Privacy Policy

Introduction

Constructing Excellence in Wales (CEWales) is a not-for-profit organisation that represents each part of the supply chain within the Welsh built environment. We work with all different elements of construction with both large and small organisations in the public and private sectors to help the industry to improve its performance to deliver better quality and value for money to its clients and end users. Our membership includes both companies and individuals and we collect, store and process personal information relating to individuals as part of our activities. We do this to effectively manage our membership and to carry out our wider work supporting the construction sector

This policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us.

We are committed to protecting and respecting your privacy. Everyone has rights regarding the way in which their personal information is handled, and we recognise that the correct and lawful treatment of this data will maintain confidence in the organisation and will provide for successful business operations.

For the purpose of UK data protection laws, the data controller is Constructing Excellence in Wales Limited of, c/o 91 Balmoral Road, Newport, Wales, NP19 8JS.

For further information, amending your details or to manage your preferences, please contact us on info@cewales.org.uk.

This policy was last updated in August 2025.

Data protection principles

When processing your information, we must comply with the six enforceable principles of good practice. These provide that your personal information must be:

processed lawfully, fairly and in a transparent manner
processed for specified, explicit and legitimate purposes
adequate, relevant, and limited to what is necessary
accurate and kept up to date
kept for no longer than is necessary, and
processed in a manner than ensures appropriate security.

Information you give to us

We may collect, use, store and transfer different kinds of personal information about you, including:

Identity Data, such as your image, name, company name, job title, university/college, which club committee, board, or group you are a member of
Contact Data, such as your billing address, address, email address and telephone numbers
Financial Data, such as bank account, payment card details and invoices
Transaction Data, including details about payments from you
Technical Data, including IP addresses, your log-in data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website or similar identifiers
Profile Data, such as your username, password, membership applications made by you
Usage Data, including information about how you use our website and services, and
Marketing Data, such as your preferences in receiving marketing from us and our third parties, and your communication preferences.

‘Special category’ data

The term special category relates to information such as your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, criminal convictions, sex life or sexual orientation, or certain types of genetic or biometric data.

While dealing with you, we may collect the following ‘special category’ data about you:

Health & medical – for example, allergies and dietary choice for events

How we collect your personal information

We may obtain personal information by directly interacting with you, such as:

applying to become a member or sponsor of CEWales
corresponding with us by phone, emails, letters or otherwise
subscribing to our services or publications
participating in discussion boards or other social media functions on our website
when providing us with your business cards
attending an event
applying to join any campaigns, project, or service
job application
we may obtain personal information via automated technology when you interact with our website by using cookies, server logs and other similar technologies.
we may also collect personal information about you from third parties or publicly available sources, such as:

analytics providers (such as Google)
advertising networks
search information providers
other Constructing Excellence clubs or regions
company colleagues
Eventbrite or similar third party partners

International Transfers of Your Data

If we transfer your personal information outside of the United Kingdom (for example, when using third-party service providers such as email or analytics tools that store data overseas), we will ensure that appropriate safeguards are in place. These may include adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms to ensure your data remains protected.

How we use your personal information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

you have given us consent,
we are about to enter, or have entered into, or in performing an agreement with you,
where it is necessary for our or a third party’s legitimate interests, and your interests and rights do not override those interests, or
where we need to comply with a legal or regulatory obligation.
we will only use ‘special category’ information when we have your explicit consent to use it
where we believe that we need to use that data to protect your vital interests where you are not able to provide us with your explicit consent
where it is necessary for reasons of substantial public interest
where you have previously made that data public knowledge
if we need to use that data to establish, exercise or defend legal claims.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Purposes for which we use your personal information

We may use your personal information for several different purposes. For each purpose, we are required to confirm the legal basis that allows us to use your information, as follows:

Purposes for which we will use the information you give to us	Legal basis
To register you as a new member	It will be necessary for the performance of the contract between you and us
To notify you about changes to our terms or this privacy policy	It will be necessary for our legitimate business interests, namely, to ensure you are aware of our current terms and conditions
To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, to allow you to participate in interactive features of our service, when you choose to do so, to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you and to make suggestions and recommendations to you and other users of our website about goods or services that may interest you or them	It will be necessary for our legitimate business interests to ensure you receive the best experience possible when accessing and using our website. We will comply with our cookie policy when processing this information
To provide you with information about events that are similar to those that you have already received from us	Where you have previously received marketing communications from us, then it will be necessary for our legitimate business interests, namely, to ensure you continue to receive communications that you have previously agreed to receive In all other cases, we will only do this if you give us your consent
To administer and improve our website and to keep our site safe and secure.	We are allowed to use this information to ensure you receive the best experience possible when accessing and using our website.
To receive feedback from you after an event	It will be necessary for our legitimate business interests to ensure we provide you with an adequate service and to make improvements
To provide you with your membership benefits	It will be necessary for the performance of the contract between you and us
Sharing images of events for our website/social media platforms for promotion and information regarding events.	It will be necessary for our legitimate business interests and forms part of the membership benefits
To form part of our members directory.	It will be necessary for our legitimate business interests and forms part of the membership benefits
To send renewal communication to members.	It will be necessary for our legitimate business interests namely to give you the opportunity to renew your membership
Promote your company on our website if you become a member.	It will be necessary for the performance of the contract between you and us
Process an application for a campaign; project or service	It will be necessary for the performance of the contract between you and us
To use photographs or video footage taken at our events or submitted as an award entry for promotional purposes	It will be necessary for our legitimate business interests, namely to promote our activities and improve awareness. We will provide an opt-out option at the event.

We will only use your personal information for the purpose(s) for which we collected it, or for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

How we use the information we collect about you from other sources

We may receive personal data about you from third party sources such as your employer as part of corporate memberships or recommendations. In this case, we will provide you with a copy of this privacy policy.

What if you cannot or will not provide us with your personal information

It is a contractual requirement for you to provide us with certain information, namely your name, postal address, email address, company name, type of business, position in company and chosen club, committee, board, or group. If you do not provide us with that information, then regrettably we will be unable to process your membership.

How long we retain your information

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements. When we no longer need your data, we will securely delete or anonymise it in line with our data retention policies.

Your Rights Under UK Data Protection Law

you have the following rights regarding your personal information:
the right to access the personal data we hold about you
the right to request correction of inaccurate or incomplete data
the right to request erasure of your data (“right to be forgotten”)
the right to object to or restrict how we process your data
the right to request the transfer of your data to another provider (data portability)
the right to withdraw consent at any time, where processing is based on consent
the right to lodge a complaint with the information commissioner’s office (ico) via www.ico.org.uk
if you wish to exercise any of these rights, please contact us at info@cewales.org.uk.

This policy was last updated in August 2025.