{"id":11837,"date":"2018-05-15T10:26:57","date_gmt":"2018-05-15T09:26:57","guid":{"rendered":"https:\/\/ukseds.org\/ignition\/?page_id=11837"},"modified":"2022-10-09T17:45:58","modified_gmt":"2022-10-09T16:45:58","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ukseds.org\/ignition\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"11837\" class=\"elementor elementor-11837\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-1dff7c8b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"26397\" data-id=\"1dff7c8b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-441153a2\" data-eae-slider=\"57346\" data-id=\"441153a2\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4b0ab589 elementor-widget elementor-widget-text-editor\" data-id=\"4b0ab589\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>This policy was last updated\u00a0on 13 November 2018 by agreement of the UKSEDS Executive Committee.<br \/>Older versions are available on request.<\/em><\/p><hr \/><h1><b>TL;DR;<\/b><\/h1><p><span>Our policy in 4 points:<\/span><\/p><ol><li><b>We record anonymous information about you<\/b><span>\u00a0when you visit our websites. We do this primarily through Google Analytics and server logs. Third party content like\u00a0<\/span><b>YouTube videos and Facebook \u2018Like\u2019 buttons probably track you<\/b><span>, but we can\u2019t do anything about that.<\/span><\/li><li><span>When you give us\u00a0<\/span><b>your personal information<\/b><span>\u00a0(name, email etc.)\u00a0<\/span><b>we use it for the purpose you gave it to us<\/b><span>\u00a0(email newsletter, purchase receipts etc.),\u00a0<\/span><b>share it with relevant third parties<span>\u00a0<\/span><\/b><span>(like PayPal and Mailchimp), and\u00a0<\/span><b>store it<\/b><span>.<\/span><\/li><li><b>We share and sell totally anonymous aggregate information<\/b><span>\u00a0with space companies, and with our sister organisations in other countries. Aggregate data means grouped data like \u2018X% of our members study Physics\u2019.<\/span><\/li><li><b>We take data security very seriously<\/b><span>\u00a0and do everything in our power to keep your personal information secure.\u00a0<\/span><b>We limit access<span>\u00a0<\/span><\/b><span>to the people in our team who need it, we\u00a0<\/span><b>keep the amount we hold to a minimum<\/b><span>, we\u00a0<\/span><b>try not to hold on to it for longer than is necessary,<\/b><span>\u00a0and\u00a0<\/span><b>we protect it<\/b><span>\u00a0with passwords and other security measures.<\/span><\/li><li><b>You have the right to access and correct<\/b><span>\u00a0the personal data we store about you, to restrict what we do with it,\u00a0<\/span><b>and to ask us to remove it<\/b><span>\u00a0entirely.<\/span><\/li><\/ol><hr \/><ol><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#introduction\">Introduction<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#definitions\">Definitions<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#data\">Data We Collect<\/a><ol><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#websites\">Accessing our Websites<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#emailing\">Emailing Us<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#newsletters\">Subscribing to our Newsletters<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#member\">Registering as a Member or Alumnus<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#branch\">Registering a Branch<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#buying\">Buying from Us<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#donating\">Donating to Us<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#attending\">Attending one of our Events<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#speaking\">Speaking at one of our Events<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#sponsoring\">Sponsoring one of our Events<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#competing\">Competing in one of our Competitions<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#volunteering\">Volunteering with Us<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#reimbursement\">Requesting Reimbursement<\/a><\/li><\/ol><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#third_parties\">Third Parties<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#protect\">How we Protect Data<\/a><\/li><li><a href=\"https:\/\/ukseds.org\/ignition\/privacy-policy\/#rights\">Your Rights<\/a><\/li><\/ol><hr \/><h1 id=\"introduction\"><b>Introduction<\/b><\/h1><p><span>This document covers all the interactions you can have with us in which we collect personal data. It does not cover interacting with us on Facebook, Twitter, Google+, Flickr, Instagram, or any other social media website we have an official account on.<\/span><\/p><h2><b>UKSEDS<\/b><\/h2><p><span>In this document \u2018UKSEDS\u2019, \u2018we\u2019, and \u2018us\u2019 refers to UK Students for the Exploration and Development of Space, registered charity number 1158580, represented by its Executive Committee, Staff, and Board of Charitable Trustees. SpaceCareers.uk is a website and brand wholly owned and operated by UKSEDS.<\/span><\/p><p><span>The Executive Committee is elected by the membership of UKSEDS at our Annual General Meeting at the National Student Space Conference. A list of current Executive Committee members can be found on our website, and the names of our Staff and Charitable Trustees are available on request. The names of our Charitable Trustees are also available from the Charity Commission for England and Wales.<\/span><\/p><h2><b>Contacting Us<\/b><\/h2><p><span>If you would like to see this policy include something else, or have any questions, please email us at\u00a0<\/span><a href=\"mailto:enquiries@ukseds.org\"><span>enquiries@ukseds.org<\/span><\/a><span>. You can also raise data privacy concerns directly\u00a0<\/span><a href=\"https:\/\/ico.org.uk\/concerns\/\"><span>with the Information Commissioner\u2019s Office<\/span><\/a><span>.<\/span><\/p><h2><b>Amendments<\/b><\/h2><p><span>This document may be updated from time to time by agreement of the Executive Committee. We will notify you by email if we store your personal information and you will be affected by the changes.<\/span><\/p><hr \/><h1 id=\"definitions\"><b>Definitions<\/b><\/h1><p><span>We use a number of technical terms in this document that you may be unfamiliar with. These are explained below.<\/span><\/p><h2><b>Anonymised Aggregate Data<\/b><\/h2><p><span>We share anonymised aggregate information with a number of third party organisations and the general public.<\/span><\/p><p><span>This means data that has been stripped of any identifiable information (such as your name, email address, postal address, or phone number) and combined with other data to give a picture of a group of people as a whole. Your information is always grouped with others and never traceable back to you personally.<\/span><\/p><p><span>Typical examples of anonymised aggregate data includes:<\/span><\/p><ul><li><span>We get X visitors to our website per day<\/span><\/li><li><span>We have X email subscribers studying Physics<\/span><\/li><li><span>We have X% conference delegates from Russell Group universities<\/span><\/li><li><span>X% of newsletter subscribers open our emails<\/span><\/li><li><span>We sell X% of tickets in the week before an event<\/span><\/li><\/ul><p><span>This data is used in our advertising materials and publications, to help people understand what we do, as well as for internal purposes, to help us understand the people we are working for.<\/span><\/p><h2><b>Google Drive<\/b><\/h2><p><a href=\"https:\/\/www.google.com\/drive\/\"><span>Google Drive<\/span><\/a><span>\u00a0is a cloud storage service provided by Google. We use it to store the majority of our organisational documents, as well as some of the personal data we collect. Google Drive keeps track of all revisions to documents, which means that it is very difficult to permanently delete information once it has been stored on Google Drive.<\/span><\/p><h2><b>Hashing<\/b><\/h2><p><span>Hashing some information irreversibly transforms it into something unintelligible but unique. Hashing information is a way of protecting it whilst still making it possible to compare it against other information.<\/span><\/p><h2><b>Lawful Bases<\/b><\/h2><p><span>A lawful basis is a legal reason why we store and processes personal data. There are six available lawful bases as outlined in the General Data Protection Regulation (GDPR).<\/span><\/p><h3><b>Legitimate Interest<\/b><\/h3><p><span>Legitimate interest means using data in ways you would reasonably expect, and which have a minimal privacy impact. It is the basis for most of our processing. For example, we use email addresses to send emails, and names to make name badges.<\/span><\/p><p><span>Whenever we don\u2019t have a compelling reason to need personal data, we ask for consent and\/or make the fields optional.<\/span><\/p><h3><b>Consent<\/b><\/h3><p><span>Consent means asking for permission to store and process personal data. We usually ask for consent even when it is not legally required, to make it explicitly clear that we will be processing your information.<\/span><\/p><h3><b>Legal Obligation<\/b><\/h3><p><span>Some data we are required to retain by law. This primarily applies to transaction data, which the Charities Act requires we keep for 6 years following the end of the financial year.<\/span><\/p><h3><b>Contract<\/b><\/h3><p><span>Some data we require in order to fulfil our contractual obligations. For example, if you represent a company that sponsors us, we need your details in order to contact you and provide the services we have offered.<\/span><\/p><h2><b>Websites<\/b><\/h2><p><span>Our websites are various webpages found at the ukseds.org and spacecareers.uk domains.<\/span><\/p><h2><b>Web Servers and Databases<\/b><\/h2><p><span>When we refer to our web servers, we are talking about computers owned and operated on our behalf by\u00a0<\/span><a href=\"https:\/\/www.tsohost.com\/\"><span>Tsohost<\/span><\/a><span>, our hosting provider. These servers store the files and database for our websites and provide them to website visitors and our team.<\/span><\/p><hr \/><h1 id=\"data\"><b><\/b><b>Data We Collect<\/b><\/h1><p><span>This section covers all the interactions you can have with us in which we collect personal data. For each interaction, we have detailed:<\/span><\/p><ul><li><span>What data is collected<\/span><\/li><li><span>Where is it stored, and for how long<\/span><\/li><li><span>What is it used for<\/span><\/li><li><span>Whether it is shared with any third parties<\/span><\/li><\/ul><p><span>If you do not provide information marked in a data collection form as mandatory, we will not be able to provide the services you have requested. Most of our collection forms will not allow you to proceed if you do not provide the required information.<\/span><\/p><h2 id=\"websites\"><b>Accessing our Websites<\/b><\/h2><p><span>We store up to three distinct kinds of records when you access one of our websites. The data is processed to compile statistical reports on website activity. We use these reports to evaluate aggregate visitor usage so that we can optimise the content and identify what is performing well and why.<\/span><\/p><h3><b>Server Logs<\/b><\/h3><p><span>Our web server automatically logs all requests for webpages. This is standard procedure for most websites.<\/span><\/p><p><span>This means that whenever anyone or anything loads one of our webpages or submits data, the action will be logged. Each log entry contains the requester\u2019s IP address, some details about the browser they are using, and the name of the page that has been requested (<\/span><a href=\"https:\/\/www.loganalyzer.net\/log-analyzer\/apache-combined-log.html\"><span>more information can be found here<\/span><\/a><span>). All such logs are anonymous.<\/span><\/p><p><span>Server logs are stored by our web host on their servers. We can request access to the last 30 days of logs. We rarely use full server logs. From time to time they are analysed by our Systems team to troubleshoot problems, particularly spam attacks.<\/span><\/p><h3><b>Internal Logs<\/b><\/h3><p><span>Additionally we run our own logging system that operates in a similar way but only logs the visitor\u2019s IP address and the details of the page they are visiting. All such logs are anonymous, and are stored in our database indefinitely.<\/span><\/p><h3><b>Google Analytics<\/b><\/h3><p><span>On top of this we run\u00a0<\/span><a href=\"https:\/\/analytics.google.com\/analytics\/web\/\"><span>Google Analytics<\/span><\/a><span>, which \u00a0uses \u201ccookies\u201d (small text files placed on your computer) to collect standard internet log information and visitor behaviour information in an anonymous form. Typical examples of the information that\u2019s recorded are:<\/span><\/p><ul><li><span>Which links you clicked<\/span><\/li><li><span>Whether you\u2019ve ever visited our website before<\/span><\/li><li><span>How long you spent on a page<\/span><\/li><\/ul><p><span>Google Analytics data is stored on Google\u2019s servers. Data associated with cookies, user identifiers or advertising identifiers is retained for 26 months after last user access. Anonymous aggregated data is stored forever. You can disable this tracking by altering your browser settings or installing software which blocks third party tracking.<\/span><\/p><h3><strong>SpaceCareers.uk Login<\/strong><\/h3><p><span>When you register as an employer or candidate on SpaceCareers.uk, you must provide your name and email address. We store this information in a database and on Google Drive indefinitely.<\/span><\/p><p><span>As a candidate, extra information you provide as part of your candidate profile is stored in a database. It may be shared with the public and organisational partners as anonymised aggregate data. We do this as part of our advocacy work to promote student involvement in the space sector.<\/span><\/p><p><span>If you delete your account, we hash your email address rather than destroying it so that we can analyse trends in the number of accounts, without compromising your anonymity.<\/span><\/p><h2 id=\"emailing\"><b>Emailing Us<\/b><\/h2><p><span>When you email any @ukseds.org or @spacecareers.uk address, copies of your email are stored on Google\u2019s Gmail servers. Some addresses, including\u00a0hello@spacecareers.uk\u00a0and\u00a0enquiries@ukseds.org, are managed using service desk software, which means a separate copy of your email will be stored in our own databases. We use this data to communicate with you.<\/span><\/p><h2 id=\"newsletters\"><b>Subscribing to our Newsletters<\/b><\/h2><p><span>When you register for one of our email newsletters, we ask you to provide your email address so that we can email you.<\/span><\/p><p><span>Data for our Ecliptic mailing list (UKSEDS news) is stored by\u00a0<\/span><a href=\"https:\/\/mailchimp.com\/\"><span>Mailchimp<\/span><\/a><span>, our email marketing provider, until you unsubscribe. Data for our Liftoff mailing list (SpaceCareers.uk job posts) is stored in our database until you unsubscribe, and shared with\u00a0<\/span><a href=\"https:\/\/aws.amazon.com\/\"><span>Amazon Web Services<\/span><\/a><span>, who send the emails. Amazon do not store your email.<\/span><\/p><p><span>We may prune our mailing list from time to time, removing subscribers who do not open our newsletter. You will not be notified of your removal.<\/span><\/p><h2 id=\"member\"><b>Registering as a Member or Alumnus<\/b><\/h2><p><span>When you register as a Member or Alumnus of UKSEDS, you must complete a form which asks for your name, email, and age, as well as other optional information. We also ask for consent to use and store your personal data as outlined in this policy.<\/span><\/p><table><tbody><tr><td><b>Data<\/b><\/td><td><b>Reason<\/b><\/td><td><b>Duration<\/b><\/td><td><b>Shared?<\/b><\/td><\/tr><tr class=\"alt-table-row\"><td><span>Name<\/span><\/td><td><span>Identifying members<\/span><\/td><td><span>Until membership expires. Then hashed.<\/span><\/td><td><span>No<\/span><\/td><\/tr><tr><td><span>Email address<\/span><\/td><td><span>For contact, and for mailing list<\/span><\/td><td><span>Until membership expires. Then hashed.<\/span><\/td><td><span>Yes, with Mailchimp<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><span>Age<\/span><\/td><td><span>Checking if over 18,<\/span><span><br \/><\/span><span>Aggregate Analysis<\/span><\/td><td><span>Indefinite. Anonymised on membership expiry.<\/span><\/td><td><span>Yes, in anonymous aggregate form<\/span><\/td><\/tr><tr><td><span>All other optional fields<\/span><\/td><td><span>Aggregate analysis<\/span><\/td><td><span>Indefinite. Anonymised on membership expiry.<\/span><\/td><td><span>Yes, in anonymous aggregated form<\/span><\/td><\/tr><\/tbody><\/table><p><span>We store membership information in databases, and your email address is also stored by Mailchimp.<\/span><\/p><p><span>Our Constitution requires us to have accurate contact details (name and email) for all of our members so that we can notify them about what we are doing. In order to do this we subscribe them to our email newsletters.<\/span><\/p><p><span>We ask for your age so that we know whether or not we are dealing with under 18s, and to better understand the demographics of our membership.<\/span><\/p><p><span>All other optional information is analysed in anonymised aggregate form to understand the composition of our membership and better meet their needs.<\/span><\/p><h3><b>Membership Expiration<\/b><\/h3><p><span>Your membership expires after one year. You will be given the choice to renew it, register as an alumnus, or to do nothing. If you do nothing, we will anonymise your data by hashing your name and email. Hashing irreversibly transforms your name and email into something unintelligible. We keep the rest of your membership record so that we can analyse how our membership has changed over time.<\/span><\/p><p><span>We sometimes need to check if someone was a member previously. To do this we take the name or email we\u2019d like to check, and then perform the same hashing process. If the result matches one of our existing hashes, we know that person was a member.<\/span><\/p><p><span>Alumni registration never expires.<\/span><\/p><h2 id=\"branch\"><b>Registering a Branch<\/b><\/h2><p><span>When you register a society as a branch of UKSEDS, we ask for your email and phone number so that we can contact you. We retain this until the end of the following academic year.<\/span><\/p><p><span>For example if you register for the academic year 2017-18 (ending 31 July 2018) then your personal information will be destroyed at the end of the academic year 2018-19 (ie. 1 August 2019). We retain your name and any non-personal information about the branch indefinitely.<\/span><\/p><table><tbody><tr class=\"alt-table-row\"><td><b>Data<\/b><\/td><td><b>Reason<\/b><\/td><td><b>Duration<\/b><\/td><td><b>Shared?<\/b><\/td><\/tr><tr><td><span>Name, email address, phone number<\/span><\/td><td><span>For contact<\/span><\/td><td><span>Max 2 years<\/span><\/td><td><span>No<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><span>All other fields<\/span><\/td><td><span>Aggregate analysis<\/span><\/td><td><span>Indefinite<\/span><\/td><td><span>Yes, in anonymous aggregated form<\/span><\/td><\/tr><\/tbody><\/table><h2 id=\"buying\"><b>Buying from Us<\/b><\/h2><h3><b>Event Tickets<\/b><\/h3><p><span>When you purchase a ticket for an event, we ask for various personal details, which we store in our database, and additionally in\u00a0<\/span><a href=\"https:\/\/www.paypal.com\/\"><span>PayPal<\/span><\/a><span>\u2019s systems. Your financial information is processed directly by PayPal, and we cannot see your card or bank details. If you provide explicit consent, then we will add your email address to our mailing list.<\/span><\/p><table><tbody><tr><td><b>Data<\/b><\/td><td><b>Reason<\/b><\/td><td><b>Duration<\/b><\/td><td><b>Shared?<\/b><\/td><\/tr><tr class=\"alt-table-row\"><td><span>Name, billing address<\/span><\/td><td><span>Legally required as part of the transaction record<\/span><\/td><td><span>Max 7 years, then destroyed<\/span><\/td><td><span>Yes, with PayPal<\/span><\/td><\/tr><tr><td><span>Email address<\/span><\/td><td><span>Legally required as part of the transaction record<\/span><\/td><td><span>Max 7 years, then hashed<\/span><\/td><td><span>Yes, with PayPal<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><span>Email address<\/span><\/td><td><span>For mailing list<\/span><\/td><td><span>Until unsubscribed<\/span><\/td><td><span>With Mailchimp, if consent given<\/span><\/td><\/tr><tr><td><span>All other fields<\/span><\/td><td><span>Aggregate analysis<\/span><\/td><td><span>Indefinite<\/span><\/td><td><span>Yes, in anonymous aggregated form<\/span><\/td><\/tr><\/tbody><\/table><p><span>We are required under the Charities Act to keep transaction data for a period of 6 years after the financial year in which the transaction was made.<\/span><\/p><p><span>We hash your email address rather than destroying it so that we can see trends in how many events people attend, without compromising your anonymity.<\/span><\/p><h3><b>Merchandise<\/b><\/h3><p><span>We sell branded merchandise such as t-shirts through\u00a0<\/span><a href=\"https:\/\/www.spreadshirt.co.uk\/\"><span>SpreadShirt<\/span><\/a><span>, a third party. \u00a0When you make a purchase DonorBox, we receive your postcode and the details of what you ordered. We do not store this information, but SpreadShirt does. Other information may be requested and stored by SpreadShirt and its partners, but is not shared with us and is not under our control.<\/span><\/p><h2 id=\"donating\"><b>Donating to Us<\/b><\/h2><p><span>We handle donations through\u00a0<\/span><a href=\"https:\/\/donorbox.org\/\"><span>Donorbox<\/span><\/a><span>, a third party. When you donate through Donorbox, we receive your name and email address, unless you choose to donate anonymously. We store this information on Google Drive indefinitely. Other information may be requested and stored by Donorbox and its partners, but is not shared with us and is not under our control.<\/span><\/p><h2 id=\"attending\"><b>Attending one of our Events<\/b><\/h2><p><span>If you attend one of our events we ask for your name and email address, which we store in our database, as well as some other optional information.<\/span><\/p><p><span>If someone else bought your ticket, then they will have provided this information on your behalf.<\/span><\/p><table><tbody><tr class=\"alt-table-row\"><td><b>Data<\/b><\/td><td><b>Reason<\/b><\/td><td><b>Duration<\/b><\/td><td><b>Shared?<\/b><\/td><\/tr><tr><td><span>Name<\/span><\/td><td><span>For contact<\/span><\/td><td><span>1 year, then destroyed<\/span><\/td><td><span>Yes, with venue if required.<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><span>Email address<\/span><\/td><td><span>For contact<\/span><\/td><td><span>1 year, then hashed.<\/span><\/td><td><span>No<\/span><\/td><\/tr><tr><td><span>All other fields<\/span><\/td><td><span>Aggregate analysis<\/span><\/td><td><span>Indefinite<\/span><\/td><td><span>Yes, in anonymous aggregated form<\/span><\/td><\/tr><\/tbody><\/table><p><span>We hash your email address rather than destroying it so that we can see trends in how many events people attend, without compromising your anonymity.<\/span><\/p><h2 id=\"speaking\"><b>Speaking at one of our Events<\/b><\/h2><p><span>When we invite you to speak at one of our events, we ask for your name, email, and phone number so that we can communicate with you. The data is stored in Google Drive indefinitely. We are usually required to share your name with the venue as they are often required to vet any external speakers. We will not share your contact details.<\/span><\/p><h2 id=\"sponsoring\"><b>Sponsoring one of our Events<\/b><\/h2><p><span>When your company agrees to sponsor one of our events, we ask for your name, email, and phone number so that we can communicate with you. The data is stored in Google Drive indefinitely.<\/span><\/p><h2 id=\"competing\"><b>Competing in one of our Competitions<\/b><\/h2><p><span>When you participate in one of our competitions, we ask for your name, email address, and university affiliation. We use this data to communicate with you about the competition, and store it in Google Drive indefinitely.<\/span><\/p><h2 id=\"volunteering\"><b>Volunteering with Us<\/b><\/h2><p><span>When you apply to be a volunteer with us, we ask for your name, email address, phone number and university\/organisation. We use this data for communication and store it in Google Drive indefinitely. Your information is shared internally with the rest of the team, and will publish your name on our website.<\/span><\/p><h2 id=\"reimbursement\"><b>Requesting Reimbursement<\/b><\/h2><p><span>When you apply for reimbursement of expenses, we ask for your name, email address, and bank details. We use this data for communication and to pay expenses. It is stored in Google Drive indefinitely.<\/span><\/p><hr \/><h1 id=\"third_parties\"><b><\/b><b>Third Parties<\/b><\/h1><p><span>We share and sell information only in the ways explained below. When sharing identifiable personal information, we only share what is necessary.<\/span><\/p><h2><b>Data Processors<\/b><\/h2><p><span>We share certain identifiable personal data with third parties who do processing on our behalf.<\/span><\/p><table><tbody><tr class=\"alt-table-row\"><td width=\"25%\"><b>Party Name<\/b><\/td><td width=\"50%\"><b>Purpose<\/b><\/td><td width=\"25%\"><b>Data We Share<\/b><\/td><\/tr><tr><td><a href=\"https:\/\/paypal.com\/\"><span>PayPal<\/span><\/a><\/td><td><span>To process financial transactions on our behalf.<\/span><\/td><td><span>Name,<\/span><span><br \/><\/span><span>Email address,<\/span><span><br \/><\/span><span>Billing address<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><a href=\"https:\/\/www.spreadshirt.co.uk\/\"><span>Spreadshirt<\/span><\/a><span>,<\/span><span><br \/><\/span><a href=\"https:\/\/donorbox.org\/\"><span>Donorbox<\/span><\/a><\/td><td><span>To process financial transactions on our behalf.<\/span><\/td><td><span>None<\/span><\/td><\/tr><tr><td><a href=\"https:\/\/www.tsohost.com\/\"><span>Tsohost<\/span><\/a><\/td><td><span>To provide data storage for our data and a platform on which we build our websites<\/span><\/td><td><span>All data<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><a href=\"https:\/\/www.google.com\/\"><span>Google<\/span><\/a><\/td><td><span>To provide cloud-based email services, hosting, storage and processing services to assist and\/or enable us to manage personal data, and deliver, analyse and improve our services.<\/span><\/td><td><span>All data<\/span><\/td><\/tr><tr><td><a href=\"https:\/\/mailchimp.com\/\"><span>Mailchimp<\/span><\/a><\/td><td><span>To provide bulk mailing services for our email newsletter.<\/span><\/td><td><span>Email address<\/span><\/td><\/tr><tr class=\"alt-table-row\"><td><a href=\"https:\/\/aws.amazon.com\/\"><span>Amazon Web Services<\/span><\/a><\/td><td><span>To provide bulk mailing services for our email newsletter.<\/span><\/td><td><span>Email address<\/span><\/td><\/tr><\/tbody><\/table><h2><b>Service Partners<\/b><\/h2><p><span>Some data we have to share with third parties in order to provide the services you are expecting from us. We do not always know in advance what we will have to share or with whom, but we will always minimise the amount of information that is shared.<\/span><\/p><h3><b>Media Companies<\/b><\/h3><p><span>Some of the content on our website is embedded from somewhere else. For example a video from\u00a0<\/span><a href=\"https:\/\/www.youtube.com\/\"><span>YouTube<\/span><\/a><span>, or\u00a0<\/span><a href=\"https:\/\/www.facebook.com\/\"><span>Facebook<\/span><\/a><span>\u2019s \u2018Like\u2019 button.<\/span><\/p><p><span>We do not explicitly share any personal data with these companies in this way, but embedded content may track your interaction with our content. We cannot disable this tracking, but you can do so by altering your browser settings or installing software which blocks third party tracking.<\/span><\/p><h3><b>Event Partners<\/b><\/h3><p><span>We may share information such as your name and university affiliation with our event partners (for example the university hosting a workshop) where necessary, but we will not share your contact details.<\/span><\/p><h2><b>Organisational Partners and the Public<\/b><\/h2><p><span>We share and publish anonymised aggregate data in a variety of formats.<\/span><\/p><h3><b>The Public<\/b><\/h3><p><span>We share anonymised aggregate data in reports we publish publicly. We do this as part of our advocacy work to promote student involvement in the space sector.<\/span><\/p><h3><b>Space Organisations<\/b><\/h3><p><span>We share anonymised aggregate data with organisations in the space industry who sponsor us or advertise with us, or might do so in the future. We do this so that we can get money and support to fulfil our charitable objectives.<\/span><\/p><h3><b>Partner Organisations<\/b><\/h3><p><span>We have information sharing agreements with\u00a0<\/span><a href=\"http:\/\/seds.org\/\"><span>SEDS-USA<\/span><\/a><span>,\u00a0<\/span><a href=\"http:\/\/euroavia.eu\/\"><span>EUROAVIA<\/span><\/a><span>,<\/span><a href=\"http:\/\/euroavia.eu\/\"><span>\u00a0and some other organisations<\/span><\/a><span>. These are organisations very much like UKSEDS in the United States and Europe. We swap aggregate information with them to learn from their experiences of running similar events.<\/span><\/p><h2><b>Government and Statutory Bodies<\/b><\/h2><p><span>If we are legally compelled to hand over information we will comply. This could include to law enforcement, or as part of audits.<\/span><\/p><hr \/><h1 id=\"protect\"><b>How we Protect Data<\/b><\/h1><p><span>We take data security very seriously and do everything in our power to keep your personal information secure.<\/span><\/p><ul><li><span>We audit our data to ensure we are keeping only information we need<\/span><\/li><li><span>We carefully limit what can be accessed publicly, and protect the rest with passwords<\/span><\/li><li><span>We use protocols such as HTTPS, Single Sign On, and Two Factor Authentication to minimise the chances of someone intercepting data or one of our passwords<\/span><\/li><li><span>We set monitor our servers and databases for suspicious activity<\/span><\/li><\/ul><h2><b>Data Breaches<\/b><\/h2><p><span>We have a comprehensive action plan and checklist for data breach incidents. If we identify that personal data has been exposed, we will make this news public and notify any affected individuals. We will also act to identify the cause of the breach and take steps to prevent it from happening again.<\/span><\/p><hr \/><h1 id=\"rights\"><b>Your Rights<\/b><\/h1><p><span>Your rights relating to your data are written into law under the Data Protection Act, and the General Data Protection Regulation. These are:<\/span><\/p><ol><li><span>The right to be informed \u2013 You have a right to be informed about how we collect, process, and store your personal data. This information is provided in this document.<\/span><\/li><li><span>The right of access \u2013 You have a right to access the personal data we store about you.<\/span><\/li><li><span>The right to rectification \u2013 You have a right to have inaccurate details corrected.<\/span><\/li><li><span>The right to erasure \u2013 You have a right to have personal data erased.<\/span><\/li><li><span>The right to restrict processing \u2013 You have a right to restrict the way in which we process your personal data.<\/span><\/li><li><span>The right to data portability \u2013 You have the right to obtain the personal data we store about you in a structured machine readable format.<\/span><\/li><li><span>The right to object \u2013 You have the right to object to \u00a0the way in which we process your personal data.<\/span><\/li><li><span>Rights in relation to automated decision making and profiling \u2013 This right does not apply to UKSEDS as we do not engage in automated decision making or profiling.<\/span><\/li><\/ol><p><span>To exercise any of the rights listed above, please email us including your name and outlining the ways in which you have interacted with us. You must also provide proof of identity, which can include sending the email from an address we have on record.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<div style=\"width:97%; border-top: 1px solid black; text-align:center; margin-left:1.5%; margin-top:60px\">\n\t\t\t<h2 style=\"margin-bottom:50px\">Proud corporate partners with<\/h2>\n\t\t\t<!-- <img decoding=\"async\" width=\"150px\" height=\"150px\" src=\"https:\/\/ukseds.org\/aurora\/public\/images\/sponsors\/pcl.png\">\n            <img decoding=\"async\" width=\"324px\" height=\"150px\" src=\"https:\/\/ukseds.org\/aurora\/public\/images\/sponsors\/lockheed.png\">\n            <img decoding=\"async\" width=\"324px\" height=\"150px\" src=\"https:\/\/ukseds.org\/aurora\/public\/images\/sponsors\/quantum_hub.png\">\n            <img decoding=\"async\" width=\"324px\" height=\"150px\" src=\"https:\/\/ukseds.org\/aurora\/public\/images\/sponsors\/cornwall_space.png\">\n            <img decoding=\"async\" width=\"324px\" height=\"150px\" src=\"https:\/\/ukseds.org\/aurora\/public\/images\/sponsors\/raytheon.png\">\n            <img decoding=\"async\" width=\"324px\" height=\"150px\" src=\"https:\/\/ukseds.org\/nssc2018\/images\/sponsors\/uksa.png\"> -->\n            <img decoding=\"async\" width=\"324px\" src=\"https:\/\/ukseds.org\/ignition\/wp-content\/uploads\/2022\/10\/AIRBUS_Blue-1024x379.png\">\n            <img decoding=\"async\" width=\"280px\" src=\"https:\/\/ukseds.org\/ignition\/wp-content\/uploads\/2022\/10\/2eab0dd7-d62d-4713-af37-2397934fbd47.png\" style=\"margin-bottom: 50px;\">\n\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>This policy was last updated\u00a0on 13 November 2018 by agreement of the UKSEDS Executive Committee.Older versions are available on request. TL;DR; Our policy in 4 points: We record anonymous information about you\u00a0when you visit our websites. We do this primarily through Google Analytics and server logs. Third party content like\u00a0YouTube [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_price":"","_stock":"","_tribe_ticket_header":"","_tribe_default_ticket_provider":"","_tribe_ticket_capacity":"0","_ticket_start_date":"","_ticket_end_date":"","_tribe_ticket_show_description":"","_tribe_ticket_show_not_going":false,"_tribe_ticket_use_global_stock":"","_tribe_ticket_global_stock_level":"","_global_stock_mode":"","_global_stock_cap":"","_tribe_rsvp_for_event":"","_tribe_ticket_going_count":"","_tribe_ticket_not_going_count":"","_tribe_tickets_list":"[]","_tribe_ticket_has_attendee_info_fields":false,"footnotes":"","_tec_slr_enabled":"","_tec_slr_layout":""},"class_list":["post-11837","page","type-page","status-publish","hentry"],"aioseo_notices":[],"publishpress_future_action":{"enabled":false,"date":"2026-05-09 21:31:28","action":"change-status","newStatus":"draft","terms":[],"taxonomy":""},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"ticketed":false,"_links":{"self":[{"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/pages\/11837"}],"collection":[{"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/comments?post=11837"}],"version-history":[{"count":14,"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/pages\/11837\/revisions"}],"predecessor-version":[{"id":13778,"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/pages\/11837\/revisions\/13778"}],"wp:attachment":[{"href":"https:\/\/ukseds.org\/ignition\/wp-json\/wp\/v2\/media?parent=11837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}