Data Protection Statement: The collection and processing of Personal Data is required for the Chartered Institution of Railway Operators (CIRO) to manage the delivery of its membership services. Protecting this data is a critical responsibility that CIRO always takes seriously and is committed to ensuring that whenever processing personal information, this is done fairly, lawfully and in a transparent manner. The information you have provided in this application is required in order for CIRO to effectively communicate with you and to administer your membership in a proper, timely, cost effective and secure manner, and to fulfil the requirements on the Chartered Institution’s Charter and Bye-Laws. CIRO is required to ensure that Personal Data is accurate and up to date and therefore you are required to inform the CIRO of any changes, or to update your own record via the Membership Portal. Should your membership end, your details will be retained for a further 6 years, unless otherwise instructed by you. The policy and principles adopted by CIRO to govern the processing of Personal Data are in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The Information Commissioner’s Office (ICO) is the supervisory authority regulating data protection in the United Kingdom, and CIRO as a data controller is registered with the ICO.