The Healthcare Improvement Studies Institute (THIS Institute) is committed to protecting your personal data, which is also referred to in this policy as “personal information”. This policy applies to our website (thisinstitute.cam.ac.uk). It explains what personal information we gather when you visit our website and details how that information is used.
If you have any questions about this policy or our treatment of the information you provide us, please email email@example.com.
Personal information is information that can be used to identify you. This refers to information that you voluntarily submit to us that identifies you personally. It can include your name, email address, postal address, telephone number, and other information about yourself or your organisation.
We collect your personal information when you subscribe to updates from THIS Institute, complete an activity with us, register for/attend an event or webinar, or otherwise give us personal information.
Personal information also includes navigational information where such information can directly or indirectly identify an individual. Navigational information refers to information about your device and visits to the website which includes the IP address, date and time of connection, geographical location, browser type, referral source, length of visit, and pages viewed. We may use and disclose it as necessary in the event of a security concern or incident.
When you visit our website we use third-party services, including Google Analytics and HubSpot, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.
For information about how Google Analytics uses your personal information, please see http://www.google.com/intl/en/policies/privacy/ and https://support.google.com/analytics/answer/6004245.
For information about how HubSpot handles your personal information, please see https://legal.hubspot.com/privacy-policy.
How do we use your information?
The use of your personal information in the ways described above is necessary for the legitimate interests of The Healthcare Improvement Studies Institute (THIS Institute) in operating and improving its website, analysing use, and ensuring security.
We also use your personal information to give you the information, services or products you ask for. We can also use your information for administrative purposes, to let you know about changes within THIS Institute and to inform you of other THIS Institute activities.
THIS Institute will not, under any circumstances, share or sell your personal data with any third party for marketing purposes and you will not receive offers from other companies or organisations as a result of giving your details to us.
We will comply with legal requests where disclosure is required or permitted by law (for example to government bodies for tax purposes or law enforcement agencies for the prevention and detection of crime, subject to such bodies providing us with a relevant request in writing).
We may also use your personal information to:
- conduct surveys and process your response to any survey you participate in for market research purposes
- analyse and improve the content and provide the most user-friendly browser experience
- keep your data up to date and ensure we do not send unwanted information to those who have informed us that they do not want to receive it
- implement any instructions you give us to erase or cease using your personal data, or to access the personal data that we hold about you
- for internal record keeping so as to keep a record of your relationship with us
- maintain the knowledge of actions and engagements to understand the long-term effectiveness and impact of these actions on the goals of The Healthcare Improvement Studies Institute.
We may, from time to time and if you indicate that would like to hear from us, contact you on behalf of our partners about a particular opportunity or event that may be of interest to you. We never transfer your personal information to a third party without a data sharing agreement in place.
When you visit our website we automatically collect information about your computer hardware and software. This information can include your IP address, browser type, operating system, domain name, internet service provider, pages viewed on our website, clickstream data, access time, and referring website addresses. This information is used to provide general statistics regarding use of our websites. For these purposes, we do link this automatically collected data to personal information such as name and email address.
Information we collect from third parties
From time to time, we may receive personal information about you from third-party sources including partners with which we offer joint activities and services, and publicly available sources such as social media websites.
How do we protect your personal information?
We take appropriate technical and organisational measures to ensure that we keep your information secure, accurate and up to date, and that we only keep it as long as is reasonable and necessary.
Although we use appropriate security measures once we have received your personal information, the transmission of information when you submit it over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information transmitted to our website, so any transmission is at the user’s own risk.
How to access your information or change your contact preferences
The accuracy of your information is important to us. If you think any information we have about you is incorrect, outdated or incomplete, you can contact us via firstname.lastname@example.org.
You can update your preferences or unsubscribe from THIS Institute marketing communications at any time by:
- clicking on ‘manage your subscription preferences’ or the ‘unsubscribe’ link at the bottom of marketing emails
- or by emailing us at email@example.com.
You also have the right to ask to access your personal information, and to ask us to delete your personal information, or otherwise restrict our processing, or to object to processing (including the receipt of direct marketing) or to receive an electronic copy of the personal information you provided to us.
If you have any questions about how your personal information is used, or wish to exercise any of your rights, please contact firstname.lastname@example.org. On receipt of your request, we will let you know the statutory deadline by which we will reply. If you are unhappy with the way your information is handled, or with the response received from us, you can contact the University’s Data Protection Officer (email@example.com). You also have the right to complain to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF (www.ico.org.uk).
Transferring personal data to a country outside the EEA
Personal data we hold may also be processed by staff operating outside the European Economic Area (EEA) who work for us or for one of our third-party service suppliers. We will require them to process your information in compliance with the European data protection regulations. By submitting your personal information to us, you agree that we may transfer, store or process your data at a location outside the EEA as outlined above. We will take all steps reasonably necessary to ensure that your data is processed securely and in accordance with this data policy.
Retention of personal information
We will not keep personal data longer than is necessary for the purpose or purposes for which they were collected. We will take all reasonable steps to destroy, or erase from our systems, all data that is no longer required.
We retain personal information that you provide to us where we have an ongoing legitimate business need to do so (for example to contact you in accordance with your subscription preferences). We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date information was collected. When we have no ongoing legitimate need to process your personal information, we will securely delete the information or anonymise it.