Privacy statement

The IET

The Institution of Engineering and Technology (IET) is a not-for-profit membership body over 156,000 members in 148 countries. For over 150 years the IET has existed for the sole purpose of Working to Engineer a Better World. It is our mission to inspire, inform and influence the global engineering community, supporting technology innovation to meet the needs of society. We do this by providing a range of services and products to our members and customers, with the help of our volunteers. The IET is licensed by the Engineering Council to deliver professional registration to help our members achieve their career goals, while our fund raising activities help aspiring young engineers through our support of STEM education programmes. We are a registered End Point Assessment Organisation responsible for carrying out apprenticeship Professional Engineering Competence Assessments. We have a programme of academic accreditation awards, conferences, scholarships, and events. We connect members through a thriving global network of like-minded professionals.

The IET is supported by a wholly-owned trading subsidiary, IET Services Limited. Also in the IET group of companies is WISE Campaign C.I.C. and entities registered in India, China, Hong Kong and USA, which support our mission in those regions. IET brands include Inspec, E+T, Electrical Standards, Wiring Regulations, Faraday, Venues and EngX.

Our head office:

The Institution of Engineering and Technology
Futures Place
Kings Way
Stevenage
Hertfordshire
SG1 2UA
UK

T: +44 (0)1438 313311

The IET is Registered with the Information Commissioners Office - Reference Number: Z7792223

As a UK organisation the IET is subject to the UK GDPR and DPA 2018 when processing personal data. Our international offices maintain equivalent standards. We also adhere to the EU GDPR in respect of offering goods and services to individuals in the EEA along with applicable data protection legislation relevant to the country location of our customers.

Back to top

The personal data we collect

Communicating with you
Purpose/ activity	Type of personal data	Lawful basis for processing
Your interaction with the IET	Contact Information (name, address, phone numbers, e-mail addresses, membership number if applicable). May include your place of work or institution contact details.	Legitimate interest  To provide easily accessible means of communication and support. For verification purposes. To supply the relevant information you need related to the service or product. We may use the information you provide us to enhance the services and improve your experience. We may phone call you to inform you about our services or offer support with professional registration and membership. We won’t call you if you have told us you don’t want to be communicated with by phone or you are registered with the Telephone Preference Service or Corporate Telephone Preference Service (or international equivalent). We will always say who is calling, display our number and provide our contact details. We will give you an opportunity to object or opt- out of phone calls and record this appropriately. Legitimate interest or necessary for the performance of a contract We may communicate with you by email or phone in an administrative capacity to provide necessary information in order to continue to provide the IET services or products you have purchased, requested or are using under the terms and conditions.
Leadership contacts Details of senior staff of Institutions, trusts and foundations, publicly available via the organisations own website, Companies House and the Charities Commission website.	Name, role, contact details	This information is collected and used in pursuit of the IET’s legitimate interests in furthering the IET’s charitable mission, and for due - diligence purposes.
Shows and conferences We may collect personal data of those who attend our stand at events in a corporate or personal capacity.	Business card - Company or Institution, name, role, contact details	In pursuit of the IET’s legitimate interests we may contact you about the product or service you have shown an interest in, by phone or email using the contact details you have provided.
IET prize draws		If you enter into one of our prize draws whether at an event or online we will provide a specific privacy notice and terms and conditions.
My IET Account When you use or purchase IET products, services or resources through our websites, you will be invited to register and create a website account (MY IET) to securely access the services. You can create and update your own profile in your My IET account including interests and subject preferences, local networks.	For IET website registration, you will be asked for your name and email address.	Legitimate interest  For verification purposes. To supply the relevant information, resources, services or product you are interested in or wish to purchase. To identify the Country you reside, to identify which of our events and local member activities will apply to you. Helps us identify the applicable data protection law that applies to you. The IET maintains a record of the resources, services, products, events that you utilise or purchase and stores these against your customer record. We analyse this information to ascertain use of the IET products and services to market appropriate content to you and collect statistics, including the numbers associated with IET Networks.
Direct Marketing	Name and contact details (phone number, email address, address)	When you register and create an IET website account (MY IET) you are given an opportunity to opt -in (consent) to the IET marketing communications. You can go into your My IET account straight away to select your subject preferences so you’ll only hear from us about the subjects that matter to you, and you can choose how you would like us to contact you with direct marketing communications. You can update this at any time. You can opt - out at any time. You can also opt out of receiving our email communications by clicking the unsubscribe option in the email. Many of the IET resources, services and products are free but if you haven’t opted- in to marketing we can’t communicate with you about them, even if you are an IET member. If you are not hearing from us please opt – in by going to the ‘my interests’ tab in your MY IET account or by calling the IET membership team on T: +44 (0)1438 313311 We use pixels in emails to monitor information such as whether the email has been opened. Under legitimate interest we may phone call you to inform you about IET products and services. We may also phone call you if you are using our resources related to IET membership and professional registration, or if you have started an IET membership application. We do this to offer help with the steps to apply for membership or professional registration. We won’t call you if you have told us you don’t want to be communicated with by phone or you are registered with the Telephone Preference Service or Corporate Telephone Preference Service (or international equivalent). We will always say who is calling, display our number and provide our contact details. We will give you an opportunity to object or opt- out of phone calls and maintain this record appropriately. When you purchase IET products or services we may contact you about our similar products or services that you would reasonably expect to receive. You’ll have the option to opt-out or object either in the email or on the phone call. We conduct business to business direct marketing, by phone or email under legitimate interest, on each occasion you’ll be provided direct ways to opt -out. We will only direct market to you by SMS if you have consented or opted in to receiving our marketing this way. The IET conducts its own direct marketing programmes using technology and software supplied by Uplands under a contract containing standard contractual clauses for transfer of Personal Data to third countries pursuant to the GDPR adopted pursuant to the European Commission’s implementing decision EU 2021/915 of 4 June 2021 and UK International Data Transfer Addendum. For some activities, such as our webinars, you may be offered the option to consent to receiving communications from our partner organisations or sponsors in which case you will be given a link to sign up directly with that organisation. In some instances if you have consented, we may share your name and email address with the third- party organisation, in which case if you wish to withdraw your consent or object, to their marketing you can use the unsubscribe option in their email or contact compliance@xyschool.net
Feedback and research Including in person phone or online interviews. We may use third party research organisations who do so under robust contractual terms. Where this is the case you will be informed through the research privacy notice at the point you are invited to take part.	Your name, contact details.	Legitimate interest To monitor and improve effectivity of our programmes products and services and develop our strategy. Each IET survey or research programme contains a specific privacy notice clearly outlining the IET contact details along with the full details of third parties contracted by the IET to conduct the survey where applicable. It will include the lawful basis, your data rights, and how to exercise your rights.
Profiling We may create a profile in order to tailor promotion or marketing based on your purchases or subject matter preferences, but this will not be done by purely automated means without human involvement or where this may have a significant effect on you.	Your place of work or institution name. Your role or engineering and technology specialism and honorifics. Your subject matter preferences, service use, purchases. Website analytics and statistics via cookies and tracking pixels (where consent is obtained). Relevant publicly available personal information.	Legitimate interest You have the unconditional right to object (see below section Data Subject Rights). Where we obtain information about you from other public sources we will notify you within thirty days and provide you with privacy information including your right to object.
General Complaints	The information you provide. Information processed to investigate the complaint.	Legitimate interest To investigate the complaint Relevant exemptions Data Protection Act 2018 Schedule 2 may apply - Information required to be disclosed by law or in connection with legal proceedings or Legal Professional Privilege.
Back to top
IET Products and Services
Purpose/ activity	Type of personal data	Legal basis for processing
Childrens personal data	Where IET products and services are offered to children aged 16 and under, we obtain consent from a parent or guardian to process the child’s data.	Please see our separate Childrens Privacy Notice in the link above. The IET may process the personal data of children (individuals under the age of 18) and, where applicable, will comply with the guidance set out in the Information Commissioner’s Office Children’s Code, which involves: ensuring privacy notices are accessible to children and age appropriate; understanding that children under the age of 13 cannot give consent for their data to be collected and processed, and so their parent, carer, or guardian will need to consent on their behalf; not using children’s data for automated marketing and advertisement processes; using data protection impact assessments to identify and mitigate the risk of collecting and processing children’s data other than in accordance with statute and guidance.
IET Events, courses, products, services Some events or products, listed on the IET sites, are organised in co-operation or sponsored by other organisations. When you register for this type of event or product, it will be made clear with whom your registration data is being shared. In pursuit of the IET’s legitimate interests, and to enhance attendees experience of our events, we may review your name and organisation in order to welcome you and for IET employee or volunteer networking purposes at the event.	Name, contact details, address, membership number if applicable.	Necessary for the performance of a contract  For events bookings, products or services that are charged in order to provide the paid for service. To supply the service or product and communicate relevant information you need related to the service or product. Legitimate interest or necessary for the performance of a contract For events and products at no charge to supply the service or product and communicate relevant information you need related to the service or product and to deliver the Terms & Conditions you have agreed. We may be legally required to carry out a sanctions check. It may be necessary to use the personal data you have supplied to detect and prevent fraud and misuse of our services.
Applications to competitions, awards and call for papers, and attendance at events. Please see the separate Awards Privacy Notice linked above on this page	Your name contact details, home address where applicable and Country (if applicable), IET membership number if applicable, and your application or submission.	Legitimate interest To assess your submission, notify/announce you as winner, in accordance with the terms and conditions of the competition, send your prize. Use of your name and details or image of your submission. Necessary for performance of a contract To deliver the Terms & Conditions you have agreed to. You will be asked to complete a consent form to indicate whether you consent to film, photography, audio and subsequent publication of this. You will be supplied a specific privacy notice for each event and award.
Back to top
Payments to the IET
Purpose/ activity	Type of personal data	Legal basis for processing
The IET use third party PCI DSS certified payment service providers.	We do not collect any financial information. If you make a debit or credit card payment for example, to pay for membership or to purchase any of our services or products, you will be taken to a secure payment service provider who will take your payment on our behalf.	Necessary for the performance of a contract These are the IET contracted suppliers who securely collect your credit card details when you purchase an IET product or service. PayPal World Pay PaySafe Barclays Flexcheckout Barclays ePDQ with secure trunk lines – using DTMF technology Via Atmoso AliPay Bank of China
Back to top
IET Membership
Purpose/ activity	Type of personal data	Legal basis for processing
Application for IET membership. Membership IET –(MIET) Technician Membership (TMIET) Associate Membership Student Membership	If either you, your employer or an institution you are associated with has chosen to arrange IET membership on your behalf the IET will collect the following information (as applicable) in order to assess the category of IET membership that applies to you. Name, address, Country and contact details, date of birth and gender. Name of employer, or institution, address of work or institution and your work contact details. Details of the highest engineering or technology qualifications you hold or are in the process of completing (award/ Course, title, course dates, name of university or awarding body). You may be asked for evidence of your qualifications, experience, CV, and any other relevant documents to help boost your application. You may be asked for a supporter or sponsor to submit a reference. The information a supporter provides the IET is treated as confidential and is not shared with the applicant. Unspent criminal conviction details. Member data may be shared with the IET external auditors if lawful to do so.	Necessary for the performance of a contract To assess your application and provide you IET membership and associated benefits under the terms and conditions and Byelaws. The IET membership team will contact you to coordinate your application and payment. We will send you a reminder by SMS before the date of your membership renewal. Legitimate interest  Depending on where you are in the world, in order to offer you the IET's services, activities, events, and products it may be necessary to share limited personal data with the IET international companies (IET China, IET India, IET Hong Kong, and USA offices), to provide you IET services or products or to support your use of those services, for example if you are based in these countries or you have expressed an interest in being informed or attending events or activities in those locations. This may include sharing of minimal personal information with Local Networks, set up and run by IET volunteers for the benefit of members, who may support the provision of our services, activities and events, depending on your global location or the location of the event or activity you have expressed an interest in attending. The IET will continue to hold the minimal record of your membership, whether current or lapsed indefinitely. Files containing general information pertaining to your IET membership will be retained for a period of 6 years after lapse of three years, or membership retirement, at such time these files will be securely disposed of. If you are an IET member and wish to exercise your right to erasure you must first resign as a member in writing. You will be asked to declare your agreement to the IET Royal Charter and Byelaws and Rules of Conduct.
Fellow Membership (FIET)	Applicants complete an application form containing evidence of their specific personal contributions, professional achievements and the associated impact in two and no more than three of the nine criteria. This is peer reviewed by a panel of IET member volunteers. And may include an interview. Name, contact details place of work. Name address and contact details of qualified supporter and information about you and your professional achievements supplied by your supporter. Details of membership of Professional Bodies. Publication in IET Member News (print and online) Title, name, town, Country, Professional title.	Necessary for the performance of a contract and legitimate interest. On the occasion where the IET receives personal data indirectly from a supporter, the IET will contact that individual within one month to notify them of their rights and provide a privacy notice. The IET publishes on its website and in “IET Member News (print and online) a list of elected IET Fellows.
Honorary Fellowship (HonFIET)	Biographical information and a short statement of the grounds on which the nomination is made.	Legitimate interest Honorary Fellows are distinguished by their work in engineering and are those individuals who have either rendered services to the IET or whose association is of mutual benefit. The names and post-nominals of all Honorary members are published on the Honorary Fellows List page of the IET website.
Back to top
Continual Professional Development (CPD)
Purpose/ activity	Type of personal data	Legal basis for processing
Under the IET Rules of Conduct members are required to maintain continual professional development.	CPD record includes: name and type of activity target date if applicable (if planned) start and end date a short description and reflection (lessons learnt) number of CPD hours IET mandatory CPD Audit includes the following assessment of your CPD: Whether or not you have included a CPD plan and if your CPD relates to it. Whether or not you have achieved the recommended 30 hours (active members) of CPD for the year in question. Whether or not you have included CPD across a range of the TWAVES categories. Whether or not you have included a mix of soft and technical skills. Whether or not you have linked your CPD to UK-SPEC competences. Whether or not you have included a brief reflection statement detailing how you’ve benefited from your CPD activities.	Necessary for performance of a contract and Legitimate interest Recording evidence of CPD undertaken is a requirement of professional registration. Professionally active registrants who persistently do not respond to or engage with requests for CPD records from the IET, risk removal from the Engineering Council Register. The names of individuals removed from the Register due to non-compliance with a CPD sample will be made available to the other Licensees. If you are selected for mandatory CPD audit you will be required to submit a CPD record for review. The IET provides a secure online portal Career Manager for your use in recording your CPD.
Back to top
Professional Registration
Purpose/ activity	Type of personal data	Legal basis for processing
Internationally recognised Chartered Engineer, Incorporated Engineer, Engineering Technician or ICT Technician	Applicant name, age, date of birth, gender, Address, email address phone number. Workplace, membership information, Education and qualification details, career history and experience. Supporter relationship. Supporter name place of work and role, relationship to applicant, or Supporting statement. Name, breach of code of conduct, suspension or expulsion, date.	Necessary for performance of a contract and Legitimate interest  The IET will offer you guided Professional Registration support, webinars and workshops. The IET offers support using Professional Registration Advisors who are IET member volunteers who have detailed knowledge of the requirements and routes to Professional Registration having gone through the process themselves. IET Volunteers are subject to IET volunteer policies and code of conduct. Your application is reviewed by IET Professional Registration team employees. An assessment of your application will be undertaken by trained and experienced registered IET members. Where required, additional evidence of competence and/or knowledge may be requested. A Professional Registration Interview via video conference will be arranged with two trained, experienced Registered IET members. You will be asked to show your photo ID such as Passport or driving licence for verification. We will carry out a final review to ensure a fair outcome. If you are unsuccessful you have the option to appeal. Recording of CPD undertaken is mandatory for registered engineers and technicians. Professionally active registrants who persistently do not respond to or engage with requests for CPD records from the IET risk removal from the Engineering Council Register (see CPD section above). Legitimate interest The IET reserves in its Regulations the right to publish details of established breaches of the Code of Professional Conduct, (this is published in Member News (print and online)) which will in the case of a Registrant include informing the Engineering Council.
Information shared with the Engineering Council in order to register your professional status (Chartered Engineer, Incorporated Engineer, Engineering Technician or ICT Technician).	If your application is successful personal information will be supplied to the Engineering Council via the Engineering Council UK secure online portal RegPlus, including: Application date Professional title Route Professional Registration Interview date Title Name Academic qualifications Honours Address Country Email address Gender Date of birth Grade Institution membership number Course ref Course graduation year Course intake year Further learning course ref Further learning graduation year Further learning intake year International ref Further learning date Last payment date Paid Name, address, membership number	Necessary for performance of a contract and Legitimate interest  The IET will retain the record of successful professional registration applicants, associated general information will be deleted after six years from lapse. The Engineering Council will continue to hold the record of your registration whether current or lapsed indefinitely. However, files containing your data supplied by the IET in relation to the processing of your professional registration will be retained for a period of 6 years. After such time these files will be securely disposed of. Please visit the Engineer Council Privacy Notice on their website for more information. The IET must inform the Engineering Council of any membership expulsion, whether or not the individual is registered by the IET.
IET member disciplinary		Please see the dedicated Member Disciplinary Privacy Notice in the link above.
IET Member Equal Opportunities & Diversity Monitoring Form	Gender Age Group Nationality Ethnic Origin Disabilities Sexual Orientation Religious Beliefs Caring Responsibilities Educational History/Background Professional Registration Status IET membership Category	The purpose of this equality survey is to better understand diversity, ensure we offer equal opportunities to, IET members, and meet our Diversity Strategy. As part of our continued development, we commit to publicly review our EDI activities and progress annually, based on the anonymised statistical data you provide in this form. Whilst we encourage our members to complete the form there is no requirement to do so, or to answer every question. Each question has a ‘prefer not to say’ option. The information is securely stored. We have taken steps to ensure personal data collected on this form is fully anonymous at the point of collection. The lawful bases we rely on for processing this information are your consent. As some of the data being collected is defined as ‘Special Category Data’ the lawful basis under Article 9 of the UK GDPR is- Explicit consent and Archiving, research and statistics.
Back to top
The Institution of Engineering and Technology Benevolent Fund - Foothold
Purpose/ activity	Type of personal data	Legal basis for processing
IET Membership entitles you to the benefit of support from Foothold (The Institution of Engineering and Technology Benevolent Fund) Foothold is a separate legal entity and charitable organisation and is not owned by the IET. For information please visit Foothold website (myfoothold.org)	Name, home address, Gift Aid amount	IET members were previously offered the option to make a voluntary contribution to Foothold. This meant that we would share minimal donation data with Foothold, for them to collect Gift Aid. The IET no longer does this, and members are now directed to donate with Foothold via their website.
Back to top

 

Sharing personal information with third parties

The IET use third party suppliers to help us deliver services and products, for the purposes listed below. When we do so our Legal and IT Security team conduct due diligence assessments to ensure the supplier has appropriate data protection and security standards and our contracts include stipulations governing the processing of personal data in accordance with applicable data protection laws, regulations and regulatory guidance.

• CRM system providers
• IT and business services providers
• Payment service providers (see payment to IET section above)
• Event management organisations
• External Auditors
• Legal advisors
• Survey/ research management providers
• Software applications, platform and website
• Analytics, social media and marketing management, website live chat
• Publishing services providers - Redactive – (E&T website and publishing) Wiley (IET Journals)

Your personal information may be processed if necessary and lawful, for the prevention and detection of crime, to conduct sanctions checks.

We may share personal information with other third-party organisations in the following circumstances:

• If we are discussing a merger or acquisition; reorganised or sold, personal information may be transferred to respective third parties under suitable terms as to confidentiality;
• If we are required to by law, or under any statutory code, or if we are requested by a government or regulatory authority,
• If we are investigating or defending any legal claims

The IET does not sell its data.

Back to top

International data transfer

When you use IET services your personal information may be transferred to third-parties outside of the UK and the EU. We only do this, if there is an adequacy regulation, otherwise we conduct a transfer risk assessment and ensure the transfer to the third-party organisation is subject to appropriate safeguards (not limited to International Data Transfer Agreement, EU Standard Contractual Clauses and certification with EU - US DPF and UK extension), so that your personal data is provided essentially equivalent level of protection to that of the UK and EU.

Back to top

Security of personal information

We have robust technical and organisational security measures and in place not limited to the following procedures and policies: technical controls, starter/ leaver access controls, threat monitoring and prevention, security classification, risk management, retention, incident response, business continuity, security, acceptable use. Annual mandatory cyber security training. Access authorisation is on a need to know basis and employees are contractually subject to a duty of confidentiality.

Back to top

How long we keep your personal information

We process and retain your personal information no longer than necessary for the purpose it was collected and is processed and in compliance with a lawful basis, statutory retention periods, and our retention schedule. We retain your information in accordance with our data protection, and data retention policies.

Back to top

IET Websites - Cookies and similar technologies

Cookies are small pieces of data that are downloaded to your computer or mobile device when you visit a website or application that enables certain information about your visit to be stored by the site. Tracking pixels and tags (html code) are similar technologies.  

The IET use Cookie Bot to manage your choices for cookies and similar technologies which include tracking pixels and tags, for collecting information on preferences, statistics or for marketing to you through advertising tracking, profiling and retargeting.

Our cookie banner gives you the choice to either:

• Allow essential cookies (reject non-essential cookies and similar technologies)
• Allow all cookies (consent to cookies and similar technologies)
• Choose (select the cookies, similar technologies and purposes that you are happy with)

The cookie banner lists all cookies and similar technologies in use.

We use Google Analytics and Google Tag Manager for analytics and targeted advertising tracking on social media, such as LinkedIn, Meta, Google Ads.

If you consent to statistics cookies all web servers record each page request, together with the time and date, and the Internet (IP) address. This tells us which areas of the site are popular, the most frequent paths that users follow. This helps to improve the site and our content for you in future.

If you choose to log into our websites using a social media login, you are granting permissions to that social media provider to share your user details with us.

We use LinkedIn matched audiences to target our customers with IET ad campaigns using LinkedIn.

Under legitimate interest essential cookies are enabled where an IET website restricts access, the IET may also test your IP address to determine whether it falls into the ranges used by subscriber organisations for that service. Essential cookies also run to ensure security.

If you suspect that your My IET password or account information has been compromised, please inform us promptly and change your password immediately.

Back to top

Other websites

Our websites and emails may contain links to other organisations websites. We are not responsible for the content or practices of these other sites, and we recommend that you check their own privacy policies. 

Back to top

Amending your personal contact information

If you are a registered website user, then you can log on to c7nd.xyschool.net to review and update your contact details and marketing preferences in the "My IET" area of the site. Otherwise, if you would like to advise the IET of any other changes, please contact us or you can telephone us.

Please ensure that you provide enough information for staff to verify you (such as the address that the IET is using to communicate with you and your membership number if you are a member, or phone number).

Back to top

Data Subject Rights

You have the following rights in respect of your personal data processed by the IET:

• The right to be informed about how the IET uses your personal data. This Privacy Statement, our Privacy Notices and just in time privacy notices we provide at the point we collect your personal data serve to inform you.
• The right of access to request a copy of the personal data we hold about you. 
• The right to rectification where your personal information is inaccurate or incomplete. 
• The right to object is absolute where we are processing your personal information for direct marketing or associated profiling purposes and we will supress your details. You have no right to object if the processing is for purposes of scientific / historical research and statistics, necessary for the performance of a public interest task in the public interest that is set out in law. This right applies where we are processing your personal information under the legitimate interest lawful basis. You will need to give us specific reasons why you are objecting to the processing of your personal information. We can refuse your request if we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or it is necessary for the establishment, exercise or defence of legal claims.
• The right to erasure of your personal data. This right is not absolute and only applies in certain circumstances and; where the personal information is no longer necessary for the purpose for which it was collected or processed; we are relying on consent as the lawful basis and you have withdrawn your consent; where we are relying on legitimate interest as the lawful basis and you object to the processing and there is no overriding legitimate interest for the us to continuing the processing; we are processing the personal data for direct marketing purposes you have objected to that processing, or where we have processed your personal information unlawfully, or to comply with a legal obligation. 
• The right to restrict processing applies in the following circumstances: you have contested the accuracy of your personal information that we hold and we are verifying the accuracy; where your personal information has been processed unlawfully and you oppose erasure and request restriction instead; we no longer need your personal information but you need us to keep it in order to establish, exercise or defend a legal claim, or you have objected to us processing your personal information and we are considering whether our legitimate grounds override yours. In such cases we shall continue to store the data, but not further process it until such time as we have resolved the request.
• The right to data portability applies where our lawful basis for processing your personal information is consent, or for the performance of a contract with you. It gives you the right to receive (in a structured, commonly used and machine-readable format) the personal information that you provided us, and to request that we transmit this to another controller (organisation).
• Automated decision making and profiling We do not conduct solely automated decision-making including profiling. Where we conduct profiling in relation to direct marketing you have the absolute right to
• The right to withdraw consent Where we process your personal information under the lawful basis of consent you have the right to withdraw consent at any time.

You can exercise your data subject rights by contacting compliance@xyschool.net We may ask for relevant details in order to verify you. We will respond within one month of receipt. In our response we will explain our decision. If you are unsatisfied with our response you have the option to raise a compliant with the IET Data Protection Officer at privacyoffice@xyschool.net. If you remain unsatisfied you have the right to raise a complaint with the Supervisory Authority (see details below). You may also seek to enforce your rights through a judicial remedy.

Back to top

Raising a data protection concern or complaint

If you have any cause to believe the IET has not processed personal data in accordance with applicable data protection legislation please contact the IET Data Protection Officer in the first instance at PrivacyOffice@xyschool.net

You may also raise a complaint with the UK Supervisory Authority, the Information Commissioners Office (ICO).

If you are located in the EU/EEA you may raise a complaint with the IET’s EU GDPR Representative - European Data Protection Office (EDPO). You can contact EDPO regarding matters pertaining to the GDPR by using EDPO’s online request form: http://edpo.com/gdpr-data-request/  or by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

If you are resident in India you may contact the IET India Designated Grievance Officer at india@xyschool.net. 

Back to top

Updates to this policy

This policy is kept under review, and changes may be made from time to time.

Versions:

06/11/2015
21/05/2018
01/11/2018
13/10/2021
05/01/2024
27/06/2024
23/10/2024