Fair processing notice: AAT Employer Scheme members

Last updated: 15 February 2022

The data we collect about you

  • Your name, contact details, date of birth and gender
  • Your organisation and job title
  • Payment information, including your bank, card or direct debit details
  • Your employer reference
  • Any other relevant personal information contained in your application forms, supporting documents uploaded (such as your photo ID) with your application, or that you may provide to us with consent (eg responses to surveys and personal stories including details of ethnicity or health data for marketing materials).

In the course of your engagement with us you may also need to share certain personal data of AAT students who are employed by you. All personal data regarding students will be processed in accordance with the notice regarding students.

What we do with your data and on what grounds

We can only process your personal data if we have a basis to do so which is permitted by law. This may be that you have given your consent, or it may be one of the other lawful bases for data processing. These comprise situations where it is necessary:

  • for our performance of a contract with you. We process your personal data where it’s necessary in order to fulfil a contract with you or to take steps, at your request, before entering into such a contract
  • for our legitimate interests. We process your personal data as and when necessary to do so in order to conduct and manage our business to provide you with the best service and experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We don’t use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about our legitimate interests (including how we assess these against any potential impact on you in respect of specific activities) by contacting us
  • to meet our legal obligations. We process your personal data where it’s necessary for compliance with legal or regulatory obligations.
Purpose/activityLawful basis for processing including basis of legitimate interest
To make important communications relevant to your AAT Employer Scheme membership.
  • Our legitimate interests (for running our business)
  • Performance of a contract with you
  • Your consent (if received)
To have a bank of case studies available for contact in order to publish stories promoting AAT in magazines, online and in marketing material.Your consent (if received)
Customer support in relation to your AAT Employer Scheme membership, including to address enquiries and resolve issues.
  • Performance of a contract with you
  • Supporting activities performed under your consent and the substantial public interest (in respect of sensitive personal data)
Archiving your collected data to support assessment queries, professional standards investigations and general customer queries.
  • Performance of a contract with you
  • To meet our legal obligations
To meet our legal obligations, including data management to assess and maintain the quality of data stored. This also includes dealing with returned mail, bounced emails and performing analysis on the completeness and correctness of data.To meet our legal obligations
Managing payments, including to enable you to pay members’ fees and process invoices and payments.Performance of a contract with you
To register apprentices who intend to undertake an End Point Assessment (EPA) through AAT, and to fulfil our obligations as an End Point Assessment Organisation (EPAO).Performance of a contract with you

For market research/analysis and quality control, including to:

  • identify trends and gather insight relating to AAT products and services
  • recruit end users to test the website and other services
  • maintain internal quality levels by conducting call, email and CRM audits
  • invite people to participate in research and focus groups.
Necessary for our legitimate interests (improving our business offerings)
To administer internal systems including maintaining access rights, troubleshooting issues and maintaining databases and backups.Performance of a contract with you

Who we share your personal data with

  • Our third-party service providers of payment, mailing, user testing and IT services
  • External Chief Examiners
  • The Education and Skills Fund Agency, if apprentices will be undertaking an End Point Assessment through us.

Where we get your data from

Other than directly from you, we may also receive personal data from publicly available sources, such as returned post and information available on websites.

How long we keep your data

We will retain your data for seven years from the termination of our relationship, as per the legal requirement.

Related content