Privacy Policy

At CCEA, we’re committed to respecting and protecting your personal information. This Privacy Notice explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure. This includes data collected via:

  • Our website, marketing or research;
  • Participation in CCEA events, training or examinations;
  • Contact with us through email, phone, social media or post
  • Employment and contract work within the organisation

“We” includes information from the CCEA Awarding Organisation, the CCEA Regulator and the Northern Ireland Curriculum.

General Data Protection Regulation (GDPR)

Any information you provide will be held securely and in accordance with the General Data Protection Regulation CCEA has a legal duty to protect any information collected from you.

The Information we collect about you and how we use it

CCEA interact with many people on a daily basis, each differing in experience and user need. To help you identify the information we collect, how we use your personal information you can select and view the relevant services that we provide to you.

Website

In running and maintaining our website we may collect the following data about you:

  • information that you provide when you communicate with us by any means (for example by emailing us);
  • information that you provide when you complete online surveys, for example customer satisfaction surveys;
  • information about your use of our site, using cookies and page tagging techniques including JavaScript; and/or
  • Information we get from your use of our services. We collect information about the services that you use and how you use them, like when you watch a video on ccea.org.uk, visit a web page or activity, access Results Online or Central login etc. This information includes:

Device information

We collect device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information).

Log information

When you use our services or view content provided by ccea.org.uk, we automatically collect and store certain information in server logs. This includes:

  • details of how you used our service, such as your search queries.
  • telephony log information like your phone number, calling-party number, forwarding numbers, time and date of calls, duration of calls and types of calls.
  • Internet protocol address.
  • device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.
  • cookies that may uniquely identify your browser or your Google Account.
  • Location information
  • Links – In order to provide improved services for you we may keep a track of how you interact with links across our services. This includes emails we send you and when clicking on pages on our websites or applications. If you click on an external link on our website the website operator might figure out that you came from the CCEA website along with other information like audience characteristics, cookies and your IP address.

Local storage

We may collect and store information (including personal information) locally on your device using mechanisms such as browser web storage (including HTML 5) and application data caches.

Cookies and similar technologies

The CCEA website use various technologies to collect and store information when you visit a Google service, and this may include using cookies or similar technologies to identify your browser or device.

Our Google Analytics product helps us analyse the traffic to our websites and apps. Google Analytics information is linked, by the Google Analytics customer or by Google, using Google technology, with information about visits to multiple sites.

How we use the information the website collects about you

CCEA may use your personal information:

  • to analyse and improve the services offered on CCEA websites. When you contact the CCEA website, we keep a record of your communication to help solve any issues you might be facing. We may use your email address to inform you about our services, such as letting you know about upcoming changes or improvements. We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Notice. The CCEA website processes personal information on our servers. We may process your personal information on a server located outside the country where you live.

Visiting the CCEA website from another site

When you are directed to the CCEA website from another site, CCEA may receive personal information relating to you from the other site(s). You should read the privacy policies for these sites, as these will govern the use of any personal information that you provide and which is then provided to CCEA.

Linking to another site

Any personal information that you give to CCEA is not passed on to any other website. However, the CCEA website contains links to other sites. You should always be aware when you follow one of these links that this Privacy Notice applies only to the CCEA website. You should also read the privacy statement(s) of any other site(s) that may collect personal information about you.

How do we protect your data on our website

We work hard to ensure the security of ccea.org.uk and our users from unauthorized access to, disclosure or destruction of information we hold. In particular:

  • We will encrypt many of our services using SSL in particular forms with user data or logins. You should not disclose any information if you do not see the lock on the browser and you should always keep any usernames and passwords secure, do not share this information with anyone else.
  • We constantly review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems.
  • We restrict access to personal information to CCEA employees and contractors who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these requirements.

View key terms and terms of use of our website.

Use of Cookies

  • The CCEA website and some of the tools and services it links to use a number of cookies.
    To help us meet the needs of our users, we use Google Analytics to collect information about how people use the CCEA website.
    Google Analytics stores information about what pages you visit, how long you are on the website, how you got here and what you click on. Through this, we cannot identify who you are and do not collect or store your personal details such as your name or address.
  • Click here for an overview of Google’s Privacy Policy.

Social Media cookies

CCEA is active on a range of social media platforms. Please note we have no control over the use of cookies on these third party sites. For more information on the privacy policies for the social media sites please click on the relevant links below:

  • Twitter
  • Facebook
  • Instagram
  • YouTube
  • LinkedIN

Contract for Services

We process personal data relating to those who undertake work on our behalf under contract for services. We do this to assist in the running of the business and to enable individuals to be paid where appropriate.

The collection of this information also benefits CCEA by:

  • ensuring our processes are fully supported during key periods
  • informing the development of appointment policies and procedures
  • allowing better financial modelling and planning

The personal data may include identifiers such as:

  • Name
  • Date of birth
  • Address
  • Telephone/mobile numbers
  • Email address (where provided)
  • National insurance number
  • Bank details and payment records
  • Next of kin and GP contact details
  • Application forms and references
  • Employer details
  • Performance records
  • Attendance/training records
  • Complaints and investigations
  • Conflicts of interest
  • CCTV footage (see separate privacy notice)

CCEA will not share information about you with third parties without your consent unless the law allows or requires us to. We are required to share some of your personal data with:

  • The Department of Education and The Department for the Economy
  • Her Majesty’s Revenue and Customs
  • Education Authority

Learners

We process personal data relating to those learners who enter for a CCEA qualification. This includes sitting a CCEA examination, completing coursework and assessments. CCEA processes information in the marking of examination papers, the delivery of results to learners, the certification of results and the permanent record of these results.

The personal data may include identifiers such as:

  • Name
  • Candidate number for examinations and ULN (Unique Learner Number)
  • Date of birth
  • School, college or training organisation you are registered with as your examinations centre
  • Subjects and levels entered for examination and assessment
  • Performance information such as examination and assessment marks and/or grades.
  • Applications for enquiries, appeals and special consideration information (if applicable) – this may include information we consider ‘sensitive’ as it may be information that your school or college feels we need to know when considering examination and assessments. For example, there may be medical information that is important when it comes to your results.

This information is shared with CCEA by your school or college. We will not disclose it to anyone else unless we are required to by law. For example, we will not disclose your examination or assessment information with anyone other than your centre or with you (we may need parental/guardian consent for this).

There may be occasions where we take photographs or video footage. For example, we may do this at events such as at the Celebrate with CCEA award ceremony. We may wish to use the photographs or video for use on our website or in documents we produce. At any time we take your photograph/video footage we will ask for consent from you or your parent / guardian. We will not put photographs or video footage of you on social media, in any of our publications or on our website without having consent to do so.

There are some occasions when we are required to share some of your personal data with:

  • University/college places: We may share your examination and assessment results with universities for those who are applying for university. We do this through sharing your information with the Universities and Colleges Admissions Services (UCAS) and Central Applications Office in Galway to help them process offers for university/college places.
  • Examination/assessments:We may need to share your data if we discover something in an examination or assessment. An example might be where someone has written something that gives us cause for concern for their health and safety. We do this because we have a duty to care for that person’s wellbeing under legislation called the Children (Northern Ireland) Order 1995. In these cases, we will give the school or college the information and we will ask them to deal with it. We will not ask them how they have dealt with it or what happened. Another example might be where someone has not followed the rules of the examination or assessment, for example, copying the work of others. These cases are known as malpractice cases and we have to notify your school/college of this.
  • Social media: In the same way that someone might write something in an examination or assessment, someone might write something on social media that gives us cause for concern. If we find out what school or college the person goes to then we will share the information with the school or college and ask them to deal with it. We will not ask them how they have dealt with it or what happened. We try and monitor social media during the working day but please be aware that any personal information you share may be seen by others.

Employees

We process personal data relating to those we employ and for those contracted for their services. For CCEA staff we do this for employment purposes, to assist in the running of the business and to enable individuals to be paid. For Contract for Services individuals we do this to assist in the running of the business and to enable people to be paid in line with their contracts.

The collection of this information also benefit CCEA by:

  • improving the management of staff resources across the business
  • ensuring our processes are fully supported during key periods
  • enabling development of a comprehensive picture of the staff profile and how it is deployed
  • informing the development of recruitment and retention policies
  • allowing better financial modelling and planning
  • enabling monitoring of selected protected characteristics

The personal data may include identifiers such as:

  • Name
  • Date of birth
  • Staff number (staff only)
  • Address
  • Telephone/mobile numbers
  • Email address (where provided)
  • National insurance number
  • Bank details, pension information and payment records
  • Next of kin and GP contact details
  • Application forms and references
  • Performance reviews
  • Training records
  • Attendance records
  • Medical records
  • Equality information
  • Complaints, investigations and disciplinary procedures
  • Conflicts of interest
  • Trade union membership (where appropriate)
  • Photographs (for staff ID)

CCEA will not share information about you with third parties without your consent unless the law allows or requires us to. We are required to share some of your personal data with:

  • The Department of Education
  • Her Majesty’s Revenue and Customs

Social Media

CCEA is active on a range of social media platforms. Please note we have no control over the use of cookies on these third party sites. For more information on the privacy policies for the social media sites please click on the relevant links below:

  • Twitter
  • Facebook
  • Instagram
  • YouTube
  • LinkedIN

Whilst we try and monitor these sites during normal business hours, please be aware that any personal information you share may be seen by others.

Please refer to our Privacy Notice designed for Learners where we explain that there may be occasions when information shared by a child has to be shared with their school or college under our duty to care for children contained in the Children (Northern Ireland) Order 1995.

Marketing, Communications and Events

Opt in (subscribe) marketing & communications emails

We use a third-party email service, MailChimp, to manage our marketing communications and newsletters to subscribers. MailChimp act as a data-processor on behalf of CCEA. We only use this service for emails from marcomms@ccea.org.uk or events@ccea.org.uk.

MailChimp is a US company with staff based outside the EEA, and stores data in the US. MailChimp is certified under the EU-US Privacy Shield framework. When you sign up to our email alerts, you agree to your data being stored in this way. You can unsubscribe from these emails at any time.

To help improve our user experience with CCEA’s email communications we use Mailchimp analytics to collect information about our subscribers. These analytics only track and collect how many subscribers open a message or click the links inside an email communication. No personal data is kept. MailChimp’s privacy policy is available at mailchimp.com/legal/privacy.

You can update your profile or unsubscribe from our marketing communications by clicking on the unsubscribe link provided at the end of any email.

Events

When you register for a CCEA support, information, training events, conference or webinar, your registration is handled by Eventbrite.

Your information (which includes name, centre, email address, contact telephone number and dietary requirements) is collected by Eventbrite as the data-processor on behalf of CCEA. This information is transmitted in a secure and confidential manner.

Eventbrite is certified under the EU-U.S. Privacy Shield Framework regarding the collection, use, and retention of Personal Data from European Economic Area ("EEA") member countries.You can view Eventbrite’s privacy policy, here www.eventbrite.com/privacypolicy.

Managing your personal information with us

You control the personal data you share with us The accuracy of your information is important to us.

When you use our services we aim to give you ways to access and update your personal information through the systems you use. If an electronic service does not exist please email info@ccea.org.uk and we will update as soon as possible.

We aim to maintain our services in a way, which protects information from accidental or malicious destruction. After you delete information from our services, we may not immediately delete residual copies from our active servers and may not remove information from our backup systems.

You have the right to ask for a copy of the information CCEA hold about you.We will provide this information, free of charge, in line with the GDPR timescales of one month.

Changes to the Privacy Notice

From time to time, our Privacy Notice may change. This will not reduce your rights under this Privacy Notice without your explicit consent. We will post any privacy notice changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy notice changes). We will also keep prior versions of this Privacy Notice in an archive for you to review.

Contacting us

Please do not hesitate to contact us about any matter relating to this Privacy Notice.