Cardiff Against Business Crime (CABC) is a Business Crime Reduction Partnership (BCRP) and an unincorporated association with its office at Cardiff Against Business Crime , 7 St Andrews Crescent, Cardiff, CF10 3DA.
Please read this notice carefully. This Privacy notice relates to this public facing website and your use signifies your agreement and consent to this notice. If not, please discontinue your use immediately. CABC also operates a members only incident and intelligence intranet website DISC™ which operates under a separate Privacy notice.
This notice describes the type of personal data we collect and how we may use and share that data. The term “personal data” means information about an identifiable individual which includes name, address, email, telephone number and other information relating specifically to an individual.
Why do we collect data?
Cardiff Against Business Crime has been established by our member business community to provide safety and security improvements and services in Cardiff City Centre. We carry out a range of activities, including sending out communications to and for the benefit of businesses and their employees, share information and opportunities in accordance with our constitution and terms of reference.
Cardiff Against Business Crime uses three separate lawful bases for our storing and processing of different sorts of personal data.
- The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
- Processing is necessary for compliance with a legal obligation to which our Board of Management on behalf of the Partnership as controller is subject.
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
What we collect
We may collect the following information:
- name, job title and name of business/employer
- contact information including email address
- demographic information such as postcode, preferences and interests
- other information relevant to surveys, offers and/or events
- photos and video images
You may provide personal data when you book onto / attend one of our events, visit our website, enter competitions and respond to research / surveys. If you choose not to provide us with your personal data you may not be able to access some of the services we offer, such as our e-newsletter, or receive invitations to events and workshops.
If you communicate with us through any link on our website, we may ask you for your personal data, so we can respond to your questions and comments.
Personal Data Retention Periods
Except as otherwise permitted or required by applicable law or regulation, Cardiff Against Business Crime only retains personal data for as long as necessary to fulfil the purposes Cardiff Against Business Crime collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes.
Other Data We May Collect Automatically
When you visit our website, we may automatically collect certain personal data that we then aggregate so that it is not linked to a single, identifiable individual. This information provides us with statistics such as how many users visited our site and which pages were accessed. By collecting this information, we learn how to best tailor our website.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate.
You may block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Links to Other Websites
How we use your data
Newsletters and Other Communications
On our Website or otherwise following direct communication with us, you may sign up to receive newsletters and other communications about CABC services, business security alerts and promotions. Your personal data is used by us to send you those communications. Details of how you may opt-out of receiving some or all communications from us are described in the Your Preferences section below.
Cardiff Against Business Crime
CABC may also store your data to keep track of important direct communications that we have had with you. We may do this by storing emails, or via an appropriately sourced CRM system.
When you book onto and/or attend one of our events we may collect your personal data and record your interest in, or attendance at that event. Given the nature of BCRP’s it’s important for us to demonstrate consultation and engagement with our member business community.
Use of images
Cardiff Against Business Crime routinely uses photos and videos to promote our work and events via our partner FOR Cardiff BID social media accounts, our website, our e-newsletter and other communications. Where possible, we will try to gain your consent in advance. However, if we are using an image of you, and you would like us to stop, please contact us. Please note, we do not pay or provide credit for use of your image in our photographs or videos.
At times, we may share your image for use by our partners to promote or advertise our events, projects, services and initiatives. Where possible, we will try to gain your consent in advance. However, if we are using an image of you, and you would like us to stop, please contact us.
How We Share Personal Data
We never sell or otherwise disclose your personal data, subject to some specific exceptions:
If we collect or update your personal data following an event or initiative that we deliver in partnership with another organisation, we would only share the data with that partner with your explicit consent.
We may share your personal data with service providers, employees or contractors that we have retained to perform services or work on our behalf. They are provided only with the personal data they need to perform their functions and can only use and disclose such personal data as is necessary to perform services on our behalf or to comply with legal requirements.
If we have agreed to conduct activity that promotes safety and security for our member businesses, or other services that you provide, or that highlights work or activity that you are undertaking, we may share your name, your job title, the name of your employer and your image. We may also share your professional contact details in circumstances where people will need to contact you, for our activity to be meaningful.
In addition, we may disclose your personal data (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities or other government officials, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.
How We Protect Your Personal Data
We maintain administrative, technical and physical safeguards to protect against loss, misuse or unauthorised access, disclosure, alteration or destruction of the personal data you provide to Cardiff Against Business Crime .
Access to information
You have the right to access the personal data held about you. Your right of access can be exercised by contacting us at firstname.lastname@example.org Please state whether you wish to receive a copy of your personal data, amend it or remove it from our records, and provide your postal details
If you would like to update your contact details and preferences, or to tell us you no longer want us to process your personal data, you may email us at email@example.com.
If you ask that we stop using your personal data, we will take reasonable steps and honour that request. However, we will retain records of your personal data as needed to comply with applicable law.
How to Contact Us
If you have any questions or comments about this Notice, or if you would like us to update the personal data we have about you or your preferences, please contact us via email: firstname.lastname@example.org
How to make a complaint
If you are unhappy with the way that we have processed your data, or with aspects of our data protection policy, we would encourage you to contact us in the first instance.
If you are dissatisfied with the way that we have handled your complaint (or if you would prefer to exercise your right to do so), you may contact the Information Commissioner directly. Information on how to do this can be found on their website.
Updates to Our Privacy Notice
Last updated: May 2021