UKRN Privacy Policy
The UK Regulators Network (UKRN) is a network group formed of UK regulators which works to enable effective co-operation between regulators on important issues.
Although our members are businesses and not individuals, we collect and use personal information relating to individuals as part of our activities. We use this information to manage our network and to carry out our wider work encouraging great efficiency and improving outcomes for consumers, businesses, and the economy.
This privacy policy sets out how the UKRN collects and uses personal information when you make contact with us or use one of our services.
Please read this privacy policy carefully and if you have any questions or queries in relation to this privacy policy, you can contact us at:
UKRN@caa.co.uk and FOI.Requests@caa.co.uk
For the attention of UKRN,
Civil Aviation Authority,
Westferry Circus,
Canary Wharf,
London,
E14 4HD
This privacy policy explains:
- Information we may collect about you
- Use of your information
- Our legal basis for collecting, holding and using your information
- Your rights
- Information requests
- Information we may collect about you
The UK Regulators Network “UKRN” collects and stores your details when you sign up to our newsletters, provide us with feedback, make an enquiry, sign up to our Next Generation Neds scheme or when you respond to a consultation.
The information stored may depend on the reason for you contacting us, but may include your name, job title, address, organisation, date of birth, e-mail address and phone number and/or data relating to access or dietary requirements.
We rely on your Consent to process your personal information. You have the right to withdraw your consent, or to object to the processing of your personal data for this purpose at any time. If at any point you want to withdraw your consent, please email ukrn@caa.co.uk. If this occurs, we’ll update our records immediately to reflect your wishes.
When you make an enquiry, the lawful basis we are relying on to process your personal data is legitimate interests. This does not affect your fundamental rights and freedoms as a data subject.
The UKRN is hosted by the Civil Aviation Authority and therefore all UKRN colleagues and systems utilise CAA’s information security standards, procedures and policies. More information can be found here.
- Use of your information
We need to obtain, store and use information about you for legitimate business purposes – namely so that you can enjoy and benefit from our services. We may use information we hold about you in the following ways:
- To confirm your identity
- To administer the membership of your regulator
- To let you know about other relevant services, both ours, those of other regulatory members or third parties
- To update and correct our membership records
- To carry out statistical and market analyses including benchmarking exercises, to enable us to understand you better and improve our services
- To notify you about changes to our services
- To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
- To improve our website to ensure that content is presented in the most effective manner for you and for your computer.
An important part of our work is communicating with our members and the wider regulatory community which includes but is not limited to charities, consumer groups and businesses telling them about our activities, how we are supporting their interests, and seeking their views on current issues.
To do so, we use personal information to keep in touch with individuals within our regulatory organisations and non-member organisations including charities, consumer groups and other individuals.
We will use the contact information you have given us to send you important information about our network meetings or general activities in our quarterly newsletter. Primarily, this will occur by email.
- Our legal basis for collecting, holding and using your information
Data protection law sets the lawful legal bases (or ‘conditions’) which allow us to collect, hold and use your personal information. For the UKRN, these are:
- For the purposes of our own legitimate interests. We believe that we have a legitimate interest in being able to provide our services to our member regulators and to represent their interests.
As set out in this notice, this sometimes requires us to collect and use personal information about individuals. We only use this legal basis where these interests are not overridden by your interests and fundamental rights or and freedoms.
- Where we have entered into a contract with you. In these circumstances, we may need to process your personal information in order to fulfil the contract. For example, this may apply if you book to attend one of our events or courses.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
We will generally keep personal information about you no longer than is needed for us to carry out the functions described in section 2 of this notice. For example:
- We will usually delete personal information that we collect related to our events after three months. However, we may retain some information (such as attendance records) for longer where it is in our legitimate interests to do so
- We will keep personal information held as part of our membership records for the duration of the organisation’s membership. At the end of the membership, we will delete the majority of records and only retain the minimum information necessary to deal with any future issues unless otherwise requested.
- Your rights
You have the right to request from us access to your own personal information. This is sometimes known as a ‘subject access request’.
You also have the right to request from us:
- That any inaccurate information we hold about you is corrected
- That your information is deleted
- That we stop using your personal information for certain purposes
- That your information is provided to you in a portable format
If you choose to make a request to us, we will aim to respond to you within one month. We will not charge a fee for dealing with your request.
You can exercise these rights by contacting UKRN@caa.co.uk.
If you are dissatisfied with how we are using your personal information or if you wish to complain about how we have handled a request, then please contact UKRN@caa.co.uk and we will try to resolve any issues you may have.
You also have the right to complain to the Information Commissioner’s Office, which is the statutory regulator for data protection law. You can find their details here.
Where we are processing your information on the basis of your consent, you have the right to withdraw your consent at any time. Please contact us via UKRN@caa.co.uk if you wish to do so.
- Information Requests
As the UKRN is not a public authority, it is not subject to the Freedom of Information Act 2000. As such, you may wish to forward any information requests about UKRN to the most appropriate member(s) of our networks. An updated list of our member organisations and networks can be found here and here.
Details of how to contact our regulatory members can be found below:
If you believe that UKRN holds information that should be made public regardless of the UKRN’s FOI status, please send an email to UKRN@caa.co.uk and FOI.Requests
Changes to this Privacy Policy
The UKRN will keep our Privacy Notice under regular review. This Privacy notice was last updated on 28th August 2024.