MITA Privacy Policy

Multi-Industry Training Awards Limited (“MITA”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your personal data, and your rights under UK data protection law.

Contents

1. Important information and who we are
2. The data we collect about you
3. How your personal data is collected
4. How we use your personal data
5. Disclosures of your personal data
6. International transfers
7. Data security
8. Data retention
9. Your legal rights
10. Glossary

1. Important information and who we are

Purpose of this policy

This policy explains how MITA collects and processes your personal data when you:

• use our website
• contact us
• purchase or use our services
• subscribe to communications
• take part in surveys or promotions

This website is not intended for children, and we do not knowingly collect data relating to children under 16. This policy should be read alongside any other privacy notices we provide in specific situations.

Controller

Multi-Industry Training Awards Limited is the controller responsible for your personal data. We have appointed a Data Privacy Manager to oversee this policy.

Contact details

Multi-Industry Training Awards Limited
Compliance House, Rusper Road, Ifield, Crawley, West Sussex, RH11 0LQ
support@mita.org.uk
0800 211 8535 You have the right to complain to the Information Commissioner’s Office (ICO). We would, however, appreciate the opportunity to resolve your concerns first.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on our website. Please ensure the personal data we hold about you is accurate and up to date.

Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend you review their policies.

2. The data we collect about you

Personal data means any information that can identify an individual. We may collect, use, store, and transfer the following types of data:

• Identity data – name, date of birth, identifiers, vehicle and licence details
• Contact data – address, email, phone number
• Financial data – payment details
• Transaction data – details of services or purchases
• Technical data – IP address, browser type, device data
• Profile data – account details, preferences, feedback
• Usage data – how you use our website and services
• Marketing and communications data – preferences for receiving communications

We may also use aggregated data for analysis. This does not identify you. We do not generally collect special category data, for example health or ethnicity data, except in limited circumstances where it is voluntarily provided.

If you fail to provide data

Where we require personal data to deliver a service and it is not provided, we may not be able to fulfil that service.

3. How your personal data is collected

Direct interactions

You may provide data when you:

• purchase or use our services
• create an account
• contact us
• subscribe to communications
• complete forms or surveys

Automated technologies

We collect technical data through cookies and similar technologies. See our Cookie Policy for details.

Third parties

We may receive data from:

• payment providers, for example Stripe and PayPal
• public sources such as DVLA and Companies House
• regulators or awarding bodies

4. How we use your personal data

We only use your personal data where permitted by law, including:

• to perform a contract
• to comply with legal obligations
• for legitimate business interests where your rights are not overridden
• where you have given consent, mainly for marketing

Key uses include:

• registering you as a customer or user
• delivering services and managing payments
• managing our relationship with you
• responding to enquiries and feedback
• improving our website and services
• ensuring system security and preventing fraud
• sending relevant communications where permitted

Marketing

You may receive marketing if you have:

• requested information
• purchased services
• opted in

You can opt out at any time via unsubscribe links or by contacting us. We do not share your data with third parties for marketing without your explicit consent.

Cookies

We use cookies in line with current UK regulations. For full details, please see our Cookie Policy.

5. Disclosures of your personal data

We may share your data with:

• service providers, for example IT and payment processing
• professional advisers
• regulators and authorities
• business partners where required to deliver services

We require all third parties to protect your data and only use it for specified purposes.

6. International transfers

We may transfer personal data outside the UK where necessary. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law.

7. Data security

We use appropriate security measures to protect your data from loss, misuse, or unauthorised access. Access is limited to those who need it for legitimate business purposes. We have procedures to deal with suspected data breaches and will notify relevant parties where required.

8. Data retention

We only retain personal data as long as necessary for its purpose, including legal, accounting, and regulatory requirements. Typically, we retain key customer data for up to six years after the relationship ends. In some cases, data may be anonymised and used for analysis.

9. Your legal rights

Under UK data protection law, you have rights including:

• access to your data
• correction of inaccurate data
• erasure of your data
• restriction or objection to processing
• data portability
• withdrawal of consent

Requests are usually free of charge and will be responded to within one month.