Privacy & Cookies Notice

01Who we are

The Engineers Registration Board is responsible for the processing of your personal information collected through our registration system, our website and other related services.

02What this notice covers

This notice applies when you register with ERB, use our services, browse this website, or interact with the systems we use to deliver those services, including our Microsoft Office services.

03Information we collect

Depending on the service, we may collect:

• Full name and identification details
• Date of birth
• Contact information, including telephone number, email and address
• Employment or business information
• Financial or payment information, where applicable
• Information contained in supporting documents
• Information required for identity verification and regulatory compliance
• Technical information relating to your use of our systems and website, such as IP address, browser type and site activity

We do not always collect it from you directly We may also receive personal information from third parties, including employers, education and training providers, professional bodies, regulatory authorities, qualification authorities, CPD providers and other organisations, where this is necessary for the performance of ERB's statutory and regulatory functions. We only collect information that is relevant and necessary for the purpose it is required for.

04How we use your information

Your personal information may be used to:

• Process and manage your registration
• Provide and administer our products and services
• Verify your identity and information
• Communicate with you regarding our services, including updates and notifications
• Process transactions, applications, claims or requests, where applicable
• Meet legal, regulatory and contractual obligations
• Prevent fraud and protect the security of our systems
• Maintain accurate business and customer records
• Improve our services, systems, website performance and customer experience

Limits on use We will not use your personal information for purposes that are incompatible with the purpose for which it was collected, unless permitted by applicable law or with your prior approval.

05Legal basis for processing

We process personal information on an appropriate lawful basis, depending on the circumstances. This may include:

• Your consent
• The performance of a contract, or steps taken at your request before entering into a contract
• Compliance with a legal or regulatory obligation
• Protection of vital interests
• Performance of a task carried out in the public interest
• A legitimate interest pursued by ERB, where permitted by applicable law

Withdrawing consent Where we rely on your consent, you may withdraw that consent at any time.

06Cookies and technical information

Our website and systems use cookies, which are small text files stored on your device. They help us remember your preferences, understand how you interact with our site, maintain system functionality, improve security, analyse usage and optimise performance.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features on our website.

07Sharing your information

Where necessary and lawful, your personal information may be shared with authorised employees, service providers, technology providers, professional advisers, regulators, government authorities, financial institutions, business partners or other authorised third parties.

We take reasonable steps to ensure that parties who process personal information on our behalf are bound to maintain appropriate confidentiality, security and data protection measures.

08International transfers

Where your personal information is transferred to, stored in, or processed in another country, we will take appropriate measures to ensure that the transfer is conducted in accordance with applicable data protection requirements and that appropriate safeguards are in place.

09Security of your information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.

However, no electronic system or method of transmission over the internet can be guaranteed to be completely secure, and we cannot guarantee absolute security.

10How long we keep your information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide our services, comply with legal and regulatory requirements, resolve disputes, maintain appropriate records, or fulfil other lawful purposes.

When information is no longer required, we take appropriate steps to securely delete, destroy or anonymise it in accordance with applicable requirements.

11Your data protection rights

Subject to applicable law, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, where applicable
• Request restriction of certain processing activities, where applicable
• Object to certain processing activities, where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the relevant data protection supervisory authority where you believe your rights have been infringed

Exercising your rights To exercise any of these rights, or to make a privacy-related enquiry, contact us using the details in section 13.

12Changes to this notice

We may update this notice from time to time to reflect changes in our services, systems, legal requirements or data processing practices. The updated version will be made available through our website, our systems or other appropriate communication channels.

13Contact us

If you have any questions about this notice or how we handle your personal information, please contact our privacy and data protection contact.