THE SIGNATURE OFFICE IS CLOSED FOR EASTER AND WILL REOPEN ON TUESDAY 7TH APRIL

Who we are

CACDP Ltd is a registered charity, a company limited by guarantee and trade as Signature. (“Signature”, “we”, “us”, “our”) is the data controller responsible for your personal data. Registered in England and Wales.

Registered office: 1st Floor, Shannon House, Mandale Business Park, Durham, DH1 1TH

Company number: 03581178

Charity Number: 1071662

Scotland Charity Number: SCO37901

ICO Registration Reference: Z5500730

For data protection enquiries: Email: Nicky Ikin (Nicky.Ikin@signature.org.uk)

Telephone: 0191 383 1155

Our Commitment to You

We are committed to protecting your personal data and processing it fairly, lawfully and transparently in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Data (Use and Access) Act 2025
  • Privacy and Electronic Communications Regulations (PECR)

What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data – Name, title, date of birth, candidate number.

Contact Data – Email address, telephone number, postal address.

Financial Data – Payment details (processed securely via payment providers).

Transaction Data – Records of services purchased, qualifications, training, bookings.

Technical Data – IP address, browser type, device information, cookies, analytics data.

Profile and Communications Data – Preferences, feedback, survey responses, marketing choices.

Special Category Data – Where required for qualification delivery or reasonable adjustments, we may process limited health or accessibility information. This is processed with additional safeguards.

How We Collect Your Data

We collect data when you:

  • Register for qualifications or training
  • Make a purchase or booking
  • Special Category Data – Where required for qualification delivery or reasonable adjustments
  • Contact us
  • Subscribe to marketing
  • Use our website(s) (via cookies and analytics)
  • Interact with us via social media

We may also receive personal data from centres, employers, awarding bodies, regulators, or partners where appropriate.

Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful basis:

Performance of a Contract – To provide qualifications, certifications, training, and services you have requested.

Legal Obligation – To comply with regulatory, safeguarding, financial, and awarding body requirements.

Legitimate Interests – For improving services, website analytics, fraud prevention, and internal administration. Where we rely on legitimate interests, we ensure your rights and freedoms are not overridden.

Consent – For marketing communications, certain cookies and tracking technologies, and processing special category data where required. You may withdraw consent at any time.

How We Use Your Data

We use your personal data to:

  • Deliver qualifications and services
  • Process payments
  • Issue certificates
  • Communicate service updates
  • Manage accounts
  • Improve our website and services
  • Send marketing communications (where consented)
  • Comply with regulatory obligations

We do not sell your personal data.

Automated Decision-Making and Profiling

We do not carry out automated decision-making that produces legal or similarly significant effects.

We may use limited profiling (e.g., segmentation for communications or service improvement). This does not have a significant impact on your rights.

If this changes, we will update this notice.

Data Sharing

We may share your data with:

  • Training centre’s
  • Regulators
  • Payment processors
  • IT and cloud service providers
  • Professional advisers (legal, accounting)
  • Government authorities where legally required

All third parties are required to respect the security of your data and process it lawfully.

Data Retention

We retain personal data only for as long as necessary for:

  • Qualification verification
  • Regulatory compliance
  • Financial record-keeping
  • Legal claims
  • Usage of Signature Services (The School of Signs, Signature Learning Hub)

Retention periods are reviewed regularly.

Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent (where applicable)
  • Lodge a complaint with the ICO

If you wish to exercise your rights, contact: Nicky Ikin (Nicky.Ikin@signature.org.uk)

ICO Registration Reference: Z5500730

Information Commissioner’s Office (ICO) – www.ico.org.uk Telephone: 0303 123 1113 We encourage you to contact us first so we can resolve your concern.

Cookies and Tracking

We use cookies and similar technologies in accordance with PECR. Non-essential cookies (including analytics and marketing cookies) are only set with your consent via our cookie banner.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Access controls
  • Encryption
  • Secure hosting
  • Staff training
  • Regular system reviews

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours where required and inform affected individuals where legally necessary.

Providing Personal Data

Where personal data is required to enter into a contract or to meet legal or regulatory requirements, failure to provide necessary information may mean we cannot provide services or qualifications.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be published on our website with the updated date.

Skip to content