The Healthcare Improvement Studies Institute (THIS Institute) at the University of Cambridge is committed to protecting your personal data, which is also referred in this policy to as “personal information”. This policy applies to both our websites (thisinstitute.cam.ac.uk and thiscovery.org). It explains what personal information we gather when you visit our websites and details how that information is used.
If you have any questions about this policy or our treatment of the information you provide us, please email email@example.com.
Personal information is information that can be used to identify you. This refers to information that you voluntarily submit to us that identifies you personally. It can include your name, email address, postal address, telephone number, and other information about yourself or your organisation.
We collect your personal information when you create a Thiscovery account, subscribe to updates from THIS Institute, complete an activity with us, register/attend an event or webinar, or otherwise give us personal information.
Personal information also includes navigational information where such information can directly or indirectly identify an individual. Navigational information refers to information about your device and visits to the website(s) which includes the IP address, date and time of connection, geographical location, browser type, referral source, length of visit, and pages viewed. We may use and disclose it as necessary in the event of a security concern or incident.
When you visit our websites we use third-party services, including Google Analytics and HubSpot, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.
For information about how Google Analytics uses your personal information, please see http://www.google.com/intl/en/policies/privacy/ and https://support.google.com/analytics/answer/6004245.
For information about how HubSpot handles your personal information, please see https://legal.hubspot.com/privacy-policy.
We use a third-party service, MyInterview, to conduct video interviews as part of Thiscovery projects. For information about how MyInterview uses your personal information, please see https://www.myinterview.com/terms.html#privacy
We also use a third-party service for scheduling live interviews, named Acuity. Acuity is a SquareSpace company. For information about how Acuity uses your personal information, please see https://www.squarespace.com/privacy.
When you visit www.thiscovery.org and participate in Thiscovery projects, we use a third-party service, Qualtrics to gather answers to survey questions or to collect uploaded files such as photos. We collect your IP address as part of this process. For more information about how Qualtrics uses your personal information, please see Qualtrics Data Protection and Privacy.
How do we use your information?
The use of your personal information in the ways described above is necessary for the legitimate interests of The Healthcare Improvement Studies Institute (THIS Institute) in operating and improving its websites, analysing use, and ensuring security.
We also use your personal information to give you the information, services or products you ask for. We can also use your information for administrative purposes, to let you know about changes within THIS Institute and Thiscovery, and to inform you of other THIS Institute activities.
THIS Institute will not, under any circumstances, share or sell your personal data with any third party for marketing purposes and you will not receive offers from other companies or organisations as a result of giving your details to us.
We will comply with legal requests where disclosure is required or permitted by law (for example to government bodies for tax purposes or law enforcement agencies for the prevention and detection of crime, subject to such bodies providing us with a relevant request in writing).
We may also use your personal information to:
- conduct surveys and process your response to any survey you participate in for market research purposes
- analyse and improve the content and provide the most user-friendly browser experience
- keep your data up to date and ensure we do not send unwanted information to those who have informed us that they do not want to receive it
- implement any instructions you give us to erase or cease using your personal data, or to access the personal data that we hold about you
- for internal record keeping so as to keep a record of your relationship with us
- maintain the knowledge of actions and engagements to understand the long-term effectiveness and impact of these actions on the goals of The Healthcare Improvement Studies Institute
We may, from time to time and if you indicate that would like to hear from us, contact you on behalf of our partners about a particular opportunity or event that may be of interest to you. We never transfer your personal information to the third party.
When you visit our websites we automatically collect information about your computer hardware and software. This information can include your IP address, browser type, operating system, domain name, internet service provider, pages viewed on our website, clickstream data, access time, and referring website addresses. This information is used to provide general statistics regarding use of our websites. For these purposes, we do link this automatically collected data to personal information such as name and email address.
Information we collect from third parties
From time to time, we may receive personal information about you from third-party sources including partners with which we offer joint activities and services, and publically available sources such as social media websites.
How do we protect your personal information?
We take appropriate technical and organisational measures to ensure that we keep your information secure, accurate and up to date, and that we only keep it as long as is reasonable and necessary.
Although we use appropriate security measures once we have received your personal information, the transmission of information when you submit it over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information transmitted to our website, so any transmission is at the user’s own risk.
How to access your information or change your account preferences
The accuracy of your information is important to us. If you think any information we have about you is incorrect, outdated or incomplete, you can login to your Thiscovery account at any time to update your personal information. If you do not have a Thiscovery account or you are unsure how to update your personal information, please contact us via firstname.lastname@example.org.
You can update your preferences or unsubscribe from THIS Institute and Thiscovery marketing communications at any time by:
- logging in to your Thiscovery account
- clicking on ‘manage your subscription preferences’ or the ‘unsubscribe’ link at the bottom of marketing emails
- or by emailing us at email@example.com
You also have the right to ask to access your personal information, and to ask us to delete your personal information, or otherwise restrict our processing, or to object to processing (including the receipt of direct marketing) or to receive an electronic copy of the personal information you provided to us.
If you have any questions about how your personal information is used, or wish to exercise any of your rights, please contact firstname.lastname@example.org. On receipt of your request, we will let you know the statutory deadline by which we will reply. If you are unhappy with the way your information is handled, or with the response received from us, you can contact the University’s Data Protection Officer (email@example.com). You also have the right to complain to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF (www.ico.org.uk).
Transferring personal data to a country outside the EEA
Personal data we hold may also be processed by staff operating outside the European Economic Area (EEA) who work for us or for one of our third-party service suppliers. We will require them to process your information in compliance with the European data protection regulations. By submitting your personal information to us, you agree that we may transfer, store or process your data at a location outside the EEA as outlined above. We will take all steps reasonably necessary to ensure that your data is processed securely and in accordance with this data policy.
Retention of personal information
We will not keep personal data longer than is necessary for the purpose or purposes for which they were collected. We will take all reasonable steps to destroy, or erase from our systems, all data that is no longer required.
We retain personal information that you provide to us where we have an ongoing legitimate business need to do so (for example to contact you in accordance with your subscription preferences). We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date information was collected. When we have no ongoing legitimate need to process your personal information, we will securely delete the information or anonymise it.