Data Access, Security and Privacy Policy

General

This policy explains what information we gather when you visit the CUREE website and/or subscribe to any of CUREE's information services (e.g. News and Updates). It explains how that information is used. It is important for you to appreciate that the website provides links to other independent sites. This policy applies only to direct accesses to CUREE website and services. You will need to consult the appropriate information on other sites for information on their policies.

Here you will also find a link to CUREE's broader data security policy including our arrangements for securing your data and otherwise complying with the Data Protection Act (2018) which incorporates GDPR

Changes to this policy

CUREE will occasionally update this privacy policy. When we do, we will also revise the "last updated" date at the bottom of this privacy statement. 

Data collected

In common with most websites, this site automatically logs certain information about every request made (see below for more details). This information is used for system administration, for bug tracking, and for producing usage statistics. The logged information may be kept indefinitely. Relevant subsets of this data may be passed to computer security teams as part of investigations of computer misuse involving this site or other computing equipment at CUREE. Data may be passed to the administrators of other computer systems to enable investigation of problems accessing this site or of system miss-configurations. Data may incidentally be included in information passed to computer maintenance organisations working for the Academy, in which case it will be covered by appropriate non-disclosure agreements. Otherwise the logged information is not passed to any third party except if required by law. Summary statistics are extracted from this data and some of these may be made publicly available, but those that are do not include information from which individuals could be identified. [You should appreciate that a log is a record of what a server sees, not necessarily what was initially sent. If a request is sent via a proxy the log file will show the proxy's address. If someone has forged your address the log file will show your address.]

A number of online forms are provided on this site and it is also the means of connecting to other CUREE information services (for instance News and Update). The launch pages of the individual forms descibe the data handling and security arrangements specific to that form or service where it differ from the usual arrangements as set out here.

Logged data

The following data is automatically logged for each request:

  • The name or network address of the computer making the request. Note that under some (but not all) circumstances it may be possible to infer from this the identity of the person making the request. Note also that the data recorded may be that of a web proxy rather than that of the originating client;
  • The username, when known during authenticated (logged in) access to the site;
  • The date and time of connection;
  • The HTTP request, which contains the identification of the document requested;
  • The status code of the request (success or failure etc.);
  • The number of data bytes sent in response;
  • The contents of the HTTP Referrer header supplied by the browser;
  • The content of the HTTP User-Agent header supplied by the browser; 

Logging of additional data may be enabled temporarily from time to time for specific purposes. In addition, the computers on which the website is hosted keep records of attempts (authorised and unauthorised) to use them for purposes other than access to the web server. This data typically includes the date and time of the attempt, the service to which access was attempted, the name or network address of the computer making the connection, and may include details of what was done or was attempted to be done. 

Access to personal data

For the purpose of the UK Data Protection Act 2018 , the "Data Controller" for the processing of data collected by this site is CUREE, and the point of contact for subject access requests is Paul Crisp At CUREE, we are committed to protecting your privacy. You can travel through most of our site without giving us any information about yourself. But sometimes we do need information to provide services that you request, and this privacy policy explains data collection and use in those situations.  

Links to other sites

This site may contain links to other websites on the Internet that are owned and operated by third parties. The information practices of those websites are not covered by this Privacy Policy, but by their own terms and policies, which you should read carefully. These other sites may send their own cookies to users collect data or solicit personal information. This privacy policy only applies to the www.curee.co.uk website. It is not intended to apply to other websites, which may have different privacy policies.

Collecting your personal information

Website

We will ask you when we need information that personally identifies you (personal information) or allows us to contact you. Generally, this information is requested when you are asked to register to create a login account, before sending an online feedback form, or an online application form. When you provide your personal information, a profile is created. If you ever want to review or update your profile, simply visit CUREE website and edit your personal information. We'll ask you to disclose your User ID and Password so that only you can access your profile. CUREE website assigns a personal identification number and sends it to your computer in the form of a small text file, called a "cookie." The use of this cookie allows you to visit other password-restricted portions of CUREE website - for which you have security access - without having to sign in again.  

Purchases via the website

You can buy some of CUREE's products direct from our website. We capture some additional information including the name of your organisation and a delivery address. You have also to provide some financial information (to enable you to pay us!). This information is held and processed by our payment services provider, PayPal, and none of your payment data enters our system or is held here (other than a link to the Paypal transaction record). PayPal's data handling and privacy provisions can be found here

Other subscription services

You can, via this website, subscribe to other services including our News and Update feature. We capture only your name, email address and organisation in this process. See below for what we do with this information

Use of your personal information

We use your personal information for the primary purposes of directing you to the relevant service, for usage tracking purposes and for diagnosing problems. We may also use your contact details to contact you:

  • to draw your attention to new information or services you might be interested in
  • to make offers (for instance, discounts on products and services
  • to invite you to participate in a new activity such as a seminar or workshop
  • to invite you to participate in research or some other enquiry conducted by CUREE (for our own research or research commissioned by others)

Control of your personal information

When you register, or otherwise give us personal information, CUREE will not share that information with third parties without your permission, other than for the limited exceptions already listed. 

Access to your personal information

Website

If you use our website subscription service*, you will create a username and password protected account. Logging in with that account will give you access to your personal information. You may review and update this information at any time on www.curee.co.uk.

You can:

  • View and edit personal information you have already given us;
  • Subscribe or unsubscribe to CUREE email newsletters.
  • Security of your personal information

Other subscription services

If you have subscribed, for instance, to our News and Update service, you can check, update or remove the personal information by either:

  • clicking on the UNSUBSCRIBE link at the bottom of any news or update notification we have sent you or
  • email us at info@curee.co.uk asking for a copy of the record or to have it removed

CUREE strictly protects the security of your personal information and your choices for its intended use. We carefully protect your data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. Your personal information is never shared outside CUREE without your permission, except under conditions explained above. Inside the website's database, data is stored in password-controlled servers with controlled access. You also have a significant role in protecting your information. No one can see or edit your personal information without knowing your User ID and Password, so do not share these with others.

*  subscription arrangements on websites are a frequent target for spammers and we may turn the service off if we are not satisfied that it is sufficiently well protected

Use of cookies

To ensure we are publishing content customers need and want, CUREE collects aggregated site-visitation statistics using cookies. When someone visits the site, a cookie is placed on the customer's machine (if the customer accepts cookies) or is read if the customer has visited the site previously. If you choose to not have your browser accept cookies from CUREE's website, you will need to re-enter your personal information each time that you attempt to access information.

Contact us

We invite you to contact us if you have questions about our privacy policy. You may contact us by mail at the following address

Our data protection officer is Paul Crisp

Our address is:

CUREE Ltd

Croft House Lodge

Maulds Meaburn

Cumbria CA10 3HN

Our email address is info@curee.co.uk

Our phone number is 024 7624 3716

Last updated 15 March 2021