Privacy Notice

University of Nottingham

Giving Day Privacy Notice

University of Nottingham ("We") are committed to protecting and respecting your privacy.

This policy (together with our Terms and Conditions and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us or on our behalf. Certain definitions set out in our Terms and Conditions also apply in this policy. 

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting https://ambition.nottingham.ac.uk/ you are accepting and consenting to the practices described in this policy.

The data controller is the University of Nottingham. The data processor is Sponsorcraft Limited (Hubbub).

Information we may collect from you

We may collect and process the following information from you:

Information you give us.

You may give us information about you by filling in forms on our site https://ambition.nottingham.ac.uk/ (“the Site”) or by corresponding with us by phone, e-mail or otherwise. For this information we use the legal basis of ‘Consent’ to collect and process. This includes information you provide when you register to use the Site, use the Site's social media functions, pledge sponsorship monies to one of our causes, and when you report a user or a problem with the Site. 

This information  may include your name, contact details, donation information, gift aid choices and consents for future marketing.

If you wish to alter or remove any of the information you have given us, please log into your account and update your profile, as appropriate.

Information we collect about you.

For each of your visits to the Site we may automatically collect technical information about your visit, including the internet protocol (IP) address used to access the Site, behavioural and performance data including any clicks you make or errors you receive.

Information we receive from other sources.

We may receive information about you if you use any of the other websites we operate or the other services we provide, including publicly available social media information about you. We will combine your data with our alumni and/or donor record for you within our existing database. This data may be shared for internal use.

Uses made of information. 

We will use information held about you in various ways: 

Information you give to us. 

We will use this information: 

  • to carry out our obligations arising from any contracts between you and us and to provide you with the information and services that you request from us; 
  • to provide you with information about other services we offer  similar to those that you have already registered for or enquired about; 
  • to notify you about changes to our services; 
  • to ensure that content from the Site is presented in the most effective manner for you and for your computer. 

Information we collect about you. 

We will use this information: 

  • to administer the Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; 
  • to improve the Site to ensure that content is presented in the most effective manner for you and for your computer; 
  • as part of our efforts to keep the Site safe and secure. 

Your financial information. 

Payment information is collected and stored via Stripe in line with its own privacy policy, which can be found via their website www.stripe.com/gb. Stripe is a Level 1 PCI DSS certified payment provider.

Disclosure of your information. 

We may share your information with selected third parties including: 

Within the University, your data is available only to staff who have received appropriate training and have a genuine reason for accessing this information. Staff may include current students who are employed as callers in our telephone campaigns. No members of staff will be able to access your card details. This will only be available to Stripe for processing purposes.

We share data with companies processing data on our behalf (for example, a mailing house to send our alumni and supporter magazines, or software providers). These companies are carefully vetted and appropriate agreements are put in place to ensure the security of your data. Sponsorcraft Limited, which operate this site, are one of our approved third-party suppliers.

We are required to disclose some personal data of graduates to the Higher Education Statistics Agency (HESA) for the purpose of a survey of new graduates.

We may disclose some personal data of graduates to other external agencies for the purposes of participating in recognised benchmarking exercises, including but not limited to the Financial Times' Business Education Rankings or the Economist's MBA rankings.

Sometimes to achieve the purposes for which we are processing your personal data we may need to share your personal data with other organisations based outside the European Union. If this is necessary, we will ensure that there are appropriate safeguards in place to protect your personal data.

We will never sell your data to other companies or charities.

Where we store your personal data 

As data controller, University of Nottingham will hold your data securely under the terms of Data Protection Act and it will be treated confidentially and with the utmost care and respect. 

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). Where this occurs, it will always be under the provisions of the UK GDPR, or contractual clauses providing adequacy. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. 

By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. All information you provide to us is stored on secure servers under the UK GDPR, or contractual clauses providing adequacy. We ask you not to share a password with anyone. 

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. 

Retention of data

We will store the information you provide us in line with the University of Nottingham retention schedules. Data we hold about you will be stored on University of Nottingham owned servers. Hubbub will store your information for up to 6 months after the Giving Day and then they will delete any personal data. Hubbub will retain statistical information for their own analysis.

Your rights 

If you follow any links to external websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Access to information

The Data Protection Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Should you wish to gain access to the data we hold about you please contact us on the details provided below.

Cookies

The Site uses cookies to distinguish you from other users of the Site. This helps us to provide you with a good experience when you browse the Site and allows us to improve the Site. For detailed information on the cookies we use and the purposes for which we use them see the Hubbub Cookie Policy

Changes to our privacy policy

This privacy policy should not be changed during the period we are working with Hubbub for our Giving Day. However, changes may be made to our standard Privacy Policy (link below). Any changes to this should be communicated to you, where appropriate.

Contact

Questions, comments, requests and complaints regarding this privacy policy or how we process your  should be addressed by email to: br-caro-regulations@nottingham.ac.uk 

Or by post to:

Regulations

Campaign and Alumni Relations Office

B50, Kings Meadow Campus

Nottingham

NG7 2NR

This privacy notice should be read in conjunction with https://www.nottingham.ac.uk/utilities/privacy/privacy.aspx

 

​​