PE31 6RH.
  • 7. What we do to keep your personal data secure
    • CSCS is committed to protecting the security of your personal data. We use a variety of technological, physical and organisational protections and procedures to help protect your personal data from unauthorised access, use, or disclosure, such as encryption, passwords, physical security, etc.
    • In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
    • While we strive to protect your personal data, no website, product, device, online application or transmission of data, computer system or wireless connection is completely secure, and CSCS cannot ensure or warrant that the personal data or private communications you transmit to us will always remain private, and you do so at your own risk.
    • If a password is used to help protect your accounts and personal information, it is your responsibility to keep your password confidential. Do not share this information with anyone. If you are sharing a computer with anyone you should always log out before leaving the Website to protect access to your information from subsequent users.
    • We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
  • 8. Transferring and processing your personal data outside the European Economic Area
    • We will only transfer your personal data to countries outside the European Economic Area (which may not provide the same level of data protection as within it) in accordance with applicable laws or where you have given us your consent to do so
    • If this happens we will make sure the transfer and storage of your information still complies with UK or EEA laws and this Privacy Notice.
  • 9. Accessing your personal data and other rights you have
    • CSCS wants to help you keep your personal data accurate and current.
    • You have the right to access information we hold about you. Please keep us informed if your personal data changes during your relationship with us. To review, verify or correct your personal data, please contact our customer service department detailed in section 16
    • We will collect, store and process your personal data in accordance with your rights under any applicable data protection laws. Under certain circumstances, you will or may have the following rights in relation to your personal data:
      • Subject access: the right to request details of the personal data which we hold about you and copies thereof.
      • Right to withdraw consent: (where you have consented to our processing of your personal data), the right to withdraw such consent at any time. If you wish to withdraw your consent to processing, please contact us using the details provided in section 16.
      • Data portability: the right to request us to port (i.e. transmit) your personal data directly to another organisation.
      • Rectification: the right to require us to rectify or update any incorrect or inaccurate personal data about you.
      • Erasure (‘right to be forgotten’): the right to have your personal data ‘erased’ in certain specified situations.
      • Restriction of processing: the right in certain specified situations to require us to stop processing your personal data.
      • Object to processing: the right to object to specific types of processing of your personal data, such as where we are processing your personal data for the purposes of direct marketing.
      • Prevent automated decision-taking: the right not to be subject to decisions being taken solely on the basis of automated processing.
    • If you wish to enforce any of the above rights under applicable data protection laws, please contact us by using the details set out in section 16 We will respond to your request without undue delay and by no later than one month from receipt of any such request, unless a longer period is permitted by applicable data protection laws, and, if permitted to do so by applicable data protection laws we may charge a reasonable fee for dealing with your request which we will notify to you.
    • If you are concerned that we have not complied with your legal rights under applicable data protection laws, you may contact the ICO (www.ico.org.uk) which is the data protection regulator in the UK. Alternatively, if you are based outside the UK, you may contact your local data protection supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the ICO (or other data protection supervisory authority) so please contact us in the first instance.
  • 10. Data retention – how long will we store/keep your personal data
    • We retain personal data for as long as necessary to fulfil the purposes for which they have been collected as outlined in this Privacy Notice unless a longer retention period is required by law.
    • We reserve the right to keep records of former Scheme members for the purposes of operating the Scheme, fielding enquiries and compliance purposes.
    • When your personal data are no longer required for the said purposes or as required by applicable law, they will be deleted and/or returned to you in accordance with applicable law.
  • 11. Third-party links
    • This Website may from time to time include links to third-party websites, plug-ins and applications.
    • Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit or to which you may provide your personal data.
  • 12. Cookies
    • When you access the Website, some information in the form of a “cookie” or similar file may be automatically downloaded to your computer. This helps us to enhance the on-line experience of visitors to the Website. If you do not want cookies sent to or stored on your system, most Internet browsers will allow you to delete or block cookies from your computer hard drive, prevent them from being stored or signal a warning before a cookie is stored. You should refer to your browser instructions or help screen to learn more about these functions. However, please note that if you use your browser settings to delete or block cookies you may not be to access all or parts of the Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies as soon you visit the Website. If you continue to use the Website, you agree to our use of cookies, as explained in the table below.
    • We may use navigational data for system administration and to report aggregate information to our advertisers or other stakeholders. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. This means that your session will be tracked, but you will not be identified. We use cookies to track the pages that you visit on the Website and to ensure that you do not see the same information repeatedly. We may also collect non-personal information, such as number of Website visits and tracking patterns of page viewing, to monitor the performance of the Website and make improvements to it.

     

    Cookie Name Purpose More Information
    Google Analytics _utma
    _utmb
    _utmc
    _utmz
    These cookies are used to collect information about how visitors use the Website. We use the information to compile reports and to help us improve the Website. The cookies collect information in an anonymous form, including the number of visitors to the Website, where visitors have come to the Website from and the pages they visited. See this link for an overview of privacy at Google
    Cookie Message cc_cookie_decline
    cc_cookie_accept
    These cookies stops the cookie message appearing on every page load.
    Session Cookie PHPSESSID This cookie remembers login states.
    You Tube Cookies VISITOR_INFO1_LINE
    use_hitbox
    PREF
    To display video on our website we use the you tube video player, which uses cookies to play and store preferences. you can read the you tube privacy policy here for more information on their use of cookies

     

    • To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit allaboutcookies.org.
    • To opt out of being tracked by Google Analytics across all websites visit, please visit http://tools.google.com/dlpage/gaoptout.
  • 13. Your choices (e.g. marketing related emails or otherwise)
    • We may use your personal data (such as your contact details (e.g. name, address, email address, telephone number)) to send you marketing-related correspondence by email related to our Services. When we process your personal data for marketing purposes, we do so on the basis that we have obtained your consent to use your personal data for these purposes.
    • We may also use your personal data to personalise and to target more effectively our marketing and communications to ensure, to the extent possible, that any marketing-related correspondence is relevant to you.
    • You may change or withdraw your consent to receive communications from CSCS any time, subject to legal or contractual restrictions and reasonable notice, by contacting CSCS’ customer service department (section 16 below). In some circumstances, a change in or withdrawal of consent may limit our ability to provide products or services. Because some communications are developed in advance, you may sometimes receive solicitations after we receive a change in your consent to provide you with communications. Unless you advise us otherwise, by continuing to deal with CSCS or our affiliates, you have consented to the collection, use and disclosure of your personal data as explained in this Privacy Notice.
    • To opt-out of receiving marketing-related correspondence specifically, please click “Unsubscribe” from any marketing or promotional email you receive from us, or contact us as explained in section 16 below.
  • 14. The law
  • The laws that apply to this Privacy Notice include the following:

    • Data Protection Act 2018 (“DPA“)
    • EU Data Protection Directive 95/46/EC
    • Regulation of Investigatory Powers Act 2000
    • Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000
    • Electronic Communications Data Protection Directive 2002/58/EC
    • Privacy and Electronic Communications (EC Directive) Regulations 2003
    • General Data Protection Regulation ((EU) 2016/679) (“GDPR“) as introduced into national law on 25 May 2018
    • Guidance and codes of practice issued by the Information Commissioner
    • Any successor legislation to the DPA and GDPR.
  • 15. Changes to this Privacy Notice
  • Any changes we may make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. We encourage you to periodically review this Privacy Notice to be informed of how CSCS is protecting your personal data.

  • 16. Contact us
  • If you have any questions about this Privacy Notice, our privacy practices or the processing of your personal data by or on behalf of us, or if you wish to exercise any of your rights set out in this Privacy Notice, please contact us in the following ways:

    By email: [email protected]

    By post: Customer Services Team, The Construction Skills Certification Scheme Limited, The Building Centre, 26 Store Street, London WC1E 7BT

    By telephone 0344 994 4777