Privacy policy

IPC will be the Data Controller of any personal data that you supply. This means that we will make the decisions on how your data is used and for what reasons.

What information do we collect?

We collect information about you when you visit this website and voluntarily provide us with personal details in order to register an account. Primarily we collect this data to identify you in line with the usage policy above. We also collect information about how you use our website and the pages you access. This might include:

  • Name
  • Organisation
  • Job title
  • Email address
  • Login and account information
  • IP address
  • Browser and device information
  • Website usage data
For subscription customers we may also collect:
  • Billing contact details
  • Invoice information
  • Organisation details
  • Records of subscription payments
How will we use this information?

We may contact you regarding your account, service updates and information relevant to your use of POPPI-PANSI. Marketing communications will only be sent where you have provided consent or where otherwise permitted by applicable law. The tracking information collected by IPC will only be used for internal review, to improve the content of the site or to customise content and/or layout. It will not be shared with other organisations for commercial purposes. IPC will only use such information for the purpose as described and will not pass on details to any third party not otherwise stated below unless you have given us permission to do so. You have a right to access your personal data and to rectify any inaccuracies.

Update emails

We use Intuit Mailchimp to distribute update emails. Mailchimp may process personal data outside the UK. Where this occurs, appropriate safeguards such as the UK International Data Transfer Addendum and Standard Contractual Clauses are relied upon. Mailchimp implements appropriate safeguards for international data transfers, including Standard Contractual Clauses and other mechanisms where required and is GDPR compliant. More information about MailChimp policies and GDPR can be found here: Mailchimp and European Data Transfers. Mailchimp will retain data in accordance with its own retention policies and our instructions.

What is our legal basis for processing your personal data?
  • User account management: Contract / Legitimate Interest
  • Security monitoring: Legitimate Interest
  • Email enquiries: Legitimate Interest
  • Service update emails: Legitimate Interest
  • Marketing emails: Consent
  • Subscription administration and billing: Contract
  • Financial record keeping: Legal Obligation

Any information subsequently used (see above) is considered to be in the legitimate interests of IPC and does not violate your fundamental right to privacy.

Will we transfer your data outside the United Kingdom?

Some third-party service providers used by the website may process limited personal data, including IP addresses and device information, outside the United Kingdom. Where this occurs, appropriate safeguards are implemented in accordance with UK data protection legislation

What rights do you have regarding your personal data that we hold?

You have the right:

  • to be informed.
  • of access to your data.
  • to correct data if it is wrong.
  • to ask for your data to be deleted.
  • to restrict use of the data we hold.
  • to lodge a complaint with the ICO (www.ico.org.uk)
  • to data portability.
  • to object to IPC using your data.
  • in relation to using your data for automated decision making and profiling.
Are there any consequences if you do not provide the requested data?

Yes, you will not be able to activate an account.

How long will we keep your data?

Our cookie policy (see below) contains details of the retention periods for each cookie that our websites create or modify on your computer. Wordfence acts as a service provider in support of website security. Information about Wordfence's processing activities can be found in its privacy policy Wordfence privacy policy.

User account information is retained while an account remains active and for up to two years after the last login unless a longer period is required for legal or operational purposes.

Personal data not otherwise described above will only be retained for as long as necessary to fulfil the purpose for which it was collected after which time it will be securely deleted.

Financial and subscription records may be retained for longer periods where required by accounting, auditing or legal obligations.

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 17th July 2026.

Who to contact if you have any questions or concerns

If you have any questions or concerns about how your personal data is being used, please contact IPC via ipc@brookes.ac.uk.

Institute of Public Care
Oxford Brookes University
Headington Campus
Oxford OX3 0BP

For data protection enquiries you may also contact Oxford Brookes University's Data Protection Officer at dpo@brookes.ac.uk.

Other websites

Our website contains links to other websites. This privacy policy only applies to this website. When you link to other websites you should read their own privacy policies.

Cookie policy

Last updated: 28/10/2026

This policy explains how Institute of Public Care (“we”) uses cookies and similar technologies on poppi-pansi.org.uk.

What cookies are

Cookies are small text files that a website stores on your device. Similar technologies, such as your browser’s local storage, work in the same way. We refer to all of these as “cookies” in this policy.

Our approach

We only use cookies that are needed for the site to function, to keep it secure, or to remember choices you have made. We do not currently use cookies for analytics, marketing or tracking, and we do not share cookie data with anyone else. Because of this, we do not currently ask for consent before these cookies are set, but you can still control them through your browser (see below).

Cookies we use
Purpose Type How long they last
WordPress uses login cookies to authenticate users and maintain secure sign-in sessions Strictly necessary Until you sign out or close your browser
Protecting the site and your account from attacks (our website firewall)
wfwaf-authcookie-*
wf_loginalerted_*
wordfence_verifiedHuman
Security For a limited period necessary to provide security protection and fraud prevention
Remembering the area you have selected and how you have chosen to display the data Functionality Until you close your browser

The website software may store small technical settings in your browser to support core functionality and security.

Third-party services

To display the site correctly, we load fonts from Google Fonts and a code library (jQuery) from Google’s servers. We are not aware of Google Fonts setting cookies for visitors when fonts are loaded. However, your browser will connect directly to Google’s servers and disclose technical information such as your IP address. For more information, see Google’s privacy policy and our privacy policy.

Managing cookies

You can block or delete cookies through your browser settings. If you block the strictly necessary cookies, you won’t be able to sign in, and the site will not remember your selections.

Changes to this policy

If we change the cookies we use, we will update this policy and the date at the top of the page.

Contact

If you have any questions about this policy, please contact us at support@poppi-pansi.org.uk.