Privacy Notice - mailing list and events

Overview

The Institute for Digital Security and Behaviour is committed to protecting your personal data and being transparent about how we collect and use it. 

We process personal data in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

Using personal data allows us to provide you with relevant and timely information about the IDSB’s research, events, and activities. This privacy notice explains how your personal data is collected and processed by the IDSB. 

Amendments to this privacy notice

We may update this privacy notice from time to time and will indicate at the top of this page when this Privacy Notice was last revised. Pleas periodically review the privacy notice, as your continued used of IDSB services indicates your agreement with any changes that we make. 

When we collect personal data

We collect your information when you interact with us, including when you: 

  • Subscribe to the IDSB mailing list  

  • Register for or attend IDSB events 

Why we collect your personal data and how we use it

Subscribing to the IDSB mailing list

When you subscribe, we collect your name, job title, organisation and email address. 

We use this information to: 

  • Send newsletters and relevant updates about the Institute and the work of our members that may be of interest to you 

  • Share information about events, publications, research projects and other opportunities relating to the work of the Institute and its members 

  • Occasionally send related communications aligned with the Institute’s work (e.g. partner activities or relevant initiatives) 

Every email will include a clear option to unsubscribe or change your communications preferences. 

We use Mailchimp as a mailing platform to send communications; however, your contact data will be stored and managed within University-controlled systems and only transferred to Mailchimp where necessary for distribution purposes. You can review Mailchimp’s Terms of Use and Privacy Statement. 

We ensure that any third-party providers we use comply with data protection standards and appropriate safeguards are in place.

Event registration and attendance

When you register for an IDSB event, we collect your name and email address to: 

  • Process your registration 

  • Communicate important event information (e.g. confirmations, updates) 

The IDSB often uses Eventbrite (a third-party service) to manage ticket bookings for events. Please review Eventbrite’s Terms of Service and Privacy Policy. We may also ask for additional optional information (such as accessibility requirements) to ensure inclusive participation. Where this involves special category data, it will only be processed with your explicit consent. 

If you choose to join our mailing list when registering for an event, your details will be added based on your consent. If you do not opt in, you will not be added. 

Data retention

We keep your personal data for the purposes for which it was collected or until you ask use to remove your personal data, in accordance with your rights below. We will retain the data you agree to share with us for a period of up to two years and no later than May 2028 when we will either write to request your agreement to continue holding it for the purposes you have consented to or to notify you that we will be deleting it. We will assess the personal data that we hold on a regular basis to determine its relevance and destroy your personal data if we no longer require it or no longer provide any services to you. 

We will always respect a request by you to stop contact by any or all methods of communication, or for any specific purpose. 

Your rights and how to contact us

You have the right to: 

  • Access the personal data the IDSB holds about you 

  • Request correction of inaccurate or incomplete data 

  • Request deletion of your data 

  • Restrict or object to processing, for example: ask us not to contact you 

  • Withdraw consent at any time (for consent-based processing) 

  • Request transfer of your data (data portability) 

  • Lodge a complaint with the Information Commissioner’s Office (ICO) 

We will never sell your data and will not share it with third parties to use for their own purposes unless disclosure is permitted or required by law. 

To exercise any of your rights outlined in this notice or if you have any questions about the way in which the IDSB handles your personal data, please us: idsb@bath.ac.uk