1. You are here:
  2. Homepage
  3. Privacy Notice

Privacy Notice

CICM Privacy Notice (Updated 2025)

The Chartered Institute of Credit Management (CICM) is committed to protecting your privacy. This Privacy Notice explains how we collect, use, store, share, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

CICM is the recognised professional body for the credit management and debt collection profession. We collect and process personal data to deliver membership services, qualifications, events, communications, and other activities aligned with our mission.

What Personal Data We Collect

Depending on your relationship with us (e.g., member, learner, customer, committee member), we may collect the following (this is not an exhaustive list):

  • Full name, date of birth, gender, and contact details (address, email, telephone)
  • Employment details, professional status, membership number and membership history
  • Qualifications and learning history
  • Event registrations and communications preferences
  • Payment and transactional information
  • Online self-assessment tools and scoring
  • Data related to election ballots and results
  • Username and password to sign in to Members’ Resources area
  • Photos and video footage (where captured at our Events and where permission is granted)

We may also collect sensitive data (this is not an exhaustive list and may also include Special Categories of personal data as defined by the UK GDPR)

  • Evidence of your health, where needed for reasonable adjustments, special consideration, exam deferrals, or accommodating your requirements when attending our events/training courses
  • Information you provide us with when applying for special consideration, discretionary membership/service discounts, exam deferrals or applications made to our Members’ Financial Support Fund or Scholarship schemes
  • Information you provide us with regards to specific needs you have for attending our events or training courses
  • Information you provide as part of our recruitment process, including details of your identity, right to work in the UK, employment history, and criminal record (unspent convictions). This will be used to satisfy requirements of the UK Government Baseline Personnel Security Standards whom we contract with. Refusing to undertake this check or provide information for this purpose may result in the withdrawal of an offer of employment.

We only collect data necessary to provide our services and maintain accurate records. We do not use profiling or automated decision-making that significantly affects individuals.

How We Use Your Data

We process personal data for the following purposes:

  • Administering membership and providing associated benefits
  • Managing event registrations and learning programmes
  • Delivering examinations and awarding qualifications
  • Communicating with you regarding CICM services and updates
  • Fulfilling contractual, legal, or regulatory obligations

Lawful Bases for Processing

We rely on one or more of the following legal bases to process your personal data:

  • Performance of a contract (e.g., to manage your membership)
  • Your consent (e.g., for marketing communications)
  • Legitimate interests (e.g., to deliver core services and engage with members)
  • Compliance with legal obligations

Where we rely on legitimate interests, we carefully balance them with your rights and freedoms.

How We Communicate With You

We aim to send you relevant communications to support your membership or relationship with CICM. You can manage your preferences at any time through your online member account, or by contacting us.

If you’ve consented to receive marketing communications, you may hear from us via email, SMS, post, or telephone. You can withdraw consent or update preferences at any time.

Sharing Your Data

We do not sell or rent your personal data. We may share limited personal data with trusted service providers (data processors) for specific business purposes such as event delivery, secure data storage, CRM systems, electoral services, exam delivery, as part of the recruitment process, or email communications. These providers:

  • Act only on CICM's instructions
  • Are bound by strict confidentiality and data protection agreements
  • Cannot use your data for their own purposes

We may also share your data with your employer where you may be enrolled onto a corporate programme, depending on our contractual obligations.

We do not transfer your data outside the UK unless appropriate safeguards are in place in accordance with UK GDPR.

We may also share your data where required by law, regulation, or court order.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, in line with our Data Retention Policy. This includes complying with legal, regulatory, and contractual obligations. Data is reviewed and securely deleted when no longer required.

Your Rights

You have the following rights regarding your personal data:

  • To request access to your data
  • To have inaccurate data corrected
  • To object to or restrict processing
  • To request erasure of your data
  • To withdraw consent (where applicable)

To exercise your rights or make a data-related enquiry, contact us using the details below.

Social Media and Digital Advertising

Where you have provided consent, we may use your email or phone number to:

  • Show relevant CICM content on social media platforms
  • Identify others who may benefit from CICM services

Keeping your personal data secure

In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. We have in a place a comprehensive information security policy and we hold the recognised Cyber Essentials accreditation. This further demonstrates our ongoing commitment to protecting against common cyber threats both to our Institute and to our members and wider business contacts.

Cookies and Website Use

Our website uses cookies to enhance user experience and enable secure functionality. You can manage or disable cookies in your browser settings.

For more detail, see our Cookie Policy.

Links to other websites

Our website may contain links to other websites of interest. We are not responsible for the protection and privacy of any information which you provide whilst visiting such other sites and such sites are not governed by this Privacy Notice.

Contact Us

If you feel that the security of your personal data has been compromised, please contact us immediately. If such a disclosure does occur, we will take all steps required of us to meet any legal obligations.

Data Protection Officer
Chartered Institute of Credit Management
1 Accent Park, Bakewell Road
Orton Southgate, Peterborough, PE2 6XS
T: +44 (0)1780 722900
E: [email protected]

If you're not satisfied with how we handle your data, you also have the right to contact the Information Commissioner's Office (ICO) via https://ico.org.uk

Changes to This Notice

This Privacy Notice is reviewed regularly and was last updated in September 2025. We will notify you of any material changes.

Alternative Formats: This Privacy Notice is available in alternative formats on request.