1. Introduction
This Privacy Policy sets out how the WHO Collaborating Centre for Public Health Education and Training at Imperial College London (“we”, “our”, or “us”) collects, uses, shares, and protects your personal information. This applies to all personal data obtained through our website (imperialwhocc.org), event registrations, training sessions, surveys, communications, and other interactions.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Our website address is: http://www.imperialwhocc.org.
We are part of Imperial College London and designated as a WHO Collaborating Centre for Public Health Education and Training.
3. What Data We Collect
We may collect the following categories of personal data:
a. Website Interaction
-
IP address, browser type, and device information
-
Cookies and tracking technologies (see Section 6)
-
Comments and media uploads (including metadata)
b. Event and Programme Registration
-
Full name, email, and contact number
-
Job title, organisation, and country
-
Areas of professional interest
-
Any additional details voluntarily provided
c. Marketing and Communications
-
Consent preferences for email, phone, or post
-
Historical interaction with communications
4. Legal Basis for Processing
We process your data under one or more of the following lawful bases:
-
Your consent
-
Performance of a contract (e.g., registration for training or events)
-
Compliance with legal obligations
-
Our legitimate interests in improving our services and outreach
5. How We Use Your Data
Your data may be used to:
-
Process event and training registrations
-
Share updates, materials, and outcomes related to our work
-
Respond to queries or feedback
-
Deliver communications about future opportunities
-
Improve website functionality and user experience
-
Meet reporting or accreditation requirements
6. Cookies and Embedded Content
We use cookies to enhance functionality and collect analytics. These include:
-
Session cookies to manage login and form preferences
-
Analytics cookies to monitor site usage (anonymised)
You can control cookie preferences through your browser settings.
Some pages may include embedded content (e.g., YouTube, Twitter). Embedded content from other websites behaves as if you visited those websites directly, which may collect data and use tracking technologies beyond our control.
7. Sharing of Information
We do not sell your data.
We may share your information with:
-
Event co-organisers or academic partners
-
Accreditation or certifying bodies (where applicable)
-
Third-party service providers (e.g., virtual platforms, mailing software) under data processing agreements
-
Imperial College London administrative units, where necessary
8. Data Retention
-
Comments and metadata: retained indefinitely to support site functionality
-
Registered users: data stored in user profiles (editable or deletable by users)
-
Event registrants: retained only as long as necessary for administrative, legal, or reporting purposes
You may request removal of your data at any time (see Section 10).
9. Marketing and Consent
We operate under opt-in consent for direct marketing.
Where applicable, we:
-
Clearly explain the nature of communications and third-party involvement
-
Provide simple, accessible consent options (e.g., checkboxes)
-
Record when and how consent was obtained
-
Offer a clear method to withdraw consent at any time
Bought-in lists are not used for email, SMS, or automated calls unless prior, specific consent is documented in line with UK GDPR requirements.
10. Your Rights
You have the right to:
-
Access and obtain a copy of your personal data
-
Correct or update your data
-
Request erasure (‘right to be forgotten’)
-
Withdraw consent for communications
-
Object to processing under certain conditions
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, please contact us at: [email protected]
11. Data Security
We implement appropriate technical and organisational measures to:
-
Protect data against loss, misuse, or unauthorised access
-
Ensure access only by authorised personnel
-
Secure data when using external platforms (e.g., secure webinar software)
12. International Data Transfers
Where data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place in line with data protection law, including standard contractual clauses or equivalent mechanisms.
13. Changes to This Policy
This policy is reviewed regularly. Significant updates will be notified via our website or email communications.
Last updated: August 2025
14. Contact Us
For questions, data requests, or concerns about this Privacy Policy, please contact: [email protected]