PRIVACY POLICY

Your privacy is important to UKALA. This privacy statement provides information about the personal information that UKALA collects, and the ways in which UKALA uses that personal information.

This privacy policy was completed on 8th June 2021 and only applies to UKALA and the website www.ukala.org.uk
It doesn’t cover other services and transactions that we link to. External sites are not framed so the full URL is displayed and it is apparent you’re on a different site. These services have their own terms and conditions and privacy policies. If you go to another website from ours, for example to make bookings, you should read the privacy policy on that website to find out what it does with your information.

The type of personal information we collect
We currently collect and process the following kinds of personal information:

• information about your use of this website (including cookies);
• information that you provide using for the purpose of booking with the website (including personal details and contact information
• information about transactions carried out over this website;
• information that you provide for the purpose of subscribing to the website services; and
• any other information that you give to UKALA by any means

“Membership Data” information provided when you apply for membership on our website including your name, postal address, email address, information about your place of work, job title and contact details and telephone number. As well as financial data, bank statements, credit check results and insurance certification.

“Billing Data” We take an address, individual and/or company names, bank account details including sort code and account number.

How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you when you apply for membership of UKALA, or other non-member inputs by you, for example submitting your information as part of the UKALA complaints process, your use of the website, or communicated to us by voice, electronically or in writing.

We may also receive personal information indirectly, in the following scenarios:

UKALA receives lists of delegates with associated information (but not billing information) from specialist third parties contracted to take bookings and payments for events on our behalf.

We may use the information that you have given us in order to:
– maintain a membership database to keep a register of our members;
– carry out membership email list management;
– communicate with our members; This includes a regular newsletter and can be opted out from (see below)
– communicate with non-members;
– complete investigations under our complaints process
– undertake audits
– complete investigations under our Client Money Protection Scheme
– personalise the website for you;
– enable your access to and use of the website services;
– publish information about you on the website;
– send to you products that you purchase;
– supply to you services that you purchase;
– send to you statements and invoices;
– collect payments from you; and
– send you marketing communications.

In addition to the disclosures reasonably necessary for the purposes identified above, UKALA may disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend its legal rights. UKALA also share details of membership with Trading Standards for their publication of compliant agents to the public.

For the provision of services, taking payments, and to allow you discounts, your information is shared with the appropriate contractors “UNA Collective”, “Barbon Insurance Group Limited T/A Let Alliance” “HFIS” (includes mydeposits, Property Redress Scheme, Ome, Landlord Action), “Eazipay Ltd”, “Eventbrite”, and “Training for Professionals” These are subject to controller agreements which are compliant with the GDPR.

Under the General Data Protection Regulation (GDPR), the lawful basis we rely on for processing this information is:
– Consent: You have given clear consent for us to hold your data and use it for a specific purpose
– Contract: It is necessary for us to hold and use your data for the purpose of fulfilling a contract with you, or because you have asked us to take specific steps in preparation to entering into a contract.
– Legal Obligation: It is necessary for us to hold and use your data in order to comply with the law.
– Legitimate interests: It is necessary for us to hold and use your data in order to fulfil our legitimate business interests or those of a third party.

Cookies
We use cookies and similar technologies on our websites to allow us to track your browsing behaviour, links clicked, items purchased, and your device types. They also allow us to collect data (including analytics) about how you use and interact with our Services. This allows us to provide you with more relevant product offerings, a better experience on our sites and mobile applications, and to collect, analyse, and improve the performance of our Services. We may also collect your location via Internet Protocol (IP) address, so that we can personalise our Services.

How we store your personal information
Your information is stored in UK data centres only. – These hosting service providers ensure exceptional levels of security with access control, 24/7 monitoring and ISO 27001 certification

How long we store your personal information
Prospective members: 3 months after last contact
Members: Statute of limitation (currently 7 years) from end of membership
Complainants: Statute of limitation (currently 7 years)
Event only contacts: 3 months after the event
Information held solely for marketing reasons: 14 days from when you opt out.
Data kept for legal or tax reasons: Statute of limitation (currently 7 years)

Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. However if your requests are excessive we have a right to charge you. If you make a request, we have one month to respond to you.

We want to make sure that your personal information is accurate and up-to-date. You may ask us to correct or remove information you think is inaccurate.

If you do not want to receive the newsletter any longer you can send an email.

Please contact us at info@ukala.org.uk if you wish to make a request.

How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us. Please contact us at info@ukala.org.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: ico.org.uk

Our registered address
THE UK ASSOCIATION OF LETTING AGENTS LIMITED. Company number 03401834
Suite 8 Bourne Gate, 25 Bourne Valley Road, Poole. BH12 1DY
Tel 03300 55 33 22
info@ukala.org.uk