IPC - Privacy Policy - General

General

This Privacy Notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Our Privacy Policy

Institute of Public Care (IPC), trading as Oxford Brookes Enterprises Ltd, Harcourt Hill Campus, Oxford, OX2 9AT, UK will be the Data Controller of any personal data that you supply.  This means that we will make the decisions on how your data is used and for what reasons. We may also act as a data processor of your personal information in certain circumstances, in which case we will process personal information only under the instructions of our clients.

What information do we collect?
This Privacy Policy applies to any individual about whom we process personal information in the course of providing our services.

  • Contact information.  We collect personal contact information from clients that purchase our Services (or the key contacts that work for our clients) to help us administer the delivery of those services.  For students attending IPC courses we ask for further information including date of birth, qualifications and specific learning needs and dietary requirements as well as the contact details of your line manager to help support you throughout the course.
  • Mailing list (optional).  We use contact information and basic sector of interest preference (e.g. Adult Social Care, Children’s Social Care or both) when you voluntarily consent in order to receive notification emails and marketing communications from us.  We administer the mailing list using Mailchimp software: a tool that provides user behaviour and system data e.g. your clicks, linked pages visited, device / email platform type (desktop/tablet/phone), IP address, location (city/country), language, and similar metadata.
  • IPC Website - anonymised analytics.  The IPC website uses Google Analytics: a tool that provides user behaviour and system data e.g. your clicks, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymised IP address, location (city/country), language, and similar metadata.  This Information is collected using cookies. See our cookie policy for further details of what we are collecting and why.

How will we use this information?

We collect and store information about you in a secure offline database in order to be able to administer our services and courses and, if you agree, to contact you about other services we offer which may be of interest to you.

Student data will be processed and stored at Oxford Brookes University to form an official student record. Please refer to the Oxford Brookes Student Privacy notice for full details.

Personal data may also be processed via G-Suite applications  (Oxford Brookes University uses Google Inc. applications for email, cloud storage and administration). For further information please see the Google Inc Privacy Policy at https://policies.google.com/privacy.

We will also use the information we gather to improve your experience of using our website.

What is our legal basis for processing your personal data?

We must have a legal basis to process your personal information. In most cases, the legal basis will be one of the following:

  • You consent to providing it to us.
  • The legal basis for processing your personal data, for responding to your enquiry or request is that processing is necessary for the purposes of legitimate interest pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
  • Any information subsequently processed via third parties (see above) is considered to be in the legitimate interests of IPC and does not violate your fundamental right to privacy.

You have the right to withdraw your consent at any time by contacting us using the contact details below.

Will we transfer your data outside the European Economic Area?

Unless third party cookies are disabled, limited personal data (principally your IP address and limited device information) may be stored on third party servers that are located outside the EEA. Please see our cookie policy for further details or contact us (contact details are at the end of this notice).

Mailing list (optional).  MailChimp is engaged as a data processor to send out broadcast emails. The Mailchimp privacy policy can be found here: https://mailchimp.com/legal/privacy/.  Data stored on our behalf by MailChimp, which is held in the US, complies with the EU Safe Harbor framework as set forth by the Department of Commerce, which ensures the practices of US companies comply with UK/EU data protection practices.  More information about MailChimp, the EU/Swiss Privacy Shield, and the GDPR: http://eepurl.com/c567FL.

Oxford Brookes University uses G-suite platorms such as Gmail or Google Drive from Google, Inc. to communicate with individuals and to securely store/share data. Data may be located outside the United Kingdom, including the United States of America and is coverd by the Privacy Shield Framework.

What rights do you have regarding your personal data that we hold?

  • You have the right to be informed.
  • You have the right of access to your data.
  • You have the right to correct data if it is wrong.
  • You have the right to ask for your data to be deleted.
  • You have the right to restrict use of the data we hold.
  • You have the right to data portability.
  • The right to object to IPC using your data.
  • You have rights in relation to using your data automated decision making and profiling.

Are there any consequences if you do not provide the requested data?

Yes, we may not be able to effectively administer services to you without the information requested.

How long will we keep your data?

IPC will only retain personal data for as long as necessary to:

  • Fulfil the purpose for which the data was collected or obtained.
  • Fulfil our own obligations under UK Law.

Your personal data will be securely deleted once either of these conditions no longer apply.  If you are attending an IPC course please refer to the Oxford Brookes Student Privacy notice for full details of data retention.

Our cookie policy contains details of the retention periods for each cookie that our websites create or modify on your computer.
Data that you submit when subscribing is retained for the duration of your professional contact with us, unless you request otherwise.  We regularly delete inactive data based on returned email reports.

Personal data not otherwise described above will only be retained for as long as necessary to fulfil the purpose for which it was collected after which time it will be securely deleted.

User-level data is retained in Google Analytics for 14 months after your use of our website.

Intellectual Property

The names, images and logos identifying IPC are proprietary marks of the the Institute of Public Care / Oxford Brookes Enterprises Ltd.  If you wish to use any of these logos, you must obtain prior approval from the copyright manager by contacting us ipc@brookes.ac.uk.

Other websites

Our website contains links to other websites. This privacy policy only applies to this website. When you link to other websites you should read their own privacy policies.

Who to contact if you have any questions or concerns

You can contact the Information Management Team using the contact details below.

Postal Address: GDPR Queries, Information Management Team, IT Services, Room 2.12, Gibbs Building, Headington Campus, Gipsy Lane, Oxford, OX3 0BP

Email: info.sec@brookes.ac.uk

Tel: 01865 485420

Changes to this policy

We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 03 September 2018.