Data protection

Data protection statement and privacy notice updated 06 December 2024

CRAC takes its responsibilities as guardian of your personal data very seriously. We regularly review our processes to keep them robust and secure. We have published this privacy notice to provide information about how we manage your privacy. Let us know if you have any questions.

Privacy notice

1.  Introduction

We are The Careers Research and Advisory Centre (CRAC) Ltd.

CRAC provides research, intelligence and innovation services for all those who support the career development of people of all ages and in all sectors.
We work in partnership with government agencies, education organisations and providers and employers and professional bodies. CRAC is a registered charity No 313164 established in 1964

CRAC also manages the Vitae programme.  Vitae is the global leader in supporting the professional development of researchers, experienced in working with institutions as they strive for research excellence, innovation and impact. 

You can find more information about CRAC and the work that we do on our website: www.crac.org.uk. 

CRAC is committed to protecting the personal information of all its contacts and being clear about what information we hold about them and how we use it. This privacy notice tells you what to expect when CRAC collects personal information. 

2. Registration details

CRAC is registered as a data controller at the address below with the Information Commissioner’s Office (ICO). Our registration number is Z1030346.  You can check our registered details on the ICO’s website: https://ico.org.uk/about-the-ico/what-we-do/register-of-data-controllers/ 

The Careers Research and Advisory Centre (CRAC) Limited

22 Signet Court
Cambridge
CB5 8LA
Tel: 01223 448500
Email: dataprotection@crac.org.uk 

Our Data Protection Officer (DPO) is the first point of contact for people whose information is processed. Contact details for our DPO are as follows: 

Data Protection Officer
The Careers Research and Advisory Centre (CRAC) Limited
22 Signet Court
Cambridge
CB5 8LA
Email: data.protection@crac.org.uk
Tel: 01223 448500

3.  How we use your information

We can only use your personal information where we have legitimate reasons for doing so and have told you what those reasons are. 

At the point at which we gather your personal information, we will show or provide a link to a privacy notice that states clearly the specific uses that will be made of your personal information.

If we want to use your personal information for a reason other than stated in the privacy notice, we will tell you before we start that use and provide further information about the new purpose(s). 

4.  Legal basis for using your personal information

Under data protection legislation, we require a legal basis to be able to process your personal information. The legal basis will be clearly stated in the privacy notice. When "consent" is used as the legal basis, we will provide you with a simple mechanism for withdrawing consent if you change your mind at a later date.

The privacy notice will also explain:

  • What personal information we will collect
  • What personal information we obtain from another source if any
  • Who we share your personal information with
  • Where your personal information will be stored
  • The measures we take to protect your personal information
  • How long we will hold your personal information for.

5. Your rights over your personal information

Once your personal information has been collected, you have certain rights in relation to that personal information that may be exercised. You have the right to: 

  • Ask for a copy of your personal information
  • Correct inaccurate personal information held about you
  • Restrict processing of your personal information
  • Ask for a copy of your information in a format that allows easy transfer (“data portability”)
  • Object to automated decision making or profiling (if these take place)
  • Where consent is the legal basis for collecting the information, you have the right to withdraw consent.

6.  Complaints about the use of your personal information

If a you are unhappy with the way in which your personal information has been handled by CRAC, you may contact us at: dataprotection@crac.org.uk or via our Data Protection Officer (details in section 2) and we will try to resolve your issue informally. 

If we have are not able to resolve the issue to your satisfaction, you can also make a complaint to the data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) and they can be contacted at: 

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Email: casework@ico.org.uk 

7. Changes to privacy notices

We keep our privacy notices under regular review and we will inform you of any changes to this notice by placing updates on this website and on the Vitae website.