Privacy, Cookies and Legal Information

Privacy Statement

The NPSA website does not store or capture personal information about you, but merely logs the IP address that is automatically recognised by the web server - NPSA uses this information to analyse the usage of the website and the websites from which visitors have arrived. NPSA does this to assess which parts of the website are the most popular and identify trends in usage, helping to guide the development of new web pages.

The system will only record your email address and other information if volunteered to us by you. In this case, your message will be sent via a Secure Socket Layer (SSL), a protocol used for secure communications over the Internet. Web addresses that begin with "https" indicate that an SSL connection will be used. These instances are collectively referred to as ‘Online Services’.

NPSA may also use third party organisations to collect information on our behalf. These services are also used on a voluntary basis, and collectively referred to as ‘Third Party Services’.

Use of online services

The NPSA website contains online services that may be used by any site website visitor. Where these services are used, NPSA may collect additional personal information. Examples of activities where this may apply include online surveys, using the Contact Us page or registering for a NPSA hosted or joint-hosted conference or event.

These are all used on a voluntary basis. In these instances, NPSA is the Data Controller.

NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.

What NPSA collects

The types of data that NPSA may collect where you use Online Services may include:

• Name and contact details for organisations

• Organisation details e.g., details of the organisation that individuals work for and their role within that organisation

Lawful Basis for processing

NPSA's lawful basis for processing personal data that is collected when individuals use the Online Services is, for the purposes of the applicable ‘lawfulness’ requirements in the Data Protection Act 2018 (‘DPA’), that processing will be:

• pursuant to the exercise of functions conferred by an enactment or rule of law

• the exercise of the functions of the Crown, responsible ministers or a government department, or

• legitimate interests pursued by the NCSC

How long does NPSA keep your personal data?

NPSA only retains personal data for as long as it is necessary for the purposes set out in this document and for as long as the law requires.

Use of Third Party Services

NPSA may use third parties to provide online services, on NPSA's behalf, where additional personal information is collected. Examples of these  include online surveys conducted by a third party, or registering for partner led conferences or training courses. These services can be used by any website visitors and are used on a voluntary basis.

In these instances, NPSA is the Data Controller and third parties are the Data Processors.

Where NPSA uses third parties to process personal data it has arrangements in place to make sure that any such third parties keep personal data secure and only process it in accordance with its instructions.

NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.

What NPSA collects

The types of data that NPSA may collect where you use Online Services may include:

• Name and contact details for organisations
• Organisation details e.g., details of the organisation that individuals work for and their role within that organisation
• Logs of use of the third-party services, which may directly or indirectly contain information relating to you
• Any information or material that may be made available to use through accessing of the third party services

Lawful Basis for processing

NPSA's lawful basis for processing personal data that is collected when individuals use Third Party Services is, for the purposes of the applicable ‘lawfulness’ requirements in the Data Protection Act 2018 (‘DPA’), that processing will be:

• pursuant to the exercise of functions conferred by an enactment or rule of law
• the exercise of the functions of the Crown, responsible ministers or a government department, or
• legitimate interests pursued by the NCSC

How long does NPSA keep your personal data?

NPSA only retains personal data for as long as it is necessary for the purposes set out in this document and for as long as the law requires.

Keeping data secure and disclosing information

Transmitting information over the internet is generally not completely secure, and NPSA cannot guarantee the security of an individual’s data. Any data an individual transmits to NPSA is sent at their own risk.

NPSA does however have procedures and security features in place to keep data secure once we receive it.

NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.

Cookies

How NPSA uses cookies to collect information about how you use our site

www.npsa.gov.uk puts small files - known as "cookies" - on to your computer to collect information about how you use our site. Cookies are used to:

• measure how you use the website so it can be updated and improved based on your needs
• remember the notifications you've seen so that we don't show them to you again
• to show you relevant advertising on other sites, ensuring our advertising is as cost-effective as possible. We may also share this information with third parties for this purpose.

NPSA does not use cookies to identify you personally. You should see a message appear on the site before we store a cookie on your computer and you can change your cookie settings at any time.

Cookies that measure website performance

We use one optional cookie which measures website use. You can choose whether or not you are happy for us to use it.

NPSA (www.npsa.gov.uk) uses Google Analytics (GA) to collect data that we use to improve your experience of our website. We do this to help make sure the site is meeting the needs of its users and to help us make improvements. Google Analytics stores information about:

• how long users spend on each web page and how users got to the site
• what users click on while visiting the site

The GA cookies we currently use are:

For future information read Google's overview of privacy and safeguarding data.

Should you wish, you can opt out of Google Analytics cookies.

Strictly necessary cookies

The GA cookies we currently use are:

Marketing cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. This means that you may see NPSA adverts shown to you even after you have left our website. They do not store directly personal information or provide identifying information to NPSA, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. 

Third Party Cookies

First-party cookies are those that we set for www.npsa.gov.uk; third party cookies are cookies that originate from different websites. 
An example of third-party cookies we use is Vimeo, as we host our videos online with Vimeo; you may therefore receive a Vimeo cookie, if you click to view one of our videos. Please note that the following third parties may also use cookies and these named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third party cookies are likely to be analytical cookies or performance cookies or marketing cookies.

• Meta
• LinkedIn
• Vimeo
• YouTube

Surveys

We will sometimes select users to take part in a survey, for example our 'Digital Experience' survey. If you take part, or dismiss the survey, we'll save a cookie that lets us know you've seen the message so that we do not show it to you again. We use SmartSurvey to collect responses to the survey. If you take part, SmartSurvey will save extra cookies to track your progress on their website.

Others

Apart from the Google Analytics and Smart Survey, third party cookies are collected by YouTube, Issuu, & Vimeo on the website. We do not control the setting of third-party cookies, so if you are concerned you should check the policy on the third-party website.

Freedom of Information

The Freedom of Information Act (FOIA) allows members of the public to request access to information held by certain public authorities. NPSA is not subject to FOIA and therefore will not process FOIA requests. For further information on FOIA please refer to the website of the Information Commissioner's Office.

Limitations and Amendments

This statement only covers the NPSA website at https://www.npsa.gov.uk. This statement does not cover third party websites to which we may link.

Any revisions to this statement will be published on this page. It is your responsibility to check this page periodically for any such changes.