CREST Awards Information

We take the security of your personal data and the safeguarding of your privacy seriously. The data that we collect, process and use is treated in accordance with this Privacy Information, the General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. We aim to be clear how we collect and use your data and not to do anything with it that you would not reasonably expect. The full BSA privacy policy is here . The CREST Awards collect and process data in the following way:Lawful basis for processing the dataLegitimate interestsSubstantial public interest (where relevant)Equality monitoring (where relevant)We have previously used consent to process data - if you think this lawful basis applied when you entered data, please get in touch using the email address at the bottom of this notice. Collection purposeAccount owner names and email addresses are collected for operational communications. Account owners are teachers and students (students are expected to be over 16)Student ethnicity, gender, disability and age data are held (when provided) and used for anonymised diversity analysisStudent names are used for certificate printing and to record the student's achievement of the AwardRetention purposeTo keep in touch with and maintain a record of teachers and students who have taken part in the Awards, so we can verify the date of the award if asked by the student in the future. For future reporting purposes, e.g. a CREST impact report may be based on ~9 years of historical data