GDPR Policy

Membership and Assessments

The ISM collect personal information from you as part of membership and enrolment for assessments. In handling this information, We are bound by the General Data Protection Regulations (GDPR) and the ISM code of ethics. This page will explain how these affect the way we work.

The ISM has both Data Controller and the Data Protection Officer. Contact details The President: Doreen winder 01376 529949 email:

The information about you that we collect comes from you, via an email, phone call, or enrolment form (either online or on paper). If you make payment or purchase something using Paypal, all PayPal transactions are subject to the PayPal Privacy Policy.

You have no legal requirement to share information with us, but if you do not we will not be able to offer you a place on a course or membership

Contact forms, enrolment forms and membership forms is
To answer your enquiries
To provide you with items you have purchased, membership, assessments or publications.
ISM enrolment forms collect your name and contact details, your learning and payment preferences. The purpose of this is
To decide if we can offer you a place on one of the assessment courses
To administer a course once you are enrolled
To provide ongoing support and supervision
To enable us to invoice you and receive payment, and to keep proper records and accounts.

The lawful basis of the ISM collecting and processing data is consent or contract or legitimate interests. You consent to us holding and using your information when you submit a contact or enrolment form, or sign up for membership. Using Paypal creates a contract to supply goods or services which we cannot do without using your data. If you attend the course you will be asked to sign a contract. If you email, phone or contact us with enquiries it is a legitimate interest of the ISM to use your contact details to reply to you.

We keep the information you give us for seven years, which is the length of time suggested by professional bodies and insurance companies for client records: they don't have separate advice for trainers.

Sharing your information: If a third party (e.g. an employer or someone offering training grants) is involved in your application, we will share relevant information with them.
We maintain the same level of confidentiality for students and members which means that we only divulge personal data where there is a legal requirement for us to do so e.g. where the Children's Act applies or a court order is issued, or when there is good cause to believe that if we do not disclose information you or others would be exposed to a serious risk of harm. If these circumstances arise we will share information with the appropriate authorities.
You have rights over the information we hold about you. These are
Portability - you can ask us to send your information to someone else (we would need written consent from you)
Rectification - if you think our records are wrong you can ask us to change them.

Erasure - in some circumstances you can ask us to remove your details from our records (this is sometimes called 'the right to be forgotten'). the personal data has been disclosed to others; or the personal data has been made public in an online environment (for example on social networks, forums or websites).
If your only contact with us is the ISM journal and you wish to unsubscribe, all your data will be removed automatically from our system
Fair profiling - you can ask that any processes we automate are done by a person instead of a computer. We don't currently automate any information processing, although we do use online forms to collect information.
Right of access - you can have a copy of the information we hold at any time, by requesting it in writing. If you do this it will be provided within 30 days and free of charge.
Restricting processing - in some circumstances you can request that we stop processing your information
Objection - you can object to the way we process information (e.g. if it is used to send you direct marketing and you don't want to receive this) and can ask us to stop using it in the way
Information - you have the right to understand how we collect and process your information (hence this privacy notice)
You can learn more about these rights on
You can withdraw your permission for us to use your information at any time, although it would mean leaving membership or the course if you are still a student
You have a right to complain to the ICO if you have any problem with the way we store or use your data, or if you do not think your rights are being respected.

GDPR, Data Protection, and Confidentiality - Our use of cookies
What are cookies?
Cookies are small text files that help organise and store browsing information. They are not programmes, and cannot damage your computer or any files you have on it, nor can they transmit viruses. Find out more about cookies in general here.

Our use of cookies:
Our site is designed using a content management system to make our site work properly, especially the interactive parts like search and menus.
We use cookies which tell us how many people visit the site, which pages they go onto, and whether they are first-time or returning visitors. They don't collect any information that identifies you as an individual, they simply deal with numbers and visitor patterns, which helps us to provide more of the content you want to see.
We also sometimes embed links or content from other websites including search engines such as Google. These are clearly identified, but as a result you may be presented with cookies from these sites. We cannot control the use of these third party cookies and you should check with the websites concerned for more information.
If you want to ask any questions about our use of cookies, please contact us.
Contact forms, online membership forms and Paypal collect your name and contact details. The purpose of collecting this information is

to answer your enquiries

to provide you with items you have purchased, e.g. assessment places, membership and publications

Course enrolment forms collect your name and contact details, your learning and payment preferences. The purpose of this is

to decide if we can offer you a place on one of the ISM courses/assessments

to administer a course once you are enrolled

to provide ongoing support and supervision

to enable us to invoice you and receive payment, and to keep proper records and accounts