1. Introduction

We take your right to privacy very seriously and respect all personal information you share with us. We endeavour to keep it safe, whatever your relationship is with us.

This privacy policy is intended to give you an understanding of how and why we collect and use your data. If you have any questions or concerns then please email info@brainhrc.org.

Alternatively, you can write to us:

Brain Injury HRC
Academic Neurosurgery, Box 167
Cambridge Biomedical Campus
Cambridge
CB2 0QQ

We will do our best to answer any questions you might have.

2. Who we are

The NIHR HealthTech Research Centre in Brain Injury (Brain Injury HRC) is funded by the Department of Health and Social Care (DHSC) through the National Institute for Health Research (NIHR) HealthTech Research Centre (HRC) funding scheme. The Brain Injury HRC, 1 of 14 awarded HRCs, is hosted by Cambridge University Hospital NHS Foundation Trust and delivered with is partner organisations. See the privacy policy of our host organisation for more information.

Our website is owned by Cambridge University Hospitals NHS Foundation Trust and hosted by Orion MedTech.

3. What data is being collected?

The information we might collect includes:

  1. your name, address, email address and other contact information (including details of your social media accounts/profiles)
  2. information you enter onto our website or through survey platforms
  3. records of your correspondence with us, if you have contacted us either through our website or via email
  4. details of your visit to the site including your IP address (although not stored).

4. How we collect information from you

There are a number of ways you might share your information with us, including:

  1. If you volunteer for involvement in HRC-related activities and/or research through the Register for Healthcar Involvement and Technology Evaluation (RHITE)
  2. If you take part in one of our events;
  3. If you apply for funding from us; or
  4. you contact us with enquiries, correspond with us (including corresponding with us on behalf of a business) or become involved with us in another way (including via social media).

5. Information we might receive from other sources

Your information may be shared with us by third-party organisations. For example, through a partner organisation that is introducing you to us for the purposes of support and/or development. They will do so based on their own policies on data protection and privacy.

On occasion, we may also collect information (such as your telephone number and address) from the public domain, either directly or from third parties.

6. What is the legal basis for processing the data?

Under the UK GDPR, the following lawful bases are used for the processing of your personal data:

  • For processing data where the activity or purpose does not fall under public task, we shall use legitimate interest, as per Article 6.1 (f) where appropriate, supported by a legitimate interest assessment.
  • For further processing for a purpose other than that for which the personal data have been collected, we will seek your consent and rely on the lawful basis of GDPR Article 6.1 (a) Consent, and otherwise adhere to the provisions in Article 6.4 that sets out the tests whether further processing is allowed.
  • For direct marketing purposes we will seek your explicit consent to participate and will rely on the lawful basis of GDPR Article 6.1 (a) Consent.

7. Data security measures

7.1 Security

We are committed to ensuring that your information is secure. We use leading technologies and encryption software to safeguard your data and maintain strict security standards to prevent any unauthorised access to it. We make every effort to reduce the risks associated with data in transit over the internet by using appropriate technology, including (but not limited to) SSL for any of our websites or applications which collect data from you. However, we cannot guarantee the security of your data in the parts of its journey which are not under our direct control.

7.2 Confidentiality

We will not sell your personal information. We will not disclose your personal information to third parties outside of the NIHR, except for the purposes described in this privacy notice, unless we have your consent, or are required by law to do so.

7.3 Storage

  • We only store data that is necessary for a specific purpose.
  • We will not store your data for longer than is necessary for the purpose for which it was collected unless we are legally obligated to do so by contract or other legal requirement as a public body.
  • Your data will be securely deleted when no longer needed for the purpose(s) for which it was collected and/or the NIHR are no longer obligated to keep it.

8. How will the information be used?

We may use your information:

  1. to provide you with the service or information you have asked for;
  2. to provide you with information about us and our activities, our services and any other information, products or services that we provide or provide access to;
  3. to comply with applicable laws and regulations, and requests from statutory agencies;
  4. for our internal administrative purposes, including to administer and peer-review funding applications received;
  5. to notify you about changes to our services;
  6. to ensure that content from our site is presented in the most effective manner for you and for your computer;
  7. to process job applications;
  8. to seek your views; or
  9. to fulfil our reporting requirement to the NIHR.

9. Your rights

If, at any time, you do not wish to receive further information about us and our services, or you wish to change your contact details or preferences, please let us know by contacting us using the details below.

Also, it is worth noting that if you opt out and then later opt back in your most recent instruction will take precedence.

9.1 You also have the rights to:

  • the right of access to personal data relating to you
  • the right to correct any mistakes in your information
  • the right to ask us to stop contacting you with direct marketing
  • rights in relation to automated decision making
  • the right to restrict or prevent your personal data from being processed
  • the right to withdraw consent

If you would like to exercise any of these rights - please send us a request by email to info@brainhrc.org or by writing to us at:

Brain Injury HRC
Academic Neurosurgery, Box 167
Cambridge Biomedical Campus
Cambridge
CB2 0QQ

10. Contacting the Regulator

If, after reading this privacy notice, you do not think the NIHR has processed your data in accordance with this notice, you should let us know as soon as possible. Similarly, you have the right to lodge a complaint with the Information Commissioner’s Office if you think there is a problem with the way we are handling your personal identifiable information.