Home » Privacy and Cookies

Privacy and Cookies

Privacy and Cookies

The UK government has updated the Privacy and Electronic Communications Regulations in response to the EU Privacy Directive. In light of this the Information Commissioner's Office has provided guidance on the EU Cookie Law which came into effect in May 2012. 

Our policies set out how we, ULCH Biomedical Research Centre, collect, store and use information about you when you use or interact with our website, https://www.uclhospitals.brc.nihr.ac.uk (our website) and where we otherwise obtain or collect information about you and also use cookies and similar technologies on or in relation to our website. These policies are effective from 25th May 2018.

This section summarises how we obtain, store and use information about you. It is intended to provide a very general overview only. It is not complete in and of itself and it must be read in conjunction with the corresponding full sections of this Privacy Policy.

  • Data controller: University College Hospitals London NHS Foundation Trust
  • How we collect or obtain information about you:

             - when you provide it to us (e.g. by contacting us),

             - from your use of our website, using cookies, and

             - occasionally, from third parties.

  • Information we collect: name, contact details, type of enquiry, IP address, information from cookies, information about your computer or device (e.g. device and browser type), information about how you use our website (e.g. which pages you have viewed, the time when you view them and what you clicked on, the geographical location from which you accessed our website (based on your IP address), company name or business name (if applicable), VAT number (if applicable).
  • How we use your information: for administrative and business purposes, (particularly to contact you) to improve our business and website, to fulfil our contractual obligations, to advertise our goods and services, to analyse your use of our website, and in connection with our legal rights and obligations.
  • Disclosure of your information to third parties: only to the extent necessary to run our business, to our service providers, to fulfil any contracts we enter into with you or where required by law or to enforce our legal rights.
  • Do we sell your information to third parties (other than in the course of a business sale or purchase or similar event): No
  • How long we retain your information: for no longer than necessary, taking into account any legal obligations we have (e.g. to maintain records for tax purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business). For specific retention periods in relation to certain information which we collect from you, please see the main section below entitled How long we retain your information.
  • How we secure your information: using appropriate technical and organisational measures such as storing your information on secure servers, encrypting transfers of data to or from our servers using Secure Sockets Layer (SSL) technology, only granting access to your information where necessary.
  • Use of cookies: we use cookies and similar information-gathering technologies on our website including essential, functional, analytical and targeting cookies. For more information, please visit our cookies policy here: https://www.uclhospitals.brc.nihr.ac.uk/cookies-policy    
  • Transfers of your information outside the European Economic Area: in certain circumstances we transfer your information outside of the European Economic Area including to the following countries: United States of America. Where we do so, we will ensure appropriate safeguards are in place. The third parties we use who transfer your information outside the European Economic Area have self-certified themselves as compliant with the EU-U.S. Privacy Shield.
  • Use of automated decision-making and profiling: we use profiling on our website through our use of web analytics, but do not use automated decision-making. We do not consider that this has any legal effect on you or similarly significantly affects you. For further information, please see the section below entitled Our use of automated decision-making and profiling.
  • Your rights in relation to your information

             - to access your information and to receive information about its use

             - to have your information corrected and/or completed

             - to have your information deleted

             - to restrict the use of your information

             - to receive your information in a portable format

             - to object to the use of your information

             - to withdraw your consent to the use of your information

             - not to have significant decisions made about you based solely on automated processing of your information, including profiling

             - to complain to a supervisory authority

  • Sensitive personal information: we do not knowingly or intentionally collect what is commonly referred to as ‘sensitive personal information’. Please do not submit sensitive personal information about you to us. For more information, please see the main section below entitled Sensitive Personal Information.

Our details

The data controller in respect of our website is University College Hospitals London NHS Foundation Trust (company registration number: CRT1-3245188231) of 250 Euston Road, London, NW1 2PG. You can contact the data controller by writing to UCL Hospitals London NHS Foundation Trust at the above address or sending an email to BRCenquiries@ucl.ac.uk.

If you have any questions about this Privacy Policy, please contact the data controller.

Our use of automated decision-making and profiling

We use profiling on our website but do not use automated decision-making. We do not consider that this has any legal effect on you or similarly significantly affects you.

You have the right to object to our use of automated decision making and profiling described in this section. You can do that by opting-out of cookies and similar technologies in accordance with the method described in the relevant section below. If you do not want us to process your actual IP address (usually the IP address assigned to you by your Internet Service Provider) when you visit our website, you can use a Virtual Private Network (VPN) or a free service such as Tor.

Disclosure and additional uses of your information

This section sets out the circumstances in which will disclose information about you to third parties and any additional purposes for which we use your information.

How we secure your information

We take appropriate technical and organisational measures to secure your information and to protect it against unauthorised or unlawful use and accidental loss or destruction, including:

  • only sharing and providing access to your information to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymised basis wherever possible;
  • using secure servers to store your information;
  • verifying the identity of any individual who requests access to information prior to granting them access to information;
  • using Secure Sockets Layer (SSL) software to encrypt any information you submit to us via any forms on our website;

Your rights in relation to your information

Subject to certain limitations on certain rights, you have the following rights in relation to your information, which you can exercise by writing to UCL Hospitals London NHS Foundation Trust, 250, Euston Road, London, NW1 2PG or sending an email to BRCenquiries@ucl.ac.uk:

  • to request access to your information and information related to our use and processing of your information;
  • to request the correction or deletion of your information;
  • to request that we restrict our use of your information;
  • to receive information which you have provided to us in a structured, commonly used and machine-readable format (e.g. a CSV file) and the right to have that information transferred to another data controller (including a third-party data controller);
  • to object to the processing of your information for certain purposes (for further information, see the section below entitled Your right to object to the processing of your information for certain purposes); and
  • to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

Your right to object to the processing of your information for certain purposes

You have the following rights in relation to your information, which you may exercise in the same way as you may exercise by writing to UCL Hospitals London NHS Foundation Trust, 250 Euston Road, London, NW1 2PG or sending an email BRCenquiries@ucl.ac.uk:

  • to object to us using or processing your information where we use or process it in order to carry out a task in the public interest or for our legitimate interests, including ‘profiling’ (i.e. analysing or predicting your behaviour based on your information) based on any of these purposes; and
  • to object to us using or processing your information for direct marketing purposes (including any profiling we engage in that is related to such direct marketing).

You may also exercise your right to object to us using or processing your information for direct marketing purposes by:

  • clicking the unsubscribe link contained at the bottom of any marketing email we send to you and following the instructions which appear in your browser following your clicking on that link; or
  • sending an email to BRCenquiries@ucl.ac.uk, asking that we stop sending you marketing communications or by including the words “OPT OUT”.

For further information on our Privacy Policy click here


What are cookies?

Cookies are small text files that the web sites you visit place on your computer to store information about your visit. Cookies are 'passive' in that they contain information your browser can retrieve, but do not contain programmes, viruses or malicious software. Cookies normally expire after a certain length of time, although that time can be anywhere from a few minutes to more than a year.

Cookies can be divided into two categories: 'session' and 'persistent'. Session cookies are temporary and are deleted when you close your browser or after a period of inactivity. Persistent cookies remain on your computer until the expiration date/time set by the cookie creator.

What do cookies do?

Cookies can contain many types of information about your visit to a particular web site, but most commonly are used to store the preferences you've selected, such as language, shopping cart contents, privacy settings and login state. Cookies do not contain personal or private data about you, but can compile information about your browsing habits. For the most part, cookies enhance your browsing experience by keeping you from having to select the same options each time you visit a site.

However, cookies can also be used by web sites to serve you advertising targeted to your particular interests based on the preferences you've selected or the content of the pages you have visited. For this reason, some web users choose to delete or reject cookies of certain types or from certain sites.

Can I delete cookies?

Yes, you can both view the cookies stored on your computer and delete some or all of them. However, each browser has a slightly different procedure for doing so. Here are instructions for deleting cookies in some popular browsers:

http://www.pcworld.com/article/242939/how_to_delete_cookies.html

Note that in some cases, deleting cookies will impact your experience in revisiting a site. For example, you may be forced to log in again, or items added to your shopping cart will have disappeared.

Can I set my browser to block cookies?

Yes, most browsers allow you to specify which types of cookies you will accept or to reject all cookies. As each browser is different, here are some of the most common ones:

As above, you may see an alert message when visiting some sites that recommends you accept cookies for an optimal browsing experience.

What Cookies do we set?

Anonymous users on our site will have the has_js cookie set. This cookie records whether your browser has JavaScript enabled.

Authorised, or logged in users of our site have the SESS* cookie set. This is set to ensure that logged in users stay logged in when moving around our site.

The Data Protection Act



Under the Data Protection Act, we have a legal duty to protect any information we collect from you.  We do not pass on your details to any third party or other government department.

Following a link to another website



When you go to another website, read the privacy policy on that website if you want to know what it does with your information. The NIHR University College London Hospitals Biomedical Research Centre does not pass on any of your personal information to other websites.

Following a link to the NIHR University College London Hospitals Biomedical Research Centre from another website



When you come to The NIHR University College London Hospitals Biomedical Research Centre website from another website, the NIHR University College London Hospitals Biomedical Research Centre may get personal information about you from the other website. You should read the privacy policy of websites you visit that link you to the NIHR University College London Hospitals Biomedical Research Centre if you want to know about this.

These policies will explain how they collect and use your personal information, and whether they pass this on to websites they link you to.

For further information on our Cookie Policy click here