What we collect from you
You may use the website without providing any personal information.
However, if you wish to contact us using the online form, you will be requested to provide relevant contact details to enable us to provide the information you require. We will collect and process the following personal data:
- name
- job title
- email address
- telephone number [optional, you do not have to provide this information]
- postal address [optional, you do not have to provide this information]
We use cookies to collect certain information about all our website users based on what you do on the site. We mostly use Google Analytics for this. We use this information to analyse our users’ demographics, interests and behaviour on the site to understand and serve you better. The information we capture for this purpose does not identify any user.
Further information on the use of cookies by the Systematic Review Initiative can be found here: Details about cookies – Systematic Review Initiative.
You can view, edit and amend your cookie settings here: Cookies – Systematic Review Initiative.
The website contains links to other Internet sites which are outside our control and are not covered by this privacy policy. We are not responsible for data which you provide through any such linked websites.
This privacy notice tells you what you can expect us to do with your personal information.
Why we need your data
The legal basis for processing your personal data is legitimate interest.
Our legitimate interest relates to enabling us to contact you to provide you with the information you requested.
Who we share your data with
We will not share your personal data with anyone or any system outside our organisation unless there is a legal obligation to do so. In this case, you will usually be informed of this disclosure.
How long we keep your data
Outside of exemptions under specific legislation related to personal data your information shall be retained for no longer than the purposes for which it is being processed.
Your rights
You have the right:
- to request information about how your personal data is processed, and to request a copy of that personal data
- to request that any inaccuracies in your personal data are rectified without delay
- to request that any incomplete personal data is completed, including by means of a supplementary statement
- to request that your personal data is erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted
- to object to the processing of your personal data, where justifiable circumstances can be provided
- in relation to automated decision making and profiling, to prevent such decisions being taken, be informed that an automated decision has been made, and to request reconsideration of any decision.
In relation to monitoring threats to the system, identifying and fixing technical issues and identifying and tackling cyber security risks:
- you have the right to object to the processing of your personal data; however, please be aware that we can still process personal information where there are compelling grounds, or it is necessary for legal claims.
In relation to all other data:
- you have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly-used and machine-readable, format-portable format.
Where your data is stored
Your data is stored on a secure system hosted by our website provider (Mixd), restricted available only to those with a legitimate, lawful and justifiable need to access your data for the purpose of service provision and continued improvement. We also design, build and run our systems to make sure that your data is as safe, secure and confidential as possible at every stage, both while it’s processed and when it’s stored.
Changes to this notice
We may change this privacy notice. When we make changes to this notice, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, we will take reasonable steps to make sure you know.
Questions and complaints
NHSBT is the Data Controller for the personal data we hold and process about you.
Contact the Data Privacy Team if you:
- have any questions about anything in this document
- think that your personal data has been misused or mishandled
- want to make a subject access request (SARS).
The contact details for our Data Protection Officer are:
Eleanor Ward
Data Protection Officer
In writing:
NHS Blood and Transplant
500 North Bristol Park
Filton
Bristol
BS34 7QH
UK
- Email:
- [email protected]
For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner, who is an independent regulator.
Information Commissioner’s Office
Email: [email protected]
- Phone:
- 0303 123 1113