Our privacy notice - General users and our customers
CATG takes your privacy seriously.
We have set out this guide to answer any concerns or queries you may have about your personal and business data.
Our personal and business data handling policy and procedures have been developed in line with the requirements of the European Union Data Protection Directive, General Data Protection Regulation and applicable certification and accreditation schemes and national laws.
What data do we collect?
We collect and process data about you and your company when you approach CATG for certification or examination services.
The data we process includes:
Work address, email address and/or phone number (if you work from home, we will need this address)
Payment and delivery details, including billing and delivery addresses and credit card details, where you make purchases from CATG
Any other data you may provide
For FSC®, PEFC and GiB your company turnover
so, we can supply our certification and examination services to you.
We will issue you a contract, which we both sign, and this outlines how we and our staff will respect your confidentiality and privacy at all times.
How do we use this data and what is the legal basis for this use?
We process the data for the following purposes to:
Establish and fulfil a training, certification or examination contract for you
Comply with applicable laws and regulations
Meet the standards we are accredited to
Meet the standards you wish to be certificated to
This may include verifying your identity, taking payments, communicating with you, providing customer services and arranging the delivery of products or services to you.
We may use information you provide to personalise our communications to you; our website; and products or services for you.
We may also send you direct marketing for our relevant products and services.
We will not send you direct marketing of third-party products or services.
With whom and where will we share your data?
We will not share your information with anyone.
However, under the certification you seek or may hold with CATG, our records, certificates and reports will be inspected by:
The Forestry Commission
Grown in Britain
Our Governing Body
Sometimes auditors or representatives from these bodies may ask to attend CATG audits or examinations at customer sites. We will seek your permission for them to attend our audits or examinations with you.
The auditors or representatives reviewing CATG’s audit or examination work will not take records away from your company. They just review the accuracy of our work.
Occasionally, we may be asked if we certify particular customers and we, under the accreditation we hold, may have you confirm this. We will not do this or provide copies of your certification, until we have your agreement.
How long will you keep the data?
We will not keep your data for any purpose longer than necessary to fulfil your certification and examination. In some instances, we are required to retain certification and examination data for longer periods in case you ask for a copy of your examination certificate at a later date.
Where this is the case, your data will only be processed for the relevant legitimate purpose and not used for marketing.
Where you are a prospective customer and you have expressly consented to CATG contacting you, we will only retain your data for this purpose:
Where is my data stored?
The data that we collect is held at our offices on our servers. Our auditors will keep details such as your name, work address, email address and contact number on their laptops.
Our servers and auditor laptops are password protected.
What are my rights in relation to my data?
You have the right to ask CATG not to process your data for marketing purposes.
Where you have consented to CATG using your data, you can withdraw that consent at any time.
If the information we hold about you is inaccurate or incomplete, you can notify CATG and ask CATG to correct or supplement it.
You also have the right, to ask CATG to provide a copy of any data we hold about you.
If you have a complaint about how we have handled your data, you can ask CATG to restrict how we use your data while your complaint is resolved. In some circumstances you can ask CATG to erase your data:
By withdrawing your consent for CATG to use it
If it is no longer necessary for CATG to use your data
If you object to the use of your data and we don't have a good reason to continue to use it
If we haven't handled your data in accordance with our obligations
Where can I find more information about CATG’s handling of my data?
Should you have any queries regarding CATG’s processing of your data or wish to exercise your rights you can contact CATG using this email address:
Or calling our team on:
If you feel our response has not been quick, to your satisfaction or you are unhappy with your result you can appeal to:
CATG’s Governing Body:
29a Princes Crescent
Full details are on our website www.catg.co.uk at: