Privacy policy

Privacy policy (version 2 – November 2021)

We respect your right to privacy. This Privacy Policy sets out details of the information that we may collect from you and how we may use that information. Please read this Privacy Policy carefully.

  1. About Us
    • In this Privacy Policy, references to “we” or “us” are to The Christie NHS Foundation Trust, whose registered office is at The Christie Hospital, Wilmslow Road, Manchester, M20 4BX, who will be the controller of any personal data processed as described in this Privacy Policy.
    • GatewayC is part of the School of Oncology at The Christie NHS Foundation Trust.
  1. Use of the Website and Online Courses, Webinars and Content

2.1       This Privacy Policy applies only to your use of GatewayC and Online Courses, Webinars and Content. Partner Institutions who provide the Online Courses and Content or other linking sites found on the website may also gather information and you should consult those other parties’ privacy policies as appropriate and applicable.

  1. Collection of Information

3.1       When you access GatewayC via any means, registering for access, using online modules, webinars and content, respond to or participate in any survey or questionnaire sent to you by us, provide comments via the feedback tab, we may collect, store, and use certain elements of your personal information in line with this policy. We may also ask you for information when you report a problem with GatewayC.

3.2       To register with GatewayC, we ask for your name, email address, age bandings, your job role and (if applicable) information about the organisation you are associated with.  We will store this data you have inputted as part of your learning on GatewayC.

3.3       We will collect data relating to your visits to the GatewayC platform, record your use of the learning material, for example, details of how long you have used GatewayC for and how many courses and/or webinars you have completed.

Use of Your Information

4.1       By accessing GatewayC via any means, registering for access, using online modules, webinars and content, respond to or participate in any survey or questionnaire sent to you by us, provide comments via the feedback tab, you agree that your personal information may be collected, stored, used, and shared by us and our partners, course and content providers, or third parties we work with, for any of the following purposes:

4.1.i            to provide, maintain, protect and improve the quality of GatewayC;

4.1.ii           to provide you with a personalised browsing experience when using the GatewayC platform;

4.1.iii          to fulfil any contractual agreements between you and us and any third party who has commissioned the education on your behalf;

4.1.iv         to send you details of courses, webinars, relevant insights, and other resources which we think may interest you, unless you opt out as described at paragraph 9.1.3 below;

4.1.v          to manage the personal account that you hold with us;

4.1.vi         to allow you to use the full range of features on or via GatewayC;

4.1.vii        to send you course-specific email notifications and updates about modules you are enrolled on;

4.1.viii       to comply with legal and regulatory requirements;

4.1.ix         to contact you occasionally to invite you to share your opinions and experiences of GatewayC;

4.1.x          to allow other partner institutions to perform research (as more fully set out in paragraph 12 below)

4.2       We may use your email address to send you course notices and updates about our Services.

  1. Storage of Information

5.1       All information is stored on secure servers. When you register, we will ask you to choose a password which enables you to access GatewayC. You are responsible for keeping this password confidential. We ask you not to share this password with anyone.

5.2    If you have opted into our marketing preferences your data will be stored by Goldvision in a secure Tier One server located in Milton Keynes, UK.

5.3 Moodle is our learning management system, which is managed by the Hubken Group. The Moodle data is stored on Hubken Group’s servers, which are hosted in the UK (Manchester and Leeds) and are ISO 27001 certified. For further details regarding Hubken Group’s data storage go to section 20.4 here.

  1. Legal Basis for Processing Your Information

6.1       Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

6.2       However, we will normally collect personal information from you only (i) where we have your consent to do so, (ii) where we need the personal information to perform a contract with you/on your behalf via a third party purchaser or (iii) where the processing is in our legitimate interests and not overridden by your rights.

  1. Disclosure of Your Information

7.1       We may disclose your personal information to third parties when permitted by law including:

7.1.i            where there is a legal basis of consent;

7.1.ii           if we are under a duty to disclose or share your information in order to comply with any legal obligation;
7.1.iii        to our customer relationship management provider (i.e. Goldvision), which allows us to send personalised email communications to you, if you have opted into our marketing preferences;

  1. Data Retention

8.1.     In line with the fifth data protection principle, when we have no ongoing legitimate need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

  1. Your Rights

9.1.     You have the following data protection rights:

9.1.i            You can edit your personal details via your profile page whenever you wish.  We maintain a procedure to help you confirm that your personal information remains correct and up-to-date or choose whether or not you wish to receive material from us or some of our partners.

9.1.ii           In addition, you can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the ‘Contacting GatewayC’ heading below.

9.1.iii          You may unsubscribe from certain email communications by following the Unsubscribe link in the email communication itself. You may also update your personal information by logging into GatewayC and visiting your account page. You may also email us at gatewayc@christie.nhs.uk to access, correct, delete or update your personal information on our systems. We will answer your email as promptly as possible.

9.1.iv         Similarly, if we have collected and processed your personal information on the basis of your consent, then you can withdraw your consent at any time.  Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

9.1.v          You have the right to complain to a data protection authority about our collection and use of your personal information.  For more information, please contact your ICO (Information Commissioner’s Office) here

9.1.vi         GatewayC may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies. Please check these policies before you submit any personal information to these websites.

9.1.vii        You may obtain a copy of your personal data that we have collected, this will be returned in a commonly used electronic form. If you wish to access your personal data, you will need to make a request to the address found under the ‘Contacting GatewayC’ heading below.

  1. Cookies

10.1       GatewayC uses cookies. Cookies are small files stored on your computer’s hard drive which are used to collect your personal information. You may choose to refuse cookies but, if you do so, some of the functionality of GatewayC may no longer be available to you.

10.2           We may use anonymous identifiers which tracks users whenever they interact with our content, this is called UTM tracking (Urchin Tracking Module). This may include information on the browser you are using and the operating system in use.

  1. Research

11.1        Partner institutions that support GatewayC by purchasing it on your behalf may carry out research on your use of the site. Research will always be conducted in accordance with current best practice.

  1. Updating this Privacy Policy

12.1        We may update or amend this Privacy Policy from time to time, to comply with law or to meet our changing business requirements. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

  1. Contacting GatewayC

13.1        If you have any questions, comments, or complaints about this Privacy Policy, please contact us using the details below:

GatewayC
The Christie School of Oncology
Wilmslow Road
Manchester, M20 4BX
E-mail: the-christie.gatewayc@nhs.net