Contents
1 Version Control
2 Introduction
3 Cookie Policy
4 The information we collect and when
5 How we use your information
6 Who we might share your information with
7 How we keep you updated on our products and services
8 Your rights over your information
9 How long we keep your information for
10 Giving your reviews and sharing your thoughts
11 Security
12 How to contact us
13 Data Protection Officer
1. Version Control
Details of previous version
|
Version |
Date |
Changes |
Comments |
|
1.0 |
15 May 18 |
Initial Version |
|
|
1.1 |
15 May 18 |
Tailored to NCCUK Website |
|
|
1.2 |
18 Feb 19 |
Changed GDPR Email |
|
|
1.3 |
02 Oct 19 |
Launch new website |
|
|
1.4 |
14 Aug 23 |
Privacy Policy Update |
2. Introduction
The National Composites Centre (The NCC) is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of our customers, partners and users of our products that communicate (online or offline) with us, events, over the phone, through our mobile applications, websites and social media platforms.
We have therefore developed this privacy policy to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.
3. How do we use Cookies?
- Our website uses cookies – these are small text files that are placed on your device to help the website provide a better user experience. In general, cookies are used to retain user preferences and provide anonymised tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on our website and on others. The most effective way to do this is to disable cookies in your browser. We suggest you refer to the Help section of your browser.
- Our website sets “first party” cookies through its use of Google Analytics. We use Google Analytics to provide us with non-personal site analytics, which in turn help us to improve the website. Google Analytics tracking uses cookies in order to provide meaningful reports about web site visitors’, but they do not collect personal data about you. Google Analytics sets or updates cookies only to collect data required for the reports. Additionally, Google Analytics only uses first-party cookies.
- This means that all cookies set by Google Analytics cannot be altered or retrieved by any service on any domain other than nccuk.com
4. The information we collect, when and where
We only collect information that we know we will genuinely use, and in accordance with the General Data Protection Regulation (UK GDPR). The type of information that we will collect on you, and you voluntarily provide to us on this https://nccuk.com includes:
- Your name
- Address
- Telephone number(s)
- Email address
- Survey responses
- IP address
- Cookies
- Any feedback given to the company
- Health data
The following individuals will be involved in the processing:
- Marketing & Communications Manager, Events Coordinator
We may, in further dealings with you, extend this information to include your address, purchases, services used, and subscriptions, records of conversations and agreements and payment transactions.
- You are under no statutory or contractual requirement or obligation to provide us with your personal information; however we require at least the information above in order for us to deal with you as a customer/partner/member/service user/candidate in an efficient and effective manner.
- The legal basis for processing your data is based on your specific consent/performance of a contract/compliance with a legal obligation/our legitimate interest that we will have requested/stated at the point the information was initially provided, therefore we will not store, process or transfer your data outside the parties detailed above unless we have an appropriate lawful reason to do so.
We have a legitimate interest in processing your data, as follows:
|
How we use your data |
Lawful Basis |
|
We collect your data through images |
It is within our legitimate interest to use your images on our website when publishing articles |
|
We collect your data through news & updates forms that you may choose to sign up to |
We use consent as the lawful basis for processing your data when you sign up to receive news and updates from us via email |
|
We collect your data through events that you may choose to sign up to |
We use consent as the lawful basis for processing your data when you sign up to attend our events |
5. How we use your information
- To contact you, following your enquiry, reply to any questions, suggestions, issues or complaints you have contacted us about;
- Make available our products and services to you;
- Process your orders;
- Take payment from you or give you a refund;
- For statistical analysis and to get feedback from you about our products, websites, mobile apps, and other services and activities. For example, occasionally we may invite you to review a product or service you've bought or used from us. If we do, it's possible that we'll use independent research and feedback providers to act on our behalf;
- To power our security measures and services so you can safely access our website and mobile apps;
- Help us understand more about you as a customer, the products and services you consume, so we can serve you better;
- Contact you about products and services from us;
- Provide you with online advertising and promotions; and
- Help answer your questions and solve any issues you have.
6. Who we might share your information with
We may share your personal data with other organisations in the following circumstances:
- If the law or a public authority says we must share the personal data;
- If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk); or
- From time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. However, all the information we share will be collected and anonymised, so neither you nor any of your devices can be identified from it.
7. How we keep you updated on our products and services
We will send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
If you wish to amend your marketing preferences, you can do so by emailing [email protected]
8. Your rights over your information
Right to Access Your Personal Information
You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 30 days from when your identity has been confirmed.
We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.
If you would like to exercise this right, please contact us as set out below.
Right to Correction Your Personal Information
If any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it.
If you would like to exercise this right, please contact us as set out below.
Right to Stop or Limit Our Processing of Your Data
You have the right to object to us processing your personal information if we are not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.
If you would like to exercise this right, please contact us as set out below.
Rights in Relation to Automated Decision Making and Profiling
NCC does not perform any automated decision-making based on personal data that produces legal effects or similarly affects you.
You should note that some of these rights, for example, the right to require us to transfer your data to another service provider or the right to object to automated decision-making, may not apply as they have specific requirements and exemptions which apply to them and they may not apply to personal information recorded and stored by us. For example, we do not use automated decision-making in relation to your personal data. However, some have no conditions attached, so your right to withdraw consent or object to processing for direct marketing are absolute right.
For more information about your privacy rights
The Information Commissioner's Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
9. How long we keep your information
We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the General Data Protection Regulation (GDPR) and never retain your information for longer than is necessary. Unless otherwise required by law, your data will be stored for a period of 12 months after our last contact with you, at which point it will be deleted. A copy of the NCC Data Retention Policy is available on request from the Data & Information Security Specialist (DISS) or Data & Information Security Coordinator (DISC) at [email protected]
Our retention period: 3 years, at which point you will be contacted to confirm if you would like to continue receiving news and updates.
Start date: The date from when you consent to receiving news and updates from the NCC. You can choose if you would like to consent to being contacted in 3 years time by email, to confirm that you would still like to hear from us. If you choose not to consent to being contacted in 3 years time by email, your data will be automatically deleted.
End date: 3 years from the date that you consented to receiving news and updates from the NCC.
10. Giving your reviews and sharing your thoughts
When using our websites or mobile applications, you may be able to share information through social networks like LinkedIn, You Tube, Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts so you are comfortable with how your information is used and shared on them.
11. Security
Data security is of great importance to The NCC and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
- Limiting access to our buildings to those that we believe are entitled to be there (by use of passes, key card access and other related technologies);
- Implementing access controls to our information technology
- We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, mobile apps, offices and stores.
- Never asking you for your passwords;
- Advising you never to enter your account number or password into an email or after following a link from an email.
- Maintaining CyberEssentials Plus Certification.
12. How to contact us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:
By email: [email protected]
By post: NCC Operations Ltd, Feynman Way Central, Bristol & Bath Science Park, Emersons Green, Bristol, BS16 7GD
By phone: 0117 3707 600 (Reception)
Thank you for taking the time to read our Privacy Policy, The NCC
13. Data Protection Officer Contact Details
Under the GDPR, the NCC is required to appoint a Data Protection Officer (DPO).
The Data Protection Officer is required to monitor compliance with the GDPR and Data Protection Act 2018, to advise and inform the University on its data protection obligations and how to meet them, and to be a point of contact for data subjects and the ICO.
The NCC's Data Protection Officer is Henry Stuart:
