This Privacy Notice provides information on how the Chartered Association of Business Schools collects and processes your personal data when you register to attend any event organised for the Help to Grow: Management Alumni Network (“the Alumni Network”).

This Privacy Notice further provides you with information regarding your rights and our obligations.

We process data in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act (DPA) 2018. This Privacy Notice is made in accordance with Article 13 of the UK GDPR. 

The Department for Business and Trade (DBT) is funding the Alumni Network and the Alumni Network Hub. The Chartered Association of Business Schools is delivering the Alumni Network, and processing your data, on DBT’s behalf. We will share your data with DBT: please see below. DBT is the data controller, and the Chartered Association of Business Schools is the data processor in relation to your data. We are providing this Privacy Notice on DBT’s behalf. DBT also has its own privacy policy, which can be accessed here.

When we mention “we”, “us” or “our” in this Privacy Notice, we are referring to the Chartered Association of Business Schools.

Updates to this notice 

If this Privacy Notice changes in any way, we will place an updated version on this website page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. Last updated January 2026. 

Who is collecting the data?

The Chartered Association of Business Schools is committed to safeguarding and respecting your privacy.

The Chartered Association of Business Schools is a registered company (company number: RC000880) and a registered charity in England and Wales (charity number: 1162854). Our address is: 3rd Floor, 40 Queen Street, London, EC4R 1DD.

DBT is a department of the UK Government, whose general contact address is: Old Admiralty Building, Admiralty Pl, London SW1A 2DY.

Why do we process your personal data and what is our legal basis for processing it?

We collect and use your information to promote our events and webinars to you, register you for them at your request, facilitate your attendance at the event, provide you with information on event logistics and arrange attendee networking.

The legal basis for processing your personal data as set out above is:

• your consent, if you belong to the Alumni Network; or
• our legitimate interests, if you are a speaker or exhibitor at the event.

The legal basis for processing your Special Category personal data (see below) is with your explicit consent.

We may also use your information to help us decide what future events to offer. The legal basis for processing your personal data for this purpose is our legitimate interests.

How do we collect personal data about you in relation to an event? 

We collect the data you provide when registering  to attend an event organised for the Alumni Network, including as a speaker or an exhibitor.

What personal data do we collect from you?

• Identity Data: First and last name, job title, company name.
• Contact Data: Email address.
• Alumni ID (if applicable: this is given to participants  on the Help to Grow Management course)
• Photographs of you at our events and your agreement to these being taken (if applicable).
• Category e.g. Alumni, Course Participant, Speaker, Business School or Stakeholder, Exhibitor.

• Transaction Data: Details of your event registration (e.g. your choice of workshops at the event).
• Profile Data: information regarding your attendance at our events, any feedback on such events, photographs/images if you choose to upload them when registering for an event and custom survey responses you voluntarily provide during the event registration process.

Special category personal data

If you choose to disclose information regarding any disability you may have and/or your accessibility and/or dietary requirements for an event, we may use this information to make reasonable adjustments to provide the event and/or refreshments to you and share it with the venue provider and/or caterer.

What do we use your personal data for?

Register you for the event at your request, contact you about it, and give your name to the venue provider and our third-party event management platform (see ‘Do we share your personal data with third parties?’ below). 

We may also use your information to help us decide what future events to run and how to market these.

Where do we process your personal data and how do we keep it secure?

We process data at our registered office: 3rd Floor, 40 Queen Street, London, EC4R 1DD. Our staff who work remotely and our third-party service providers do so under contracts which protect your data, as described below.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, or used, accessed, altered, or disclosed in an unauthorised way. In addition, we limit access to your personal data to those employees, agents and contractors who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach. We will notify you and the Information Commissioner’s Office of a breach where we are legally required to do so.

We will take all steps necessary to ensure that your data is processed and stored in a secure environment, in accordance with our legal obligations and the UK GDPR and DPA 2018.

International transfers

We may transfer your data outside the United Kingdom (UK). 

Whenever we do so, we ensure a similar degree of protection is afforded to it by ensuring that one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government. For further details, see: A guide to international transfers | ICO.
• Where we use certain service providers outside of the UK/EEA, we use specific contracts or frameworks approved by the UK Government which give personal data the same protection it has in the UK. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

What are our principles for retaining personal data?

In accordance with the UK GDPR and the DPA 2018, we retain personal data for no longer than is necessary for the purposes for which it is being processed or to comply with our legal obligations.

In some circumstances you can ask us to delete your data: see Your rights below for further information.

Any Special Category personal data that you provide in relation to an event will be deleted from our records within one month after the relevant event.

There are some circumstances where personal data may lawfully be stored for longer periods or permanently, such as for statistical purposes or if the data is anonymised.

We will keep your Transaction Data and some of your Profile Data (your attendance at our events, any feedback on such events and custom survey responses) for the duration of the Help to Grow: Management Programme, to help us decide what future events to run and how to market these.

Your Identity Data, Contact Data, Transaction Data and  Profile Data will be stored until request erasure of your personal data.

Do we share your personal data with third parties?

We utilise the third-party event management platform Whova to facilitate registration, event logistics, and attendee networking.

When you register for an event, we share the following categories of your personal data with Whova, which acts as a Data Processor on our behalf:

• Identity Data: First and last name, job title, company name
• Contact Data: Email Address
• Attendee category (e.g. Alumni, Course Participant, Speaker, Business School or Stakeholder, Exhibitor)

If you choose to download and utilise the Whova app for our events, the following information is also shared with Whova:

• Transaction Data: Details of your event registration (e.g. your choice of workshops at the event).
• Profile Data: Any feedback, photographs/images, custom survey responses you voluntarily provide during the event registration process.

This data is processed by Whova to:

1. Register you for the event, issue event badges and manage check-ins.
2. Grant you access to the event’s dedicated mobile application and web portal.
3. Enable you to access the event agenda, speaker information, and communicate with other attendees.
4. Enable you to register for facilitated networking opportunities.
5. Enable you to provide feedback on event sessions and enable Whova and us to consider your feedback and survey responses.

The Whova platform includes optional networking features that allow attendees to view and interact with one another. Use of the Whova app’s networking features are voluntary. You are in control of the visibility of your profile and can manage your networking preferences directly within the Whova application settings.

Whova also acts as a Data Controller in respect of certain processing of your personal data, as set out in their own privacy policy, which can be reviewed here: Whova Privacy Information. Whova has certified that it adheres to the EU-US Data Privacy Framework Principles and the UK Extension to the EU-US Data Privacy Framework when it processes personal data received from the European Union and the United Kingdom .

We may also pass your information to third parties for the purposes of completing tasks and delivering services to you on our behalf, for example when we work with a partner to deliver an event; or when briefing the facilitator or speaker ahead of an event. 

When delivering an event, we may pass on registration lists (name only) to a venue for security purposes, ensuring appropriate encryption to protect your information.

If you belong to the Alumni Network, we share anonymised engagement data such as event and webinar registration, attendance numbers and event feedback with DBT, which may share it with HMRC. No personally identifiable data on individuals will be shared with HMRC.

We will share anonymised data about attendance numbers at Alumni Network events with Ipsos (Ipsos Privacy Information) and the Institute for Employment Studies (Institute for Employment Studies Privacy Information) for the purpose of evaluating engagement with the Alumni Network.

We will not sell your information to third parties.

We require all our third-party service providers to respect the security of your personal data and to treat it in accordance with the law.

Your rights

How can you update the data we hold on you or unsubscribe?

If your details have changed you can ask us to update the records we hold about you. To do so, please contact us by emailing Marketingteam@charteredabs.org or call +44 020 7236 7678. You may unsubscribe at any time.

How can you access the personal data we hold about you?

You have a right to request copies of the personal data we or your business school hold about you. This is commonly referred to as a Subject Access Request. There are some exemptions to this right, which means you may not always receive copies of all the information we process. You can read about this right here. If you would like to make a Subject Access Request, please write to us at enquiries@charteredabs.org, and put ‘Subject Access Request’ in the subject field. We are required to respond to your Subject Access Request within 1 month of your request under UK GDPR. However, if your request is complex or we receive a number of requests from you, we reserves the right to extend the time for response by a further two months. We would confirm this with you in writing.

You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights). However, if your request is clearly unfounded or excessive, we could refuse to comply with your request.

How to contact us or to make a complaint?

If you have any questions about our events or if you would like to make a complaint, please contact us by emailing Marketingteam@charteredabs.org or call +44 20 7236 7678.

If you have any questions about this Privacy Notice or our data protection practices, or if you are not happy with the way that we have handled your personal information, you can contact our data privacy manager:

Focus 4 U Ltd. – dpo@charteredabs.org 

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.