Data Protection

The UK GDPR & Data Protection Act 2018 are the relevant pieces of Data Protection Legislation within the UK at present. The Forensic Training Partnership would like to make it as easy as possible for you to view your privacy information and rights.

More information can be sought from the Information Commissioner’s Office (the governing body for data protection) at ico.org.uk.

Our Data Protection Policy

  1. Introduction This Data Protection Policy outlines the principles and guidelines that the Forensic Training Partnership follows to protect the personal data we collect, process, store, and share. We are committed to ensuring that all personal data is handled in accordance with applicable data protection laws and regulations. This policy applies to all employees, contractors, and third parties who have access to personal data on behalf of our business.
  2. Scope This policy applies to all personal data collected, processed, stored, or shared by our small business, regardless of the format or medium in which it is held. It covers both electronic and physical records containing personal data.
  3. Principles of Data Protection the Forensic Training Partnership adheres to the following principles when processing personal data: a. Lawfulness, Fairness, and Transparency: We process personal data in a lawful, fair, and transparent manner, ensuring that individuals are aware of how their data is used. b. Purpose Limitation: We only collect and process personal data for specified, explicit, and legitimate purposes. c. Data Minimisation: We only collect and retain personal data that is necessary for the purposes for which it is processed. d. Accuracy: We take reasonable steps to ensure that personal data is accurate, complete, and up to date. e. Storage Limitation: We retain personal data for no longer than necessary for the purposes for which it is processed. f. Integrity and Confidentiality: We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. g. Accountability: We take responsibility for our compliance with data protection laws and regulations.
  4. Data Collection and Processing
    • a. Consent: We obtain valid consent from individuals before collecting and processing their personal data, except where lawful processing is permitted without consent.
    • b. Data Collection: We collect personal data directly from individuals and ensure that they are informed of the purposes and legal basis for the data processing.
    • c. Data Processing: We process personal data only for the purposes for which it was collected and in accordance with applicable data protection laws.
    • d. Data Accuracy: We take reasonable steps to ensure that personal data is accurate, and individuals have the right to request corrections if their data is inaccurate or incomplete.
    • e. Data Security: We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
    • f. Data Sharing: We only share personal data with third parties when necessary and in compliance with data protection laws and regulations.
  5. Data Subject Rights We respect the rights of individuals regarding their personal data and provide mechanisms to exercise those rights, including:
    • a. Right to Access: Individuals have the right to access their personal data held by our small business.
    • b. Right to Rectification: Individuals have the right to request the correction of inaccurate or incomplete personal data.
    • c. Right to Erasure: Individuals have the right to request the erasure of their personal data under certain circumstances.
    • d. Right to Restriction: Individuals have the right to request the restriction of processing of their personal data.
    • e. Right to Data Portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format.
    • f. Right to Object: Individuals have the right to object to the processing of their personal data in certain situations.
    • g. Right to Withdraw Consent: Individuals have the right to withdraw their consent to the processing of their personal data at any time.
  6. Data Breach Response In the event of a data breach, the Forensic Training Partnership has established procedures to promptly respond to and mitigate the impact of such incidents. These procedures include: a. Identification and Investigation: We promptly identify and investigate any actual or suspected data breach. b. Notification: We notify affected individuals and relevant authorities as required by applicable data protection laws. c. Remediation: We take appropriate measures to address the causes of the data breach and prevent similar incidents in the future.
  7. Employee/Partners Responsibilities All employees and Partners are responsible for: a. Understanding and complying with this Data Protection Policy and related procedures. b. Collecting, processing, storing, and sharing personal data in accordance with applicable data protection laws. c. Protecting personal data from unauthorized access, disclosure, alteration, or destruction. d. Reporting any actual or suspected data breaches or non-compliance with this policy to the designated data protection officer.
  8. Training and Awareness. We provide regular data protection training to employees, contractors, and other relevant individuals to ensure they are aware of their responsibilities and understand best practices for protecting personal data.
  9. Policy Review This Data Protection Policy is regularly reviewed and updated to ensure its continued suitability and effectiveness in protecting personal data.
  10. Contact Information For any inquiries or concerns regarding our data protection practices or to exercise your data subject rights, please contact our designated data protection officer at email: info@forensictraininguk.org, or by writing to Data Protection Officer, Forensic Training Partnership, Windrush West, Innovation Centre, Howbery Park, Wallingford, OX10 8BA

This Data Protection Policy is effective as of 7 June 2023 and supersedes any previous policies or statements regarding data protection.