Privacy Policy

Privacy Notice

This privacy notice explains how the International Association of Accounting Professionals (IAAP) uses the personal information we collect from you, either through using our website, or in any other way, electronically, verbally or in writing. This is provided to demonstrate our transparency by informing you about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.

Data controller

The International Association of Accounting Professionals (IAAP) is the data controller because we make decisions about what data we collect and how it is used and with whom it is shared with. We can be contacted at hello@iaapuk.org or telephone number +44 (0)208 938 3040

The purpose for processing your data

The IAAP processes your personal data so that we can offer you membership to the organisation; administer your membership, undertake any statutory functions in relation to your membership, to provide professional qualifications, take electronic payments and to provide information about services and benefits of membership.

On what basis do we collect and process your data?

As a data controller established in the United Kingdom, we are required to comply with the UK General Data Protection Regulation and Data Protection Act 2018. The UK GDPR provides the lawful basis by which we can process your personal data.

To provide membership services to you, we process data directly from you when you apply for membership or make an enquiry through or website. We will collect details of:

• your identity such as name and contact details such as address, telephone numbers and email address.
• your professional qualifications
• data that may preclude you from membership
• payment information for online purchases.

We also collect data in relation to your communications and interaction with us. This can include emails, text messaging, postal service delivery, social media posting or any other form of communication. We do this based on Article 6.1.f UK GDPR (Legitimate Interest). We consider it to be in the IAAP’s legitimate interest to process your personal data to provide professional body services, including membership, qualifications, and member benefits. This allows the organisation to expand its membership and provide greater value to its membership. In determining this legal basis, we have concluded that our legitimate interest does not outweigh your rights and freedoms as a data subject.

The personal data we collect from you is what we require to register you as a member and offer our professional body services to you. If you do not provide the data required, we will not be able to offer you membership.

Data recipients and data transfers

We do not sell any of your personal data to any third party. Where required, we will share personal data with service providers such as our accountants, and professional advisors.

We use the services of data processors based in the United Kingdom, these include our web developers and hosting company and our paper and media disposal company. We may, as required, share your personal information with printing and mailing companies and other delivery companies. We also transfer your personal data to the USA where our membership cloud platform stores data in their accredited data centres. This existing transfer is authorised using EU approved Standard Contractual Clauses.

If required, and where the law allows, we will disclose your personal data with law enforcement and fraud prevention agencies. This is so we can help tackle fraud or where such disclosure is necessary for compliance with a legal obligation to which we are subject. Additionally, in order to protect your vital interests or the vital interests of another natural person, or in connection with the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

Personal data in electronic form is held in EU or UK accredited data centres. Where data is transferred outside of the EEA, we ensure that the transfer is covered by an EU adequacy decision such as the USA Privacy Shield or through mechanism such as standard contractual clauses as approved by the EU.

Special category information

The IAAP does not process special category data.

Retention policy

The data we collect directly from you is the minimum we require to facilitate the lawful processing described above. Personal data placed on our system will be deleted in accordance with any legal obligations, such as government agency requirements. In addition, we will continue to retain your data for a period of 6 years following expiry or termination of your membership.

Your rights as a data subject

The regulations provide a number of rights to you as the Data Subject. The IAAP is committed to upholding those rights and those applicable to the personal information we collect and process are listed below. In addition to these rights, you have the right to escalate any concern to the Supervisory Authority, which in the UK is the Information Commissioners Office https://ico.org.uk.  A full and detailed explanation of all rights can be found at https://ico.org.uk/for-the-public/

• The Right to be Informed – you should be clear about what, why and in what way your personal information will be processed at the time it is processed. This privacy policy sets out that information
• Right of Access – you have the right to know what personal information is held, by whom and why.
• The Right to Rectification – If the information we have collected and processed is inaccurate or incomplete, you have the right to have it rectified.
• Right to Erasure – You have the right to have your personal data erased and to prevent processing in some specific situations.
• Right to Restrict Processing – If you contest the accuracy of the personal data we hold, we will restrict the processing of your data until accuracy is verified.
• Right to Object – You have the right to object to profiling and marketing.

You also have the right to lodge a complaint with the UK’s supervisory body, The Information Commissioners Office www.ico.org.uk

Automated decision making

The IAAP does not use automated decision making to process personal data. 

Third party websites

Our website may contain links to other websites. This privacy policy only applies to the IAAP so if you follow a link to another website, you should read that organisations own privacy policy.

Changes to our privacy policy

We keep our privacy policy under review and we will place any updates on our website. This privacy policy was last updated in June 2023

How to contact us

You can write to us at this address:

International Association of Accounting Professionals

IAAP, Unit 1, Moat Farm, Five Oak Green,

Tonbridge, Kent, TN12 6RR

You can telephone us on this number: +44 (0)208 938 3040

You can email us by using this link: hello@iaapuk.org