Purpose for which we process your personal data

To assess applications for new franchisor members, exhibition applicants, franchisee
members or affiliates of the BFA or individuals working towards obtaining the QFP or an online course certificate like our Prospect Franchisee Certificate or Prospect Franchisor Certificate and where applicable, to register that person for membership or to receive our services.

To perform our contractual obligations to you (whether you are a BFA member, BFA affiliate, professional working towards QFP status, customer of our online shop or engaged by one of our suppliers). This would include:

• processing and performing any bookings on our events placed by you;
• providing our services to you;
• assessing information with respect to the grant of awards or qualifications;
• processing in relation to orders placed by us where you are a supplier; handling complaints about BFA members or affiliates;
• making or receiving payments, fees and charges and reclaiming VAT where applicable;
• audit purposes; and
• collecting and recovering money owed.

In order to manage our relationship with you including:

• to send you important notices
  such as communications about changes to our terms and conditions and policies
  (including this Privacy Notice); 
• to provide you with important real- time information about our events, services or products (e.g. a change of time or location due to unforeseen circumstances); 
• to send you information you have requested;
• to deal with your enquiries; and to ask you to leave a review or feedback on us.

To carry out surveys of our franchisor members’ franchisees as part of the franchisor’s membership application.

For our dispute resolution service: 

• where a franchisee makes a complaint about a BFA member franchisor,
• we will process the information provided including any personal data and we will notify the franchisor of the complaint including details of the complainant; where a BFA member makes a complaint about another BFA member we will process the information provided including any personal data and we will notify the BFA member of the complaint including details of the complainant.

In order to comply with our own legal obligations, e.g. health and safety legislation,

or to assist in an investigation (e.g. from the police).

In order to use your personal data in life or death situations and there is no time to

gain your consent (e.g. in the event of an accident at one of our locations or events and we have to give your personal details to medical personnel).

In order to administer and protect our organisation, deal with any misuse of our

website and to comply with our security policies at our locations.

In order to make suggestions and recommendations to you about goods or

services that may be of interest to you, deliver relevant website content and

advertisements to you and to measure or understand the effectiveness of our advertising.

To communicate with you about, and administer your participation in, special events, programs, promotions, any prize draws or competitions.

In order to enforce or apply our terms of use, terms and conditions of supply and other

agreements with third parties.

Categories of personal data processed

•   Individual Data:
•   Economic and Financial Data;
•         Account and Profile Data.

•     Individual Data;
•     Economic and Financial Data; and
•        Sales Data.

•      Individual Data; 
•         Account and Profile Data; 
•         Sales Data; and Advertising                         and Marketing Data.

•      Individual Data

•      Individual Data

•         Individual Data; 
•           Audio and Visual Data; and 
•          Health Data

•         Individual Data; and 
•         Health Data

•         Individual Data; 
•         Account and Profile Data; 
•         Audio and Visual Data; and 
•         Information Technology Data.

•        Individual Data; 
•          Sales Data; 
•          Information Technology Data; and 
•            Advertising and Marketing Data.

•         Individual Data; 
•           Account and Profile Data; 
•           Sales Data; 
•           Information Technology Data; and 
•          Advertising and Marketing Data.

•        Individual Data; 
•        Account and Profile Data; 
•        Sales Data; and 
•         Economic and Financial Data

Legal basis upon which we process your data

• To perform a contract with you;
  and
• our legitimate interest
  in the provision of our services.

• To perform any contract entered into with you; 
• our legitimate interest in recovering debts

         owed to us and in the provision of our                      services and operation of our business;                   and

• in order to manage our relationship with you including:

            – to send you important notices such as                              communications about changes to our                              terms and conditions and policies (including                    this Privacy Notice);

             –  to provide you with important real-time                            information about our events, services or                          products (e.g. a change of time or location                        due to unforeseen circumstances); and 

              – to send you information you have                                        requested; 

              – to deal with your enquiries; and to ask you                        to leave a review or feedback on us.

• to perform any contract entered into with you; 
• to comply with the law; and 
• for our legitimate interests in the management and operation of our business, to keep our records updated and to study how guests use our products/services.

• The processing is necessary for our legitimate interests in the management and operation of our business.

• to perform any contract entered
  into with you; into with you; 
• for our legitimate interests in the management and operation of our business, and 
• the complainant has given their consent to the processing.

The processing is necessary for us to comply with the law.

The processing is necessary in order to protect the vital interests of an individual.

•  for our legitimate interest in provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group  restructuring exercise; and provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise; and 
• necessary to comply with the law.

• The processing is necessary for our legitimate interests to study how guests use our products/services, to develop our products and services and ensure our marketing is relevant to you, to grow our business and to inform our marketing strategy. 
• (We will only rely on legitimate interests to market to you where we are sending marketing to your corporate email address or work number or you gave your details when you purchased membership, products or services from us. Otherwise, we will rely on consent.)

• For performance of a contract with you; and
• for our legitimate interests to promote our business

The processing is necessary for our legitimate interests in protecting our business and property and recovering debts owed to us.