Proven Connect is the translational research function of Prostate Cancer Research, a charitable incorporated organisation registered with the Charity Commission (charity number 1156027) and Companies House (company number CE001019).
What personal information do we collect?
The personal information we collect may include:
- Your title, name, address and contact information (telephone number(s) and/or email address(es)
- Records of your communications with us
- Information gathered through surveys or forms you have filled out
How do we use your information and what is our legal basis for processing it?
We will only process your information if we have a legal basis for doing so, including: –
- To fulfil a contractual obligation,
- When you register for an event
- To contact you if you subscribe to a mailing list
- To share information with you by email
Where we have a legitimate interest, for example: –
- To contact you with information or an administrative enquiry by post or phone
- To administer our internal operations, including the administration of activities involving our partners,
- To improve our services to ensure that any content is presented to you in the most effective manner for you,
- Where we are required by law to process your information, for example, to facilitate health and safety requirements at an event.
We also use the information you provide in an anonymised form for the following purposes: –
- Monitor and evaluate the impact of our programmes
- Refine and improve our services
- Produce reports
What other organisations do we share your information with?
We may share your personal information with our service providers/data processors so that they can carry out work on our behalf. Whenever we engage a third party to act on our behalf we ensure that the contract we enter into with them require them to comply with UK data protection laws, to process your information only for the purposes we specify and to make sure they have the appropriate controls in place to protect the security of your information. We may also share your personal data with partner organisations that work with us to deliver a service you have signed up for or with partner research organisations that are working with us to deliver a project.
When we collect it as you use our website
We collect information about the services you use and how you use them in a number of ways, including:
- When you view and interact with our emails and content
How long do we keep your information?
You have various legal rights in relation to the information you give us, or which we collect about you, as follows: –
- The right to access your information and obtain confirmation that we are processing your personal information (see below our Subject Access Request process);
- The right to have your personal information rectified if it is incomplete or inaccurate;
- The right to have your personal information removed or deleted in certain circumstances, for example when you have withdrawn consent to it being processed and we have no other basis for processing it;
- The right to restrict the processing of your personal information in certain circumstances;
- The right to object to certain processing including the right to not be subject to automated decision-making and the right to object where we are processing your information on the basis of our legitimate interest;
- The right to require us not to send you marketing communications; and
- Where you have provided your consent to the processing, the right to withdraw consent to the processing of your data (without affecting the lawfulness of processing based on consent before its withdrawal).
Please note that not all of the above rights are absolute and requests may be refused where exceptions apply.
For a more detailed explanation of these rights, please refer to the ICO’s guidance.
Subject Access Request
You can ask us to confirm if we are keeping any personal information about you and you can also request to receive a copy of that personal information – this is called a Subject Access Request.
To make a Subject Access Request you will need to provide adequate proof of identity such as a copy of your passport, birth certificate, or driving license before your request can be processed. Please try to be as clear as possible about the information you are seeking, as this will help us respond to your request more efficiently. Once we have received your Subject Access Request and proof of identity, you will receive a response from us within a month unless circumstances permit us to extend that deadline.
If you would like to submit a Subject Access Request or exercise any of the other rights referred to above, please email us at firstname.lastname@example.org. You can write to us at Prostate Cancer Research, Suite 2, 23-24 Great James Street, London, WC1N 3ES. You can also telephone us on 0203 735 5444. More information on how to submit a Subject Access Request is available from the Information Commissioner’s Office here.
If you are not happy with how we handle any of your requests, queries, or concerns, you can contact the Information Commissioner’s Office, who oversees the protection of personal information in the UK.
Updating your communication preferences
We will respect your email privacy. This means we carefully manage the communications we send you to ensure that we are contacting you in the most relevant way.
You can change your email preferences or subscribe at any time by:
- clicking the “unsubscribe” link at the end of any general emails you receive from us; or
- by contacting email@example.com, or
- calling 0203 735 5444
- unsubscribe by replying to the sender directly.
How do we keep your information secure?
We take appropriate security measures to protect your data against unauthorised access, alteration, disclosure or destruction. When sharing your data with third parties, we do so securely, including taking the following safeguards: –
- Methods of disposal. Paper documents are disposed of by shredding in a manner that ensures confidentiality.
- Firewalls and encryption. We use industry-standard and up-to-date firewall and encryption technology.
- Secure data transfers. When transferring your data we ensure it is protected by using a secure data transfer site.
- Restricted access. Access to personal and financial data is permitted to authorised staff only.
- Secure storage. Our data storage is assessed through a secure physical and electronic process.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website and any transmission is at your own risk. Once we have received your personal information, we will use adequate procedures and security features to try to prevent unauthorised access.