Privacy Notice

October 2026

1. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

British Association of Cardiovascular Health Professionals (BACHP)

Address: c/o BCS, 9 Fitzroy Square, London, W1T 5HW, United Kingdom

Email: admin@bachp.org.uk

BACHP retains ownership and ultimate responsibility for all personal data processed in connection with its services.

Our Data Protection Contact can be contacted at admin@bachp.org.uk.

You have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at https://www.ico.org.uk.

2. Information Collection and Use

We collect personal data when you:

  • Register for BACHP membership, courses, events or conferences.
  • Interact with our website or digital services.
  • Subscribe to communications or participate in surveys.
  • Update your membership profile or communication preferences.
  • Contact BACHP or communicate with us.

We may also receive personal data from organisations that previously administered BANCC membership and related services, including the British Cardiovascular Society, where this is necessary to transfer and continue your membership and maintain relevant membership records.

Data collected may include:

  • Contact details (name, email, postal address and phone number).
  • Personal details, including sex or gender and, where you choose to provide it, ethnicity.
  • Professional information (such as professional role, registration status, organisation, region and professional interests)
  • Optional demographic information where you choose to provide it.
  • Membership information, including membership type, status, renewal dates and payment status.
  • Information about event registrations and participation.
  • Communication preferences and records of consent where applicable.
  • Communications and enquiries you send to BACHP.
  • Technical information generated when you use our website, such as IP address and information collected through cookies.

We use this data to:

  • Provide and administer membership and event services
  • Communicate essential membership information, updates, resources and educational opportunities. Manage membership subscriptions, renewals and payments.
  • Maintain membership records and respond to enquiries.
  • Improve user experience and website functionality
  • Understand and improve our membership, services and activities, including through aggregated statistical analysis where appropriate.
  • Monitor the diversity and inclusivity of our membership, where members have voluntarily provided relevant information and an appropriate lawful basis applies.
  • Maintain the security and effective operation of our website, membership platform and other systems. 
  •  Meet our legal, financial and regulatory responsibilities.

BACHP will never sell or rent your personal data to third parties.

3. Legal Basis for Processing

Depending on the purpose for which we use your information, we rely on one or more of the following lawful bases:

Contract: Where processing is necessary to administer your BACHP membership, event booking or another service you have requested, including processing applications, managing subscriptions and communicating essential information about those services.

Consent: For certain optional communications or other activities where we specifically ask for your consent. You may withdraw your consent at any time through your communication preferences or by contacting admin@bachp.org.uk.

Legitimate Interests: We process certain personal data where necessary for BACHP's legitimate interests in operating and administering the Association, supporting and communicating with its members, improving its services, maintaining accurate historical and membership records, and maintaining the security and effective operation of its systems. Where we rely on legitimate interests, we consider the necessity and proportionality of the processing and balance our interests against your rights and interests.

Legal Obligations: Where processing is necessary for BACHP to comply with applicable legal, regulatory, accounting or other statutory obligations.

Where we process special category personal data, we will ensure that an appropriate additional condition under UK data protection law applies.

Some information, including information about racial or ethnic origin, is classified as special category personal data. Providing this information is optional. Where BACHP collects ethnicity or other special category information for equality, diversity and inclusion monitoring, we will ordinarily rely on your explicit consent. You may withdraw that consent at any time. Wherever practicable, information used for reporting and analysis will be aggregated or anonymised.

Where another special category condition applies, BACHP will identify and document that condition in accordance with UK data protection law.

4. Cookies and Website Usage

Our website may use cookies and similar technologies to:

  • Enable essential website functions, including account login and member services.
  • Remember preferences where appropriate.
  • Help us understand how the website is used and improve its performance, where applicable.
  • Support the security and reliable operation of the website and membership platform.

Some cookies are necessary for the website to function. Where consent is required for non-essential cookies, we will seek this before placing them.

Where our website uses non-essential cookies, you will be provided with an appropriate means of giving, refusing or withdrawing consent. You can also control cookies through your browser settings.

We may also process IP addresses and related technical information for site administration, security and analytics.

Further information about the cookies used on our website is available in our Cookie Policy here.

5. Data Sharing and Processors

BACHP is the data controller for its membership data.

We use White Fuse Ltd to provide our membership management platform, member database, website and associated digital services. White Fuse processes personal data on BACHP's behalf and acts as a data processor under its Data Processing Terms.

Member data held within White Fuse may include membership records, contact and professional information, communication preferences, event information and other information members provide through BACHP's online services.

White Fuse may access, process or store personal data where necessary to operate, maintain, secure and support the platform. This may include access to identifiable account or usage information when investigating a support request relating to BACHP’s website or membership platform.

White Fuse may also use approved third-party service providers or subprocessors to help provide its platform, storage, support and related services. Such processing must be governed by appropriate contractual and data protection arrangements.

Where you make a membership or event payment, payment information may be processed by the relevant payment provide, including Stripe or GoCardless, as applicable. BACHP does not ordinarily receive or store your full card or bank account details through the White Fuse membership database.

Payment providers may act as BACHP’s processors for some activities and as separate data controllers where they process information for their own legal, regulatory, fraud-prevention or compliance purposes. Their processing is also governed by their applicable privacy notices.

Designated BACHP Council members and authorised administrators may have access to member data solely where this is necessary to perform their duties.

Access to personal data is limited according to role and operational need.

We will not share your personal data with other organisations for their own marketing purposes without your consent.

We may disclose personal data where required by law or where necessary to establish, exercise or defend legal rights.

International processing and transfers:

White Fuse states that it endeavours to host the information it holds within the European Union. However, its services, suppliers or partners may process information outside the United Kingdom or European Economic Area where this is reasonably necessary to provide the platform.

Other service providers used by BACHP may also process personal data outside the United Kingdom. Where personal data is transferred internationally, BACHP will take reasonable steps to ensure that an appropriate lawful transfer mechanism is in place. This may include reliance on UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or an approved UK Addendum. Further information about relevant safeguards can be requested by contacting admin@bachp.org.uk.

6. Data Retention

Personal data is retained for as long as necessary for the purposes for which it was collected, including the administration of your membership and compliance with applicable legal, accounting and regulatory requirements.

Unless a longer retention period is required for a particular purpose, membership records will normally be retained for up to three years after membership ends, after which personal data will be securely deleted or anonymised.

Some limited records may need to be retained for longer where required by law or for legitimate organisational record-keeping purposes.

For example, financial transaction records may need to be retained for the applicable statutory accounting or tax-retention period.

Where we rely on consent to process optional special category information, we will cease using that information if consent is withdrawn, unless another lawful reason requires or permits its retention.

7. Security

BACHP takes appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction.

Our membership management platform is provided by White Fuse. White Fuse's Data Processing Terms require it to implement appropriate technical and organisational security measures to protect personal data, taking account of the nature of the processing and associated risks.

White Fuse states that it uses security procedures and features intended to prevent unauthorised access and that it uses trusted service providers to support the operation of its platform. As White Fuse’s published privacy policy also permits processing outside the EU in some circumstances, BACHP does not represent that all personal data will invariably remain within the EU.

Access to BACHP membership information is restricted to authorised users and controlled through individual user accounts and access permissions.

However, the transmission of information via the internet can never be guaranteed to be completely secure. We therefore cannot guarantee the absolute security of information transmitted electronically, although we and our service providers take appropriate measures to protect it.

If you have any questions about the security of your data, please contact us at admin@bachp.org.uk.

8. Your Rights

Depending on the circumstances and the lawful basis on which your information is processed, you may have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete personal data.
  • Ask us to erase your personal data in certain circumstances.
  • Ask us to restrict the processing of your personal data in certain circumstances.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent.
  • Object at any time to the use of your personal data for direct marketing.
  • Receive certain personal data in a portable format where the right to data portability applies.
  • Ask us about safeguards used where your information is transferred internationally.
    Complain to the Information Commissioner’s Office about our use of your personal data.

Requests can be made via admin@bachp.org.uk. We will normally respond without undue delay and within one month, in accordance with applicable data protection law.

Should you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk.

9. Changes to This Notice

Updates will be posted on this page and, where appropriate, we will notify members of significant changes by email or through our membership platform.

We will review this notice periodically and update it where our services, providers, processing activities or legal obligations change. 

Where a change materially affects how we use personal data, we will bring it to members’ attention before the new processing begins where required.

10. Transparency

BACHP is committed to being open and transparent about how we collect, use, share and protect your personal data. This notice explains:

  • What personal data we collect and why.
  • How your data is used and who it may be shared with.
  • Your rights regarding your personal data and how to exercise them.
  • Any significant changes to our data practices or this notice.

If you have any questions or require further details about our data processing, please contact us at admin@bachp.org.uk.

11. Contact

Questions or requests regarding this Privacy Notice or BACHP's processing of your personal data should be sent to:

Email: admin@bachp.org.uk

Subject line: ‘BACHP Privacy Notice’.