Privacy Policy

Last updated: June 2026

This policy explains who we are, what personal information we collect, why we collect it, the legal basis on which we process it, who we share it with, how long we keep it, and your rights in relation to it.

We may update this policy from time to time. The current version is always available at https://asbp.org.uk/privacy-policy.

1. Who we are

The Alliance for Sustainable Building Products (ASBP) is the data controller for the personal information described in this policy. We are a private company limited by guarantee without share capital, registered in England and Wales.

Company registration number: 07980287

Registered address: c/o Lelliott & Co, Heath Place, Ash Grove, Bognor Regis, PO22 9SL

Email: privacy@asbp.org.uk

2. What information we collect and how

We may collect personal information when you:

attend or exhibit at one of our events (registering by email or booking online);
apply to become a member or sponsor;
submit an entry for an award;
register to host or attend a site visit or open day;
express an interest in our activities at a conference or trade show;
subscribe to our mailing list; or
contact us directly by email or post.

The personal information we collect typically includes your name, job title, organisation name, address, email address, and telephone number. We do not collect sensitive personal data (such as health or financial data about you as an individual) in the ordinary course of our activities.

3. Lawful basis for processing

We process personal information on the following legal bases under UK data protection law:

Contract: where processing is necessary to fulfil your membership, event booking, or other agreement with us.
Legitimate interests: where processing is necessary for our legitimate interests as a trade association (for example, keeping members informed of our activities, inviting members to relevant working groups and events, and managing our relationships with partners and suppliers), provided those interests are not overridden by your rights.
Legal obligation: where we are required to retain information by law (for example, financial records under company and tax legislation).
Consent: where you have opted in to receive our newsletter or marketing communications. You can withdraw consent at any time.

4. How we use your information

We use personal information to:

process your membership, event booking, award entry, or other application;
send you communications about our news, events, research, and activities (where you have consented or where we have a legitimate interest in doing so);
invite you to relevant working groups, meetings, and member services;
manage our financial records and comply with legal obligations; and
improve our website and services.

We will not use your information for purposes incompatible with those for which it was collected.

5. Financial information

5.1 Payments to us

If you register for an event online, payment is processed by Eventbrite. We do not hold your card details. See Eventbrite’s privacy policy at eventbrite.co.uk for details of how they handle payment information.

If you pay us directly by BACS or cheque, your bank account details are held by our bank, currently Triodos Bank, using secure and encrypted methods.

5.2 Payments by us

If you invoice us directly, your bank account details (account name, sort code, and account number) are stored on our accounts system, currently QuickBooks, which is accessible only by ASBP’s Chief Executive, Finance Officer, and external accountant (currently KKP Accountants). This information is held on a secure cloud-based server and retained for at least six years as required by law.

6. Who has access to your information

Your information is stored on our password-protected file sharing platform and is only accessible to ASBP staff.

We will not sell or rent your information to third parties. We will not share your information with third parties for their marketing purposes.

We use a number of trusted third-party services to operate our activities. These act as data processors on our behalf, meaning they process data only on our instructions:

Mailchimp (Intuit Inc.) – email marketing and mailing list management
Eventbrite – event registration and ticketing
QuickBooks (Intuit Inc.) – accounting and financial records
Google – reCAPTCHA spam protection on our website

Each of these providers has its own privacy and security policies. Mailchimp and QuickBooks are operated by Intuit Inc., a US-based company. Where personal data is transferred outside the UK, we take steps to ensure appropriate safeguards are in place in line with UK data protection law.

7. How long we keep your information

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention approach is:

Member and contact records: held for the duration of the relationship and for a reasonable period (normally three years) after it ends, to manage any follow-up enquiries.
Event registration records: retained for two years after the event.
Financial records: retained for a minimum of six years, as required by law.
Marketing and mailing list data: held until you unsubscribe or request removal.

When personal information is no longer required, we delete it securely.

8. Your rights

Under UK data protection law, you have the following rights in relation to your personal information:

Right of access: you can request a copy of the personal information we hold about you (a subject access request).
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can ask us to delete your personal information in certain circumstances.
Right to restrict processing: you can ask us to limit how we use your information in certain circumstances.
Right to data portability: you can ask us to provide your information in a structured, commonly used format in certain circumstances.
Right to object: you can object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at privacy@asbp.org.uk or write to us at our registered address above. We will respond within one month.

You can update your mailing list preferences at any time by clicking the ‘Update profile’ link at the bottom of any of our Mailchimp emails.

9. Data protection complaints

If you are unhappy with how we have handled your personal information, you have the right to raise a complaint with us directly. We operate a formal internal data protection complaints process in line with the Data (Use and Access) Act 2025.

To raise a complaint, please contact us at:

Email: privacy@asbp.org.uk
Post: Alliance for Sustainable Building Products, c/o Lelliott & Co, Heath Place, Ash Grove, Bognor Regis, PO22 9SL

We will acknowledge your complaint within 30 days and investigate it without undue delay. Full details of our complaints process are set out in our Data Protection Complaints Policy, available on request.

You also have the right to complain directly to the Information Commissioner’s Office (ICO) at any time:

ico.org.uk/make-a-complaint/data-protection-complaints/

10. Security

Our website is protected by an SSL security certificate. When you are on a secure page, a lock icon will appear in your browser.

To prevent spam, our website uses Google reCAPTCHA. Google’s Privacy Policy and Terms of Service apply.

While we take appropriate technical and organisational measures to protect your personal information, no transmission of data over the internet can be guaranteed to be completely secure. Once we receive your information, we take all reasonable steps to protect it on our systems.

11. Cookies

Our website uses cookies to improve your experience and allow us to analyse how the site is used. Cookies are small files stored on your browser or device.

We use the following types of cookies:

Strictly necessary cookies: required for the website to function, including secure areas.
Analytical/performance cookies: help us understand how visitors use the site so we can improve it.
Functionality cookies: remember your preferences when you return to the site.

You can block cookies by adjusting your browser settings. Blocking some cookies may affect your ability to use parts of our website. For more information about cookies, visit https://ico.org.uk/for-the-public/online/cookies/.

12. Links to other websites

Our website contains links to websites operated by our partners and other organisations. This policy applies only to our website. We encourage you to read the privacy policies of any other sites you visit. We are not responsible for the privacy practices of third-party sites, including those accessed via links from our website.

13. Children

We are committed to protecting the privacy of children. Our website and services are not directed at children under 16. If you are under 16, please ask a parent or guardian before providing us with any personal information.

14. Changes to this policy

We keep this policy under regular review. When we make significant changes, we will update the ‘last updated’ date at the top of this page. We encourage you to check this page periodically.

15. Contact us

Any questions about this policy or our privacy practices should be directed to: