Last updated: May 2026

The British Society for Antimicrobial Chemotherapy (“BSAC”) is committed to protecting your personal data and respecting your privacy.

This Privacy Notice explains how we collect, use, store, share and protect personal information when you:

  • visit our website(s);
  • become a member;
  • register for events, webinars or e-learning;
  • apply for grants, awards or jobs;
  • subscribe to communications; or
  • otherwise engage with BSAC.

We are committed to processing personal data lawfully, fairly and transparently in accordance with:

  • the UK General Data Protection Regulation (“UK GDPR”);
  • the Data Protection Act 2018; and
  • where applicable, the Privacy and Electronic Communications Regulations (“PECR”).

By using our website(s) or services, you acknowledge the practices described in this Privacy Notice.

 

1. Who We Are

The British Society for Antimicrobial Chemotherapy (“BSAC”) is a learned society and registered charity dedicated to supporting the appropriate use of antimicrobials and improving patient outcomes through education, research, stewardship and professional collaboration.

BSAC is the data controller for the personal data processed under this Privacy Notice.

Registered charity number: 1093118

Contact details:
BSAC
53 Regent Place
Birmingham
B1 3NJ
United Kingdom

Email: membership@bsac.org.uk

 

2. Personal Data We Collect

We may collect and process the following categories of personal data:

 
Identity and Contact Information

  • title;
  • first name and surname;
  • date of birth;
  • gender (where voluntarily provided);
  • postal address;
  • email address;
  • telephone number.

 
Professional Information

  • employer organisation;
  • professional role and job title;
  • specialty or discipline;
  • areas of interest or expertise;
  • professional memberships or affiliations.

 
Membership and Transaction Information

  • membership status and history;
  • event registrations;
  • course participation;
  • journal subscriptions;
  • donations;
  • grant applications;
  • payment and invoicing records.

 
Recruitment Information

Where you apply for employment or consultancy opportunities with BSAC, we may collect:

  • CVs and application materials;
  • employment history;
  • qualifications;
  • references;
  • interview notes.

 
Technical Information

When you use our website(s), we may collect:

  • IP address;
  • browser type and version;
  • operating system;
  • pages visited;
  • referral source;
  • device identifiers;
  • cookie and analytics data.

 
Financial Information

Where necessary for reimbursement, grant administration or supplier payments, we may collect:

  • bank account details;
  • payment information.

Financial data is processed only where necessary and retained only for as long as required for accounting, audit and legal obligations.

 

3. How We Collect Your Information

We collect personal data:

  • directly from you;
  • when you complete forms online or offline;
  • when you communicate with us by email, phone or post;
  • when you register for membership, events or courses;
  • through cookies and website technologies;
  • from publicly available professional sources where relevant;
  • from third-party service providers acting on our behalf.

 

4. How We Use Your Personal Data

We may use your personal data to:

  • administer membership services;
  • process applications and renewals;
  • manage event bookings and attendance;
  • provide e-learning and educational resources;
  • administer grants, awards and scholarships;
  • process donations and payments;
  • respond to enquiries and requests;
  • administer journal subscriptions;
  • recruit staff and consultants;
  • maintain organisational records;
  • improve our services and website functionality;
  • comply with legal and regulatory obligations;
  • send service-related communications;
  • send marketing communications where permitted by law or with your consent;
  • protect BSAC against fraud, misuse, legal claims or security threats.

 

5. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

 
Contract

Where processing is necessary to:

  • manage your membership;
  • provide services you request;
  • administer event bookings;
  • process subscriptions;
  • fulfil contractual obligations.

 
Legitimate Interests

We may process personal data where necessary for our legitimate interests, including:

  • administering and improving our services;
  • organisational governance;
  • fraud prevention;
  • network and information security;
  • analysing engagement with our activities;
  • promoting BSAC’s charitable objectives.

When relying on legitimate interests, we balance our interests against your rights and freedoms.

 
Legal Obligation

We may process personal data to comply with:

  • charity law;
  • tax and accounting obligations;
  • employment law;
  • regulatory requirements;
  • safeguarding and legal compliance obligations.

 
Consent

We rely on consent where required by law, including:

  • email marketing communications;
  • non-essential cookies and analytics technologies;
  • optional surveys or promotional activities.

You may withdraw consent at any time.

 

6. Marketing Communications

We may send you communications about:

  • membership;
  • events and conferences;
  • educational activities;
  • publications;
  • grants and funding opportunities;
  • news relevant to BSAC’s charitable objectives.

Where required by law, we will only send electronic marketing communications with your consent or where another lawful exemption applies.

You may opt out of marketing communications at any time by:

  • using the unsubscribe link in emails;
  • updating your communication preferences; or
  • contacting us directly.

We do not sell personal data to third parties for marketing purposes.