Privacy statement
The NPSA website does not store or capture personal information about you, but merely logs the IP address that is automatically recognised by the web server - NPSA uses this information to analyse the usage of the website and the websites from which visitors have arrived. NPSA does this to assess which parts of the website are the most popular and identify trends in usage, helping to guide the development of new web pages.
The system will only record your email address and other information if volunteered to us by you. In this case, your message will be sent via a Secure Socket Layer (SSL), a protocol used for secure communications over the Internet. Web addresses that begin with "https" indicate that an SSL connection will be used. These instances are collectively referred to as ‘Online Services’.
NPSA may also use third party organisations to collect information on our behalf. These services are also used on a voluntary basis, and collectively referred to as ‘Third Party Services’.
For details on which cookies we collect on this site, please refer to our Cookie Policy.
Use of online services
The NPSA website contains online services that may be used by any site website visitor. Where these services are used, NPSA may collect additional personal information. Examples of activities where this may apply include online surveys, using the Contact Us page or registering for a NPSA hosted or joint-hosted conference or event.
These are all used on a voluntary basis. In these instances, NPSA is the Data Controller.
NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.
What NPSA collects
The types of data that NPSA may collect where you use Online Services may include:
- Name and contact details for organisations
- Organisation details e.g., details of the organisation that individuals work for and their role within that organisation
Lawful Basis for processing
NPSA's lawful basis for processing personal data that is collected when individuals use the Online Services is, for the purposes of the applicable ‘lawfulness’ requirements in the Data Protection Act 2018 (‘DPA’), that processing will be:
- pursuant to the exercise of functions conferred by an enactment or rule of law
- the exercise of the functions of the Crown, responsible ministers or a government department, or
- legitimate interests pursued by the NCSC
How long does NPSA keep your personal data?
NPSA only retains personal data for as long as it is necessary for the purposes set out in this document and for as long as the law requires.
Use of Third Party Services
NPSA may use third parties to provide online services, on NPSA's behalf, where additional personal information is collected. Examples of these include online surveys conducted by a third party, or registering for partner led conferences or training courses. These services can be used by any website visitors and are used on a voluntary basis.
In these instances, NPSA is the Data Controller and third parties are the Data Processors.
Where NPSA uses third parties to process personal data it has arrangements in place to make sure that any such third parties keep personal data secure and only process it in accordance with its instructions.
NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.
What NPSA collects
The types of data that NPSA may collect where you use Online Services may include:
- Name and contact details for organisations
- Organisation details e.g., details of the organisation that individuals work for and their role within that organisation
- Logs of use of the third-party services, which may directly or indirectly contain information relating to you
- Any information or material that may be made available to use through accessing of the third party services
Lawful Basis for processing
NPSA's lawful basis for processing personal data that is collected when individuals use Third Party Services is, for the purposes of the applicable ‘lawfulness’ requirements in the Data Protection Act 2018 (‘DPA’), that processing will be:
- pursuant to the exercise of functions conferred by an enactment or rule of law
- the exercise of the functions of the Crown, responsible ministers or a government department, or
- legitimate interests pursued by the NCSC
How long does NPSA keep your personal data?
NPSA only retains personal data for as long as it is necessary for the purposes set out in this document and for as long as the law requires.
Keeping data secure and disclosing information
Transmitting information over the internet is generally not completely secure, and NPSA cannot guarantee the security of an individual’s data. Any data an individual transmits to NPSA is sent at their own risk.
NPSA does however have procedures and security features in place to keep data secure once we receive it.
NPSA works with various government departments, law enforcement bodies, and other organisations and may share personal data with these bodies where doing so complies with the law and is necessary and proportionate for the proper discharge of our statutory functions.
Freedom of Information
The Freedom of Information Act (FOIA) allows members of the public to request access to information held by certain public authorities. NPSA is not subject to FOIA and therefore will not process FOIA requests. For further information on FOIA please refer to the website of the Information Commissioner's Office.
Limitations and Amendments
This statement only covers the NPSA website at https://www.npsa.gov.uk. This statement does not cover third party websites to which we may link.
Any revisions to this statement will be published on this page. It is your responsibility to check this page periodically for any such changes.