Privacy Notice

How we use your personal data

 

What is Personal Data?

“Personal data” means any information which relates to or identifies you as an individual.

Purpose of this Notice

This Notice explains how we will collect and use your personal data.

Liverpool Hope University is the Data Controller for the personal data you provide to us when visiting this website. The University is registered as a Data Controller with the Information Commissioner’s Office and manages personal data in accordance with the University’s Data Protection Policy.

Access to your personal data within the University will be provided only to those staff who need it to view it as part of their work in connection with the operation of this website.

Throughout this Notice, “University”, “we”, “our” and “us” refers to Liverpool Hope University and “you” and “your” refers to users of the site.

Anything you are not clear about please contact our Data Protection Officer who can answer any queries you may have concerning this Notice or in any way that we process your personal data.  Our Data Protection Officer’s contact details can be found at the end of this Notice.

What information does the University collect?

The University Online Store collects and processes a range of information about you.  

Data collected by the University includes:

• Your name, address and contact details, including email address and telephone number and responses to questionnaires relating to the item you are purchasing.
• Where debit/credit card details have been requested as part of a transaction between you and us, these details will be encrypted and handled by a secure web server using SSL technology.

 

 

Automated data we collect about you:

We receive and save certain types of information whenever you interact with us. Like many websites we use cookies. A cookie is a piece of information sent via your internet browser and saved on your local hard drive. Currently all our cookies are session cookies and are deleted when the browser window is closed.

• If you visit our site, we will automatically collect certain technical information, for example, the type of device (and its unique device identifier) you use to access our site, the Internet protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, mobile network information and platform.
• We will automatically collect information about your visit to our site including the full Uniform Resource Locators (URL), clickstream to, through and from the Website (including date and time), pages you viewed, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs), and methods used to browse away from the page.

 

Cookies do not have the ability to read personal information on your computer and/or find out any personal information about you. You can refuse to accept cookies by modifying the settings in your browser, however this may limit the functionality of, and/or your access to the online store.

The table below explains the cookies we use and why:

Cookie	Name	Purpose
WPM Store	WPM_Store	This cookie is used to follow your interaction with the store and to maintain your shopping basket
Session ID	ASPSESSIONID	This cookie is required to follow your progress through the store. It is essential to ensure that any information you enter or routes you take are remembered by the store.
Company ID	CompanyID	This cookie is used to follow your interaction with the store, and ensure the correct store details are displayed.

 

The collection of this data will only be done by the University if you consent to our use of cookies.

Where does the University get your personal data from and how is it processed?

The University will keep a record of the details you provided when registering with the online shop including: name, contact details, email address, credit card details information relating to the resources you access.

Your personal information is created, stored and transmitted securely in electronic formats.

In addition to this, the University may process information about you that is classed as ‘special category’ personal data, which requires additional protections. This includes equal opportunities monitoring information and information about medical or health conditions and disabilities, as detailed above.

Access to, and the sharing of, your ‘special category’ data is controlled very carefully. You will normally be given further details about our use of any such data when we collect it from you.

 

What is the purpose and legal basis of the processing?

The University will process your personal information for a range of contractual, statutory or public interest purposes, including the following:

• To enable us and our suppliers to supply you with the goods, services and any information which you have requested.
• To analyse the information we collect so that we can administer, support, improve and develop our business and the goods and services we offer.
• To provide you with access to certain parts of the Site. We will process your information because it is necessary for the performance of a contract with you, e.g., to provide you with the products/services you have purchased.

If we require your consent for any specific use of your personal information, we will collect it at the appropriate time and you can withdraw this at any time.

 

Who will my personal data be shared with?

Your personal data will only be accessible to Liverpool Hope University Staff or a University supplier who are processing your order. Your personal data will be used in order to fulfil your order, the processing of services or for the organisation of conferences.

Our principal contractor is WPM, who handle our payments. You can read WPM Education’s privacy notice here.

 

Is my data transferred outside of the EEA?

On occasion, the above types of sharing may involve the transfer of your personal information outside of the European Economic Area (e.g. to report to an overseas research funder, to arrange Global Hope placements). Such transfers usually are necessary in order to meet our contractual obligations with you, and are carried out with appropriate safeguards in place to ensure the confidentiality and security of your personal information.

 

Retention of your personal data

We store your personal information where necessary for up to 6 years from the end of the current financial year (at 31^st July).

How does the University protect data?

The University takes the security of your data seriously. The University has internal policies and controls in place to try to make sure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. We make sure our records retention schedule is regularly reviewed so that we only hold the data that we need to. For more information please see the Universities Data Protection Policy.

Where third parties process personal data on behalf of the University, they do so on the basis of written instructions, are under a duty of confidentiality and must make sure that they have appropriate technical and organisational measures in place to keep the data secure.

As part of the global Payment Card Industry Security Standard (PCI DSS), the University works closely with our partner WPM Education and our acquirer Pay360 to provide our customers with a secure payment network.

Your rights as a Data Subject

We thought it would be helpful to set out your rights under GDPR.

You have the right to:

• withdraw consent where that is the legal basis of our processing (without affecting the lawfulness of our processing before you withdrew your consent);
• access to your personal data that we process;
• rectify inaccuracies in personal data that we hold about you;
• be forgotten, that is your details to be removed from systems that we use to process your personal data;
• restrict the processing in certain ways;
• Obtain a copy of your data in a commonly used electronic form; and object to certain processing of your personal data by us.

Many of the rights above are not absolute so there may be times when you make a request to us that we are unable to meet in full but if this is the case we will explain to you fully why we have not been able to do what you have asked. You should also be aware that where our processing of your information relies on your consent and you then decide to withdraw that consent then we may not be able to provide all or some aspects of our services to you.

Please see https://ico.org.uk/ for further information on the above rights. You may also contact the Data Protection Officer for further information.

How to Access and Update Your Information

We want to make sure the information we hold about you is always accurate and up-to-date. We can only do this if you let us know about any changes to the information we hold about you. Please help us keep our records updated by making any changes to your online registration details within the My Account section.

Concerns and contact details

If you have any concerns with regard to the way your personal data is being processed or have a query with regard to this Notice, please contact our Data Protection Officer, Laura Gittins at gittinl@hope.ac.uk.

Our general postal address is Liverpool Hope University, Hope Park, Liverpool, L16 9JD.

Our telephone number is +44 (0)151 291 3478.

If you remain unhappy then you have a right to complain to the Information Commissioners Office:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Are changes made to this document?

This Notice was last updated on 9^th December 2020.  It is reviewed when necessary and at least annually.  Any changes will be published here and you will be notified via this webpage and/or by email.