This statement is consistent with the Institute of Development Studies Privacy Statement but is specifically designed for the purpose of managing alumni relations and other supporter engagement. If you have interacted with IDS in other ways e.g. as a subcontractor, short course participant, conference delegate, or signed up to IDS newsletters, your data may be held for other purposes across the Institute (see IDS Privacy Statement).
The Institute of Development Studies maintains a database of alumni and other supporters in order to stay in touch with our community and keep you updated about news, events, careers initiatives and fundraising activities.
Some of our database (but not all) choose to join our online community by registering on this website and creating an online profile. In both instances (individuals with offline database records and individuals with online profiles), we collect and store personal information (or “data”) about you. We are committed to protecting and respecting your privacy and this Policy sets out what information we collect about you, where and how we use (“process”) it.
We may change this Policy from time to time. If we make any significant changes, we will advertise this on the website or contact you directly with the information. Please check this page occasionally to make sure you are happy with any changes.
If you have any questions about this Policy or concerning your personal information, please contact the IDS Data Protection Officer.
For the purposes of the General Data Protection Regulations (GDPR) and any subsequent UK legislation covering data protection, the Data Controller is Institute of Development Studies.
The information we have about you depends on where we collect it, but may include:
We collect personal information when you:
From time to time, we may update your information indirectly from public sources e.g. news items, internet profiles/features/Companies House, and other business related resources, or from other information shared internally on your interactions with other IDS staff or IDS services
We will use your personal information in a number of ways, always with a legal basis for processing your data. These may include:
The use of your information for the purposes set out above is lawful because one or more of the following applies:
If you have an online profile on this website you can update your consent options by logging-in and clicking on “My Settings” in your profile. Scroll down to find your ‘Consent options’ where you will see a list of consents and the options “opt-in”, “opt-out” and “unspecified”.
Via ‘My Settings’ you can also choose to hide your profile from Google, limit access to your profile so that it’s only viewable to your connections and adjust some of the automatic notifications that you receive from this website. Please note that your name and profile picture (but not full profile) may appear in various places around the community website, such as a ‘Recent Joiners’ panel and in ‘Search’ results, irrespective of the privacy settings you have selected.
If we are using consent as our legal basis for processing your data, we must have an explicit “opt-in” from you for this specific type of processing.
If we are using legitimate interests as our legal basis for processing your data, we will process your data responsibly in a way that you would reasonably expect, and you can opt-out at any stage.
If you click ‘unsubscribe’ at the bottom of one of our emails sent you will be automatically opted-out of these types of email communications in the future.
If you want to contact us about your consent preferences, please contact the IDS Fundraising & Development Office by telephone +44 (0)1273 606261 or email email@example.com
We understand the importance of keeping your personal information secure and take appropriate steps to safeguard it.
Your data is stored on a dedicated, secure cloud server hosted by Amazon Web Services (AWS) in the EU and managed by our website provider, ToucanTech. Industry standard firewalls, anti-virus, encryption and back-up methods are in place, as well as strict data handling protocols.
We always ensure only authorised persons have access to your information, which means only our approved employees and contractors, and that everyone who has access is appropriately trained in data management.
If you have an online profile for this website you are responsible for keeping your login details (email and password) confidential and we ask that you do not share your password with anyone.
No data transmission over the internet can be guaranteed to be completely secure. So, whilst we strive to safeguard your information, we cannot guarantee the security of any information you provide online and you do this at your own risk.
Third parties who provide services for us, for example donation processing, sending mailings, web analytics, and collecting publicly available information. We select our third-party service providers with care. We provide these third parties with the information that is necessary to provide the service and we will have an agreement in place that requires them to operate with the same care over data protection as we do
Third parties if we run an event in conjunction with them. We will let you know how your data is used when you register for any event
Web hosting, email hosting, analytics and search engine providers that enable us to run our community database and improve our website and its use
Third parties in connection with restructuring or reorganisation of our operations, for example if we merge with another business. In such event, we will take steps to ensure your privacy rights will be protected by the third party
If we intend to transfer your personal data outside of the European Economic Area we will seek your consent before doing so and explain how we are ensuring compliance with the UK Data Protection Act 2018.
Please would you let us know if your contact details change. Online members can update your details directly by logging-in to the website and clicking on ‘My Settings’ under your profile. You can also update your details by contacting us at +44 (0)1273 606261 or email firstname.lastname@example.org
Where data can be aggregated and anonymised, our website provider (ToucanTech) might use this for research purposes without restriction. For example, they may monitor traffic patterns, site usage, response rates and data trends to help make improvement to the website software. They are entitled to do this because the resulting data will not personal identify you and will therefore no longer constitute personal data for the purposes of data protection laws.
We will hold your personal information for as long as it is necessary for the relevant activity.
Where we rely on your consent to contact you for direct email marketing/ fundraising purposes, we will treat your consent as lasting only for as long as it is reasonable to do so. This will usually be for three years. We may periodically ask you to renew your consent.
If you ask us to stop contacting you, we will keep a record of your contact details and limited information needed to ensure we comply with your request. If you ask us to remove your personal data from our database we will delete all the information we hold out apart from your name and (if applicable) the dates that you studied at the Institute of Development Studies and archive your record in our database.
You have the right to see what personal data we hold about you. To obtain a copy of the personal information we hold about you, please write to the Data Protection Officer, Institute of Development Studies, Brighton, East Sussex, BN19RE or email email@example.com.
After you have requested a subject access request, you will be notified within 72 hours that your request is being dealt with. IDS will then have 30 days to provide the information to you. Please see the subject access request form for more details.
You also have the following rights:
All of these rights are subject to certain safeguards and limits or exemptions. To exercise any of these rights, you should contact the Data Protection Officer at the above address.
If you are not happy with the way in which we have processed or dealt with your information, you can complain to the Information Commissioners Office (ICO). Further details about how to complain can be found here.
We may change this Statement from time to time. If we make any significant changes we will advertise this on the website or notify to you of the changes by e-mail. Please check back occasionally to see any updates or changes to our Privacy statement. We will also notify you of any changes to the IDS Privacy Statement.
This Privacy Statement was last updated on 14 July 2021 to make it easier to read and contains no signficant changes to way that your information is collected, stored, and processed.
Questions, comments and requests regarding this Privacy Statement are welcomed. You are able to contact us at firstname.lastname@example.org, or write to us at the address of our registered office (see “About Us” above), as follows: Fundraising & Development Office, Institute of Development Studies, Library Road, Brighton, BN1 9RE, UK.
Further contact information can be located at the “Contact Us” page of this website.