Privacy Notice  

February 2026

1. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

  • British Association for Cardiovascular Prevention and Rehabilitation (BACPR)

  • Address: 9 Fitzroy Square, London, W1T 5HW, United Kingdom

  • Email: bacpr@bcs.com

  • BACPR retains ownership and ultimate responsibility for all personal data processed in connection with its services.

  • You can contact the Information Commissioner’s Office (ICO) at https://www.ico.org.uk for more information.

  • BACPR membership, the designated DPO for BACPR membership services is bacpr@bcs.com.

2. Information Collection and Use

We collect personal data when you:

  • Register for BACPR membership, courses, or conferences.

  • Interact with our website or digital services.

  • Subscribe to communications or participate in surveys.

Data collected may include:

  • Contact details (name, email, postal address and phone number).

  • Professional information (role, organisation).

  • Optional demographic details for personalisation.

We use this data to:

  • Provide membership and event services.

  • Communicate updates, resources, and educational opportunities.

  • Improve user experience and website functionality.

  • BACPR will never sell or rent your personal data to third parties.

3. Legal Basis for Processing

We rely on:

  • Consent: For marketing communications and event updates. You may withdraw consent at any time by emailing bacpr@bcs.com.

  • Legitimate Interests: We process certain personal data under the lawful basis of legitimate interests, specifically to manage membership services, maintain website functionality, and deliver essential communications. We have carried out a Legitimate Interests Assessment (LIA) to ensure this processing is fair, balanced, and does not unduly impact your rights. You have the right to object to this processing at any time.

  • Legal Obligations: For compliance with statutory requirements and reporting obligations.

4. Cookies and Website Usage

Our website uses cookies to:

  • Save login details for convenience.

  • Personalise your experience.

  • Rejecting cookies may limit functionality.

  • We also collect IP addresses for site administration and analytics.

5. Data Sharing and Processors

  • BACPR partners with the British Cardiovascular Society (BCS) for administrative and technical support. Designated BCS staff members act as administrators for BACPR and may have access to BACPR member data solely for the purpose of providing these services.

  • BCS acts as a Data Processor and processes BACPR member data solely on BACPR’s instructions and in compliance with GDPR.

  • Confidentiality agreements are in place to protect your data, and access is strictly limited to trained staff members who require it to fulfil their administrative duties.

6. Data Retention

  • Personal data is retained for three (3) years after the end of membership or service provision, after which it is securely deleted or anonymised.

7. Security

  • We use SSL encryption and strict access controls to protect your data.

  • We take the security of your personal data seriously. BACPR uses industry-standard security measures, including SSL encryption and strict access controls, to protect your information from unauthorised access, loss, or misuse.

  • However, please note that the transmission of information via the internet is not completely secure. While we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.

  • If you have any questions about the security of your data, please contact us at bacpr@bcs.com.

8. Your Rights

You have the right to:

  • Access, correct, or delete your personal data.

  • Withdraw consent for marketing.

  • Object to processing under legitimate interests.

  • Requests can be made via bacpr@bcs.com. We aim to respond within one calendar month, starting from the day of request.

  • Should you remain dissatisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk

9. Changes to This Notice

  • Updates will be posted on this page and, where appropriate, notified by email.

10. Transparency

BACPR is committed to being open and transparent about how we collect, use, share, and protect your personal data. We provide clear information about our data processing activities in this notice will always inform you about:

  • What personal data we collect and why.

  • How your data is used and who it may be shared with.

  • Your rights regarding your personal data and how to exercise them.

  • Any significant changes to our data practices or this notice.

  • If you have any questions or require further details about our data processing, please contact us at bacpr@bcs.com.

11. Contact

Questions or requests regarding this -notice should be sent to: