Privacy Policy for CSC Scheme Ltd.
The UK Data Protection Act of 1998 and EU Directive 95/46/EC are superseded by the European Union General Data Protection Regulation (EU GDPR). By offering a comprehensive and cohesive personal data privacy law across EU member states, GDPR seeks to prevent security breaches and loss of Personally Identifiable Information (PII) by companies that handle or process such data.
CSC Scheme makes every effort to adhere to GDPR regulations, and our privacy policy has been put together to provide you with a clear understanding of how we maintain and notify you of your rights while collecting, using, protecting, or handling your personally identifiable information in accordance with our website.
Personal identifiable information is any personal data or information that may be used alone or in conjunction with other data to locate, identify, or contact a specific individual or to identify an individual in context. A person's name, age, address, birthdate, gender, and contact information are a few examples.
Special category data or sensitive information, such as a person's health, race or ethnicity, political views, religious or philosophical convictions, trade union membership, genetic and biometric information, or sexual orientation, may also be included in PII.
We need the following details in order to deliver our products and services:
You have the following legal rights with relation to your personally identifiable information (PII):
The right to know how your personally identifiable information is handled (where it is kept and why).
The ability to view your PII.
The ability to object or limit how your PII is processed.
The ability to remove your PII.
The ability to obtain an electronic copy of your personally identifiable information.
The ability to correct or update your personally identifiable information if it is stored incorrectly.
The regulations oblige you to make a subject access request (SAR) to our data protection representative (DPR) at support@cscscheme.co.uk in order to exercise your rights at any time.
Processing these requests is free unless they are deemed excessive, repetitive, or completely baseless. We would then have the right to impose a fair administrative fee.
As required by the regulations, we shall provide prompt and regular channels of contact in the unlikely event that we are unable to completely fulfill any of your requests because of extraordinary circumstances.
CSC Scheme does not directly accept payments. You will be taken to our secure payment merchant after confirming your order. Your payment information is not stored or accessible by CSC Scheme. You can view our payment merchant's privacy policy on their website.
It is in our legitimate interest to gather the PII we have requested in order to provide the services you have requested. To fulfill the conditions of our agreement with you, we provide this information to NCS Pearson Inc. or HSS Training.
The NCS Pearson Inc. privacy policy is available at Pearson VUE Privacy and Cookies Policy.
The HSS Trainings privacy policy is available at HSS Training Privacy Policy.
With the exception of the aforementioned, we do not directly utilise your PII for marketing or profiling purposes or share it with any other person or organization.
We have no legal justification for keeping your PII after we have finalised the terms of our agreement with you. However, we have determined that there are administrative reasons to keep your information (administrative retention), and we will keep your records for six months in case we require them for future business or to be able to respond to enquiries regarding services we have previously provided to you.
Following this time frame, all email correspondence is manually removed from our records, and your information is automatically removed from our database.
Our website database, which is housed on an encrypted server, is where your PII is kept. Your data is stored on our servers in compliance with our documented controller-processor agreement. According to this agreement, they must store your data, make sure it is backed up, and refrain from accessing or sharing it. As stated in our contract, they are not allowed to operate outside of their authority while serving as the processor.
CSC Scheme takes every precaution to guarantee the security of your PII. To make sure your information is as safe as possible, our staff periodically performs security checks to find any weaknesses.
Secure Socket Layer (SSL) technology encrypts our server and any data supplied via our website. The padlock icon next to our URL serves as proof of this.
Since all payment transactions are handled by a secure gateway provider, they are neither processed nor kept on our systems.
When you place an order, complete a form, or input data on our website, we gather information about you.
Indeed. Cookies are little files that a website or its service provider sends to your computer's hard disc via your Web browser (if you permit it). This allows the website's or service provider's systems to identify your browser and record and store specific data.
To help us remember and process the items in your shopping basket, for example, we utilise cookies. In order to give you better services, they are also utilised to assist us understand your preferences based on past or present site activity.
In order to provide better site experiences and tools in the future, we also employ cookies to help us gather aggregate data on site traffic and site interaction.
You have the option to disable all cookies or have your computer alert you each time a cookie is transmitted. Your browser's settings allow you to accomplish this. Because every browser is slightly different, see the Help Menu to find out how to change your cookies.
Some of the features that improve your online experience might not work if you disable cookies. It might not work correctly and won't have an impact on the user experience that makes your website more effective.
We do not sell, trade, or otherwise transmit your personally identifiable information to third parties, with the exception of the information we disclose with NCS Pearson Inc. and HSS Training in order to provide the service.
We may occasionally, at our discretion, offer or include goods or services from third parties on our website. The privacy policies of these third-party websites are distinct and independent. As a result, we are not liable or responsible for the actions or content of these connected websites. However, we strive to maintain the integrity of our website and appreciate any comments regarding these websites.
Google's Advertising Principles encapsulate Google's requirements for advertising. They are implemented to give users a satisfying experience.
On our website, we employ Google AdSense advertising.
Cookies are used by Google, a third-party provider, to display advertisements on our website. Google can display advertisements to our visitors based on their past visits to our website and other websites on the Internet thanks to the DART cookie.
Users can choose how Google advertises to them through the Google Ad Settings page. Alternatively, users can use the Google Analytics Opt Out Browser add-on or the Network Advertising Initiative Opt Out page.
In order to gather information about user interactions with ad impressions and other ad service functions as they relate to our website, we, along with third-party vendors like Google, use first-party cookies such as Google Analytics cookies and third-party cookies such as the DoubleClick cookie or other third-party identifiers.
When a Do Not Track (DNT) browser feature is in place, we respect Do Not Track signals and do not track, install cookies, or employ advertisements.
We also forbid behavioural tracking by third parties.
The Children's Online Privacy Protection Act (COPPA) gives parents authority over the gathering of personal data from children under the age of 13. The COPPA Rule, which outlines what website and online service providers must do to safeguard children's privacy and safety online, is enforced by the Federal Trade Commission, the US consumer protection agency.
Children under the age of thirteen are not explicitly targeted by our marketing.
The foundation of American privacy law is the Fair Information Practices Principles, and the ideas they include have greatly influenced the evolution of data protection legislation worldwide. Complying with the different privacy regulations that safeguard personal information requires an understanding of the Fair Information Practice Principles and how they should be applied.
In the event of a data breach, we shall respond in accordance with Fair Information Practices by doing the following:
We will send you an email to let you know within seven working days.
We will employ in-site notifications to inform the users within seven working days.
We also support the Individual Redress Principle, which mandates that people have the ability to lawfully seek their rights against data processors and collectors who violate the law. According to this principle, people must have both enforceable rights against data users and the ability to use courts or government agencies to look into and/or prosecute data processors who fail to comply.
The CAN-SPAM Act is a regulation that lays out strict guidelines for commercial email, specifies requirements for commercial messages, grants recipients the ability to request that emails not be sent to them, and outlines severe consequences for infractions.
We get your email address so we can communicate with you regarding our services.
If you would like to stop receiving emails in the future, you can send us an email at support@cscscheme.co.uk and you will be immediately removed from all communications.
You can get in touch with us using the details below if you have any issues about our privacy statement.
CSC Scheme Ltd.
Address: 128 City Road, London, EC1V 2NX, UK
Website: www.cscscheme.co.uk
Email: support@cscscheme.co.uk
Contact Number: 0333 880 6565
Last edited on August 11, 2026