Although our members are businesses, not individuals, we do collect and use personal information relating to individuals as part of our activities. This is generally in order to manage our membership and to carry out our wider work representing the interests of businesses in the UK. We also collect personal information about individuals who sign up to our events or surveys or to receive our briefings and who work for or with us.
This privacy policy sets out how the CBI collects and uses personal information about individuals.
Please read this privacy policy carefully to understand how the CBI will use your personal information. If you have any questions or queries in relation to this privacy policy, you can contact our Data Protection Officer at:
DPO@cbi.org.uk
CBI, Cannon Place, 78 Cannon Street, London, EC4N 6HN
0207 395 8268
We may collect the following information about you:
Information you give to us
You may give us information about you by filling in a form, contacting us by phone or e-mail or in person. This includes information you provide if you complete a membership form on behalf of a business and if you complete an application form or otherwise apply for a job here, either directly, or via a third party.
The information you give us depends on the reason for you contacting us, but may include your name, job title, address, date of birth, e-mail address and phone number, financial and debit card information, personal identification documents, data relating to access or dietary requirements and your political opinions.
When you contact us (for instance by completing a membership form or attending an event) we may also ask you to provide us with information about your ethnicity, disability status, religion and sexual orientation. You do not have to provide this information to us. If you choose to tell us this information, we will use it to monitor and report statistics about the diversity of our membership and attendees at our events. If you further agree to it, we may use your responses to contact you in order to improve diversity in our membership, committees and at events.
Information we receive from other sources
We work closely with other organisations, such as business partners, sub-contractors, analytics providers, search information providers, and we may receive information about you from them. For example, we could gain access to your business contact details via recognised business data providers who collate information from sources including publicly available information such as Companies House. We may also be given your contact details by our primary contact at your organisation, if they think that you would benefit from getting involved with the CBI or benefit from engaging in our activities. For example, they could nominate you to sit on our employment & skills board, or on our tax committee.
The categories of information we receive from these sources may include your name, address, date of birth, e-mail address and phone number, financial and debit card information, personal identification documents, data relating to access or dietary requirements and political opinion.
We may also collect information about you from publicly available sources, such as media reports, in order to better understand the people who we interact with. This may include information relating to your political opinions.
We need to obtain, store and use information about you for legitimate business purposes - namely so that you can enjoy and benefit from our services. We may use information we hold about you in the following ways:
We may combine information we receive from other sources with information you give to us for the purposes set out above (depending on the types of information we receive).
An important part of our work is communicating with our membership and the wider business community, telling them about our activities and how we are supporting their interests, and seeking their views on current issues. To do so, we use personal information to keep in touch with individuals within member and non-member organisations, as well as partners and other individuals.
We will use the contact information you have given us to send you important information. This may be by post, email, text message or telephone.
We may also use the information we hold about you in order to provide you with information about other products or services we feel may interest you.
Because we operate primarily with businesses rather than individuals, we do not generally seek your consent to send you marketing communications. We believe that such communications are both in our legitimate interests, to raise awareness of our work and promote our services, and in your interests. However, you do have the right to ask us to stop sending you marketing communications. If you would like to stop receiving these, please visit the preferences centre or contact DPO@cbi.org.uk to update your preferences.
We may share your information with selected third parties including:
We may also share your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety of our customers, or others.
Data protection law sets the lawful legal bases (or ‘conditions’) which allow us to collect, hold and use your personal information. For the CBI, these are:
Data protection law recognises certain "special categories" of personal information, which include information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information for uniquely identifying a person, information concerning health, and information concerning a person's sex life or sexual orientation.
These special categories are considered particularly sensitive and so we will only collect and use this information where you have given us your explicit consent or where we consider it necessary to do so. For example, you may choose to tell us about your health condition before attending one of our events, or your political opinions as part of a campaign. We will only use this information for the particular event or campaign and not for any other purposes. We may also ask you to complete a form containing a section on diversity, to allow us to monitor and report statistics about the diversity of our membership and attendees at our events. If you provide your consent, we may use this information to contact you in order to improve diversity in our membership, committees and at events.
The information about you that we collect may be transferred to a CBI office outside the European Economic Area (EEA). Find details of our offices. It may also be processed by CBI staff operating outside the EEA.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
We will generally keep personal information about you no longer than is needed for us to carry out the functions described in section 2 of this notice. For example:
You have the right to request from us access to your own personal information. This is sometimes known as a 'subject access request'.
You also have the right to ask us not to process your personal data for direct marketing purposes.
You can exercise this right by contacting DPO@cbi.org.uk, by following the links at the bottom of this privacy policy, or by following the link included in each communication you receive from the CBI.
From 25 May 2018, you will have additional rights to request from us:
Many of the rights listed above are limited to certain defined circumstances and we may not be able to comply with your request. We will tell you if this is the case.
If you choose to make a request to us, we will aim to respond to you within one month. We will not charge a fee for dealing with your request.
If you are dissatisfied with how we are using your personal information or if you wish to complain about how we have handled a request, then please contact our Data Protection Officer and we will try to resolve any issues you may have.
You also have the right to complain to the Information Commissioner's Office, which is the statutory regulator for data protection law. Find details of how to complain to the ICO.
Where we are processing your information on the basis of your consent, you have the right to withdraw your consent at any time. Please contact us via data.privacy@cbi.org.uk if you wish to do so.
