NeuroRocket CIC
Data Privacy Policy
The NEUROROCKET CIC is committed to protecting your personal data and informing you of your rights in relation to that data.
As a non-profit organization, Neurorocket CIC is not registered as a Data Controller under the Data Protection Act 2018. However, this policy outlines our commitments and responsibilities.
One of the NeuroRocket Programme’s responsibilities as a data controller is to be transparent in our processing of your personal data and to tell you about the different ways in which we collect and use your personal data. The University will process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR, GDPR) and the Data Protection Act 2018 (DPA) and this privacy notice is issued in accordance with the UK GDPR Articles 13 and 14.
We may update our Privacy Notice at any time. The current version of our Privacy Notice can be found below, and we encourage you to check back here regularly to review any changes.
The Data Protection Team
The NeuroRocket Programme has appointed a Data Owner and Data Steward. Their postal address is:
16 Commerce Square, Nott’m NG1 1HS
They can be emailed at support@neurorocket.com
What information do we hold?
We hold a range of personal data about you, all of which you have provided to us directly including: Contact information, special category data (mental health, physical health, sexual orientation, ethnicity, gender identity, age and emergency contact).
How do we use it and why?
We only process data for specified purposes and if it is justified in accordance with data protection law. Personal data is used for the following reasons:
- Programme communications and information
- Monitoring purposes regarding engagement and diversity in the programme
- Specific support for underrepresented groups (i.e. we may consider your special category data when pairing participants with mentors, or to check your eligibility for specific funding pots designed for underrepresented groups).
The legal basis for this processing is: Consent, Performance of a Contract, Vital Interests, Legitimate Interests.
We also process the following special category data about you: Racial or ethnic origin, and sexual orientation The additional processing condition for this processing is the data subject has given explicit consent. Processing is necessary for archiving purposes to support funding of our social enterprise.
This processing is justified because monitoring purposes ensure that we are evidencing the diversity of the Programme.
Who do we share it with?
We do not share any information with any third party.
How long do we keep your data?
We will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Where can I get more information?
If you have any questions about this privacy notice or how your data is processed, please contact Support@NeuroRocket.co.uk.
Approved and updated by NeuroRocket Board March 2024