GDPR Statement

As part of our relationship with you as a member of Institute of Professional Florists, (IOPF) holds various types of data about you. This data includes, but may not be limited to, your first and last name, email address, record of your skills and/or training and/or CPD.

IOPF holds this data for legitimate business interest and to be able to provide you with the service of accessing and updating your record of skills and/or training and/or CPD.  We will only use your personal data for this purpose. Your data will only be stored electronically, we will not use your data for marketing purposes and we do not undertake any profiling of your data. We will not share your personal data with any third parties outside of IOPF, other than Lantra who is the data processor.

To enable you to always access your IOPF Skills+ record we will hold your data for as long as you remain a member of the scheme.  If you do advise us to delete your data then you will no longer be able to access your records.  You are responsible for advising IOPF of any changes needed to maintain the currency of your data, for example email address or name change.  

Institute of Professional Florists Data Controller is: Sandie Griffith who can be contacted on 07957567065

You have various rights as a data subject under the General Data Protection Regulation which are set out fully onhttps://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/ but your key rights are:

• Should IOPF fail in our duty to protect your data, you have the right to lodge a complaint with the Information Commissioners Office (ICO).  www.ico.org.uk
• You have the right to request access to your personal data and IOPF must comply within one month
• You have the right to request erasure of your data, however in doing so this will delete all of your learning records. You request this by emailing sandie@britishfloristassociation.org who will delete your data within 20 working days
• You have the right to have personal data rectified if it is inaccurate or incomplete. If we have disclosed your personal data to third parties, IOPF must inform them and you of the rectification within one month