Privacy Policy


Policy Statement

CMC Partnership (UK) Ltd is committed to ensuring that your privacy is protected. This Privacy Policy ('Policy') sets out how CMC Partnership (UK) Ltd ('we', 'us') use and protect any personal data that users ('you') provide, or that we collect from you in the course of our everyday business activities.  

CMC Partnership collects, uses and discloses personal information (information by which an individual can be identified by) to perform its business activities and to provide customer services; primarily the provision of change management consultancy and training and the recruitment of permanent staff, suppliers and products to deliver those services.  The company does not carry out automated decision making or profiling.

By providing your personal information to us you agree that this Privacy Policy will apply to how we handle your personal information and you consent to us collecting, using and disclosing your personal information as detailed in this policy. 

  • This includes consent to us using and disclosing your personal sensitive information for the purpose for which it was collected, unless we subsequently receive your consent to use it for another purpose. 
  • When you provide personal information in regard to a third party, e.g. providing emergency or referee details you agree that you have obtained the consent of the other person (third party) for us to collect, use and disclose their personal information in accordance with this Privacy Policy, and that you have made the other person aware of your actions and of this Privacy Policy. 

If you do not agree with any part of this Privacy Policy you must not provide your personal information, or the personal information of others to us.  Please note if you do not provide us with your personal information, or if you withdraw the original consent you provided under this policy, then this may affect our ability to provide services to you, or negatively impact the services we provide to you.

CMC Partnership (UK) Ltd is the data controller in respect to the information which you provide to us.  Jane McIntosh has been appointed by the company to act as the company's Data Protection Lead. She can be contacted at any time to provide more information on this subject, to arrange access or erasure, or to receive your comments and feedback. CMC Partnership may change this policy from time to time by updating this page. You should check this page from time to time to ensure you are happy with the changes we make. This policy is effective from April 2018 available to download for reference.

CMC Partnership Data Handling Practices as defined by this Privacy Policy

1. Personal data handling and the law

Personal information has the meaning given under your local data protection law. There may be instances where your local data protection laws impose more restrictive information handling practices than the practices set out in this Privacy Policy. Where this occurs we will adjust our information handling practices in your jurisdiction to comply with these local data protection laws. This Privacy Policy outlines CMC Partnership’s information handling practices and managing your privacy in reference to the EU General Data Protection Regulations (GDPR) 25th May 2018. 

We will only process your information where:

  • You have given your consent to such processing by voluntarily providing us with your information, which you can withdraw at any time.
  • The processing is necessary to provide our services to you.
  • The processing is necessary for compliance with our legal obligations.
  • The processing is necessary for our legitimate interests, or those of any third party recipients that receive your personal information

2. Information which we may collect from you

We typically process the following types of personal information:

  • Contact name, email, address and phone number.
  • Dietary requirements, special requests and /or health issues (if any) for those attending training events.
  • Employment verification information, including criminal record checks.
  • Learning and development records, including certifications.

You may choose to share your personal data with us by making an online enquiry or purchase through our website/s, or by sending us an email, completing a survey, or by providing your details by letter, or by telephone. This may include subscribing to any of our services; requesting newsletters, obtaining downloads, registering for events and online webinars, contacting us through social media channels, accounting and administration (business to business) or applying for a job in which you may provide your name, address, email and contact numbers, etc.

  • If you contact us we may keep a record of that correspondence and we may retain details of your visits to the website including, but not limited to, traffic data, location data, weblogs and other communication data and a record of the resources you access.
  • We may keep a record of your website preferences and interests, other information relevant to customer surveys, offers made by us and details of the transactions you complete through the website and the fulfilment of your orders.

3. Use of your information

  • We will use your personal information to contact you in response to your enquiry or application.
  • We will store your contact data so we can provide you with other CMC products and services that you may be interested in.
  • We may also contact you ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
  • You have the option to unsubscribe from these communications at any time.

4. Location of your information

  • The data that we collect from you is stored in professional datacentres within the European Economic Area ('EEA')
  • Your data may be transferred to and stored at a storage and processing destination outside the EEA if it appears from your records that you may be interested in the Company's goods and services provided outside the EEA, e.g. training events in Asia, or if you have opted-in to recieve our newsletters. In this case your contact email address will be transferred to MailChimp who act as our sub-processor for managing this service. In both these cases your data will be stored in USA based datacentres.
  • Your data may be shared with Prosci (see 5. Disclosure of your information). In this case your contact data will be stored outside the EEA, within a USA based datacentre.

5. Disclosure of your information

We may disclose your personal information to:

  • Any member of our organisation, this includes employees of our subsidiaries; CMC Partnership Asia pte and CMC Schweiz.
  • The organisation Prosci once you have successfully registered to attend a Prosci training event which will provide you with access to their change management resources portal. Please read their Privacy Policy.
  • Our contractors, suppliers and IT service and data hosting providers, including our external business advisors, such as lawyers, accountants and auditors.
  • To third parties in the event that we sell a substantial part of our business, in which case we may disclose your personal data to a third party, the prospective buyer of such business as part of the transferred purchased assets.

We will disclose your personal information if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of use, or to protect the rights, property, or safety of CMC Partnership(UK) Ltd, our customers or others. This includes exchanging information with other companies and organisations for the purpose of fraud protection and credit risk reduction, or to comply with UK Government regulations.

6. Controlling your personal information

  • We make every effort to maintain the accuracy and completeness of your personal information. However you can assist us by contacting us if there are changes to your personal information, or if you become aware that we have inaccurate personal information relating to you. We will not be responsible for any losses arising from inaccurate, inauthentic, deficient, or incomplete personal information that you, or a person acting on your behalf provides to us.
  • If you believe that any information we are holding about you is incorrect or incomplete and require it to be amended, or if you would like a copy of the data we hold for you, or would like to request the removal of your information from our records, you may contact us at any time.
  • Please email the company's Data Protection Officer, or write to the Data Protection Officer using the following address; CMC Partnership (UK) Ltd, The Barn, Grace Dieu Court, Dingestow, Monmouth, NP25 4EB.
  • You can at any time tell us not to send you marketing communications by email, by using the contact information above, or by clicking on the unsubscribe link within the marketing emails you may receive from us.

7. Security

  • We are committed to ensuring that your information is secure. We have reasonable security measures in place in order to protect your personal information from unauthorised access, use, alteration and disclosure.
  • Unfortunately the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Any transmission is at your own risk.
  • Once your information is received it is managed in line with recognised industry security good practice to safeguard it as best we can, but we cannot guarantee that the security measures we have in place will never be defeated or fail, or that such measures will always be sufficient or effective. 

Please note: 

  • Your personal information will only be seen by those who have a legitimate reason for seeing it.
  • Your data may be processed by staff operating outside the EEA who work for us, or for one of our suppliers.
  • Our staff may be engaged in, amongst other things the downloading of your CV, fulfilment of your order and the provision of our services.
  • By submitting your personal data you agree to this transfer, storing and processing.
  • Third parties who are authorised to access, store and manage our data sets (which include your personal information records) are bound by confidentiality agreements.
  • This website is assessed as PCI compliant and validated by Trustwave.
  • We do not collect, access, store or process any payment information on our websites. The processing of payment transactions is carried out in a third party secure Payment Gateway provided by Sage Pay Europe Limited.

8. Links to other websites and social media platforms

  • Our websites and the communications you receive from CMC Partnership may contain links to other websites of interest. If you use these links please be aware that we do not have any control over that other website and therefore we cannot be held responsible for the protection and privacy of any information which you provide whilst visiting such sites. Such sites are not governed by this privacy statement. Please exercise caution and look at the privacy statement applicable to the website in question.
  • Your interactions with Social Media platforms and us are governed by the privacy policy of the third party company providing them. CMC interacts with LinkedIn and Twitter. Please refer to their privacy policies before you utilise their services.

9. IP addresses

When you access our website, use any of our mobile applications, or open electronic correspondence or communications from us, our servers may record data regarding your device and the network you are using to connect with us, including your IP address. An IP address is a series of numbers which identify your computer and which are generally assigned when you access the internet. We may use IP addresses for system administration, investigation of security issues, and compiling data regarding use of our website, including the completion of webforms and downloads, and / or mobile applications.

10. Cookies - what is a cookie?

A cookie is a small file which asks permission to be placed on your computer records. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

11. How we use cookies

Cookies on our website are used for a variety of different purposes, but generally speaking their use breaks down into the following categories:

Strictly Necessary Cookies:

These are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.

Analytical/Performance Cookies:

These allow us to recognise and count the number of users of our website and see how such users navigate through our website. This helps to improve how our website works, for example, by ensuring that users can find what they are looking for easily. We use Google Analytics to gain insight into how this website is used, and can access information on the most visited pages on our website, the geographical locations of our visitors, time spent on the website and the number of times a link has been clicked, amongst many other useful statistics. The information provided by Google Analytics does not allow us to identify individual users. Google uses around four cookies, usually named __utma, __utmb, __utmc, __utmz for populating and sending anonymous data to Google Analytics.

Functionality Cookies:

These improve the functional performance of our website and make it easier for you to use. For example, such cookies are used to remember that you have previously visited the website and asked to remain logged in to it.

In order to give the best possible browsing experience, we use session cookies to temporarily store data. Session cookies are used to keep track of your activity as you move from page to page through the website. They keep track of any information that you enter to prevent you having to re-enter it on subsequent pages. Our session cookies do not collect any personal/traceable data about you and are automatically deleted when you close your browser: No data is stored following your visit about you or your activities. The session cookie used on this website is called SESS (random string) 

Some browsers have JavaScript disabled which can greatly affect how a website functions and how content is displayed. Although we do our best to make sure that our website works without JavaScript, we need to know whether the user has JavaScript enabled in order to deliver content correctly. The has_js cookie tells us whether JavaScript is disabled or enabled for the current user

Targeting Cookies:

These record your visit to our website, the pages you have visited and the links you have followed. We will then use this information to make advertising displayed on it more relevant to your interests.

12. Removing & Managing Cookies

To ensure that you are in control of your privacy at all times, all web browsers give you the option to disable cookies. For up to date, step-by-step instructions on how to control or delete cookies, please visit this site.