The TMMi Foundation (TMMi) collects personal data to fulfil its functions as an Industry Body, provides member services, and complies with certain statutory obligations. All personal data items are treated with the utmost confidentiality and with appropriate security measures. This Privacy Policy describes our data protection procedures. Please review it carefully.
Our commitment
The TMMi Foundation (TMMi), with its registered office located at Military House, 24 Castle Street, Chester, Cheshire, United Kingdom, CH1 2DS, is committed to the responsible management, use, and protection of personal data of our customers, members, beneficiaries, providers, and partners. Any personal data processed by TMMi is subject to the terms of this Policy, which supplements the TMMi Cookie Policy and any other applicable policies made available to you.
Personal data processed
The following provides a general overview of how TMMi handles personal information.
Reasons/purposes for processing information
TMMi processes personal information to enable us to promote our model and services, develop new services, maintain our accounts and records and support and manage our board. Additional reasons for collecting personal information include monitoring certificates and tracking the time spent on assessments.
Type/classes of information processed
We process information relevant to the above reasons and purposes. This may include:
- Personal details
- Education details
- Model or services provided
- Accreditation details
- Certification details
Whose information is processed
- Members
- Accredited (lead) assessors
- Accredited companies
- Certified TMMi Professional
- Certified TMMi test process improvers
- Accredited assessment service providers
- Certified organisations
- Local chapters
- Recognised training providers
- Complaints and enquiries
With whom the information may be shared
We sometimes need to share the personal information we process with the individual and with other organisations. Where necessary, we are required to comply with all aspects of the General Data Protection Regulation (GDPR). The policy is controlled by UK law.
Although the UK still has GDPR, they are no longer controlled by the EU, and as such, it could change. Please see https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/ and https://ico.org.uk/dpbrexit/ for more information.
Transfers
It may sometimes be necessary to transfer personal information to overseas locations. When required, information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the UK Data Protection Act.
How do we use personal data?
We use personal data for the following purposes:
- We use personal data to complete transactions and respond to your requests.
- We use personal data to send you administrative information, such as updates to our terms, conditions, and policies. Except as permitted by law, we will not use your data for marketing purposes without your prior authorisation.
- Conducting our business. We use personal data to perform analysis, audits, and to develop new products, enhance, improve, and modify our services. This enables us to identify usage trends, determine the effectiveness of our promotional campaigns, and continue to operate and expand our business activities.
- Research and Service Improvements. We may use your data for research and analytics purposes, provided that such use is permitted by law to enhance our service and your experience.
- Compliance with the law and legal process. We may use and disclose your data to take any action that we believe to be necessary or appropriate: (a) to investigate, prevent and detect fraud and other illegal activities; (b) under applicable laws, including laws outside your country of residence; (c) in a judicial or administrative proceeding or response to a valid legal order; (d) in compliance with a court order or other process authorized by law, to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (e) to enforce our terms of service and privacy policy; (f) to protect our rights, privacy, safety or property, and/or those of our affiliates, you and others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
- We use personal data for other purposes disclosed explicitly at the time we collect your data.
How do we protect your privacy?
We understand the importance of protecting your data. We restrict access to your data to authorised TMMi representatives who need that information for legitimate purposes. We maintain technical, physical and administrative safeguards to ensure the privacy and confidentiality of your data. Our Data Controller monitors how we adhere to policies and procedures and educates our organisation on this important topic.
Your rights
You have the following rights regarding the personal data that we collect and/or maintain about you.
- Right to access your data. You may request access to any personal data we maintain about you.
- Right to correct your data. You have the right to correct your data contained in our electronic records if you believe it is inaccurate.
- Right to delete your data. You have the right to be forgotten by requesting the deletion of your data contained in our electronic records.
Actions You May Take
If you have questions about your privacy rights or wish to request access to or correction of your data, please contact us by email at privacy@tmmi.org or write to us at TMMi Foundation, Military House, 24 Castle Street, Chester, Cheshire, United Kingdom, CH1 2DS.
Policy Availability and Duration
- Policy availability. A copy of this policy is available for you to view, print and/or download on our website.
- Right to change the terms of this policy. We reserve the right to modify this policy at any time. If we update this policy, we will post the revised policy on our website. If you are enrolled in a TMMi database at the time of the update, we will send you the new policy as required. In addition, you can obtain a copy of the new policy upon request when you email privacy@tmmi.org
- Effective date. This policy is effective as of 1st July 2025.
This policy was last updated on 1st July 2025.
