Data Protection

Data Controller Information

The data controller responsible for the processing of personal data on this website is Oliver Brackstone. The registered address for correspondence is The University of Manchester, Oxford Rd, Manchester M13 9PL, United Kingdom. All queries regarding data protection or any privacy concerns can be directed to [email protected]. Oliver Brackstone wishes to ensure that all personal data collected is processed in accordance with the applicable data protection laws of the United Kingdom, in particular, the UK General Data Protection Regulation (GDPR).

Personal Data Collection

Our website collects a range of personal data to provide excellent services and enhance user experience. Personal data refers to any information relating to an identified or identifiable natural person. The data is collected using forms, cookies, and interactions with our site. We ensure that the only data collected is required for specific purposes, and users are duly informed about the nature and purpose of the data collected. Our processes are in place to comply with the law, minimizing the data collection to what is necessary. User consent is paramount and clearly required before any processing of sensitive data.

Purpose and Legal Basis for Processing

The processing of personal data on our website is grounded on several legal bases as outlined in the GDPR. Firstly, personal data is processed to fulfil contractual obligations related to the services provided through our site. Furthermore, explicit consent is obtained from users where it is applicable, especially when the processing involves sensitive categories of data. We also process data as required to meet our legitimate interests, such as improving website functionality and user experience, provided that these interests are not overridden by data protection rights.

Data Subject Rights

Our visitors and users have specific rights under the GDPR, and it is our intention to make these rights accessible and effective. These rights include the right to access, rectify, or erase personal data, as well as the right to restrict or object to processing. Users also have the right to data portability, enabling them to move personal data easily from one service to another. To exercise any of these rights, users should contact the data controller at the provided contact information.

Access and Rectification

Users of our website have the right to request copies of their personal data. Any requests for erasure, known as the ‘right to be forgotten’, shall be accommodated provided there is no overriding legal reason to continue processing. We prioritize accuracy in the personal data we hold, and invite users to inform us of any changes to their personal information.

Right to Object and Restrict

In certain circumstances, users can object to the processing of their personal data or request its restriction. We shall adhere to any legitimate requests to halt processing, save for where we have compelling legitimate grounds or need to establish, exercise, or defend legal claims.

Data Security Measures

We are committed to maintaining the security of personal data. Adequate technical and organizational measures are in place to protect data against unauthorized access, loss, disclosure, alteration, or destruction. These measures are regularly reviewed and updated in line with technological advancements and evolving threats. Staff and contractors with access to personal data are trained in maintaining its confidentiality and integrity.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected. The retention period also complies with applicable legal obligations or is required for the establishment, exercise, or defense of legal claims. Upon expiry of the retention period, data is safely deleted or anonymized to maintain user privacy. We periodically review the data stored and take proactive steps to ensure that it does not become outdated or irrelevant.