Fair processing notice: Prospects

Last updated: 15 February 2022

The data we collect about you

  • Your name, date of birth and contact details.

What we do with your data and on what grounds

We can only process your personal data if we have a basis to do so which is permitted by law. This may be that you have given your consent, or one of the other lawful bases for data processing outlined below.

  • Performance of contract with you. We process your personal data where it’s necessary to fulfil a contract with you or to take steps, at your request, before entering into such a contract.
  • Necessary for our legitimate interests. We process your personal data as and when necessary to do so in order to conduct and manage our business to provide you with the best services and experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We don’t use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Necessary to meet our legal obligations. We process your personal data where it’s necessary for compliance with legal or regulatory obligations.
Purpose/activityLawful basis for processing including basis of legitimate interest
To communicate non-essential information and send relevant promotional information.
  • Your consent (if received)
  • Necessary for our legitimate interests (to improve our business offering)

To process your applications and provide you with information on our courses and membership, including in relation to:

  • alternative routes to MAAT
  • finding a training provider
  • registering as a guest to our AAT events
  • booking a call back.
  • To perform a contract with you (in order to take steps at your request prior to entering into a contract)
  • Your consent (if received)
To provide customer support including addressing enquiries and resolving issues including technical problems.
  • Performance of a contract with you
To assess and maintain the quality of data stored, including dealing with returned mail and bounced emails and performing analysis on the completeness and correctness of data.
  • To comply with our legal obligations
IT system administration, to administer internal systems including maintaining access rights, troubleshooting issues and maintaining databases and backups.
  • Performance of a contract with you
  • Necessary for our legitimate interests (for running our business)

Who we share your personal data with

  • Relevant third-party service providers if your queries and issues relate to services provided by external suppliers.

Where we get your data from

  • Directly from you.
  • From your training provider, where you've consented as part of the training provider's enrolment process.

How long we keep your data

We will retain your data for two years following your last contact with us. This may include the contact details and any correspondence between you and us. We’d usually stop all communication with you one year after your last contact with us but retain required information so we can continue the relationship right where we left off if you were to return.

Related content