Privacy Policy
Last updated: April 2025
1. Data Controller
Naustec is the data controller responsible for your personal data collected through this website (naustec.com). If you have any questions about this privacy policy or our data practices, please contact us via the website.
2. What Data We Collect
We may collect and process the following personal data:
- Survey responses: Information you voluntarily provide when completing our research surveys, which may include details about your professional practice, opinions, and experiences.
- Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage data: Information about how you use our website, including pages visited, time spent, and navigation paths.
- Cookies: We use cookies and similar technologies as described in our Cookie Policy.
3. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose, such as completing a survey.
- Legitimate interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes improving our services and understanding the needs of mental health practitioners.
4. How We Use Your Data
- To conduct and publish research about private mental health practice in the UK
- To improve our website and services
- To develop tools and technology for mental health practitioners
- To communicate with you about our research findings (where you have opted in)
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Service providers: Third-party companies that help us operate our website and conduct research (e.g., hosting providers, analytics services)
- Research purposes: Anonymised and aggregated survey data may be published in research reports. Individual responses will never be identifiable.
- Legal obligations: Where we are required to disclose data by law or regulation
6. International Transfers
Your data may be transferred to, and processed in, countries outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner, to protect your personal data.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Survey responses: Retained for the duration of the research project and for a reasonable period thereafter for analysis and publication (typically up to 5 years).
- Technical and usage data: Retained for up to 26 months.
- Cookies: See our Cookie Policy for specific retention periods.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data in certain circumstances.
- Right to restriction: Request that we restrict the processing of your data.
- Right to data portability: Request a copy of your data in a structured, commonly used, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us via the website. We will respond within one month.
9. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.