Last updated July 2024
We are committed to safeguarding the privacy of our members and visitors; this policy sets out how we will treat your personal information.
1. This privacy policy
This privacy policy is based on a template created by SEQ Legal (template used May 2018).
2. What information do we collect?
We may collect, store and use the following kinds of personal information:
(a) information about your computer and about your visits to and use of this website (including and not limited to your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation);
(b) information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services (including tickets for events, sports club and society memberships, NUS Extra card purchases and any other special offers for sale on our website;
(c) information that you provide to us to register with us (including name, address, e-mail, phone numbers and University number);
(d) information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters;
(e) information to process your advertising enquiry with our media partner native;
(f) any other information that you choose to send to us.
3. Cookies
A cookie consists of information sent by a web server to a web browser, and stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
We may use both “session” cookies and “persistent” cookies on the website. We will use the session cookies to track your navigation through our site; we will use the persistent cookies to: enable our website to recognise you when you visit. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date.
We use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users' computers. The information generated relating to our website is used to create reports about the use of the website. Google will store this information. Google's privacy policy is available at www.google.com/privacypolicy.html.
Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third party cookies. For example, in Internet Explorer you can refuse all cookies by clicking “Tools”, “Internet Options”, “Privacy”, and selecting “Block all cookies” using the sliding selector. Blocking all cookies will, however, have a negative impact upon the usability of many websites.
4. Using your personal information
Personal information submitted to GSU will be used for the purposes specified in this privacy policy or in relevant parts of the website.
We may use your personal information to:
(a) administer the website;
(b) improve your browsing experience by personalising the website;
(c) enable your use of the services available on the website;
(d) send to you goods purchased via the website, and supply to you services purchased via the website;
(e) send you general (non-marketing) commercial communications;
(f) send you email notifications which you have specifically requested;
(g) deal with enquiries and complaints made by or about you relating to the website;
(h) allow third-party organisations to provide applications/functionality, data processing, IT services to us, or manage our media and advertising.
We will not without your express consent provide your personal information to any third parties for the purpose of direct marketing.
All our website financial transactions are handled through our payment services provider, Opayo (formerly Sage Pay). You can review the Opayo privacy policy at opayo.co.uk/policies/privacy-policy. We will share information with Opayo only to the extent necessary for the purposes of processing payments you make via our website and dealing with complaints and queries relating to such payments.
5. Disclosures
We may disclose information about you to any of our employees or University of Greenwich staff insofar as reasonably necessary for the purposes as set out in this privacy policy.
In addition, we may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any legal proceedings or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(d) to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
Except as provided in this privacy policy, we will not provide your information to third parties.
6. Security of your personal information
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. We will store all the personal information you provide on secure (password- and firewall-protected) servers. All electronic transactions you make to or receive from us will be encrypted using SSL technology. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log in to the website).
7. Policy amendments
We may update this privacy policy from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes.
8. Your rights
You may instruct us to provide you with any personal information we hold about you. This is free of charge to request unless a request is manifestly unfounded, excessive or repetitive. This will be at the discretion of the Data Protection Officer. Provision of such information will be subject to you providing sufficient proof of identity (photo and address). We may withhold such personal information to the extent permitted by law.
You may instruct us not to process your personal information for marketing purposes by email at any time - there are unsubscribe links in all of our marketing emails, or you can email sucompliance@gre.ac.uk. In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt-out of the use of your personal information for marketing purposes.
9. Third party websites
The website contains links to other websites. We are not responsible for the privacy policies or practices of third party websites.
10. Updating information
If you are a student and need to change any personal information, please do this on the University of Greenwich Portal. We get data about you from the University into our system, including any changes, so they need to be made with the University first. If you are unable to do this through the Portal, then you can visit a Student Centre on one of the University campuses and make changes there.
If you are a staff member or member of the public and you have a Guest account on your website, you are able to update certain bits of information through your account on our website.
If there is something that needs updating that you are unable to do so, please e-mail us at sucompliance@gre.ac.uk, let us know needs to be corrected or updated, and we will assist you.
11. Contact
If you have any questions about this privacy policy or our treatment of your personal information, please write to us by e-mail to sucompliance@gre.ac.uk or by post to the Data Protection Officer, Greenwich Students' Union, Dreadnought building, 30 Park Row, Greenwich, London, SE10 9LS.
12. Data controller
The data controller responsible in respect of the information collected on this website is Greenwich Students' Union (formerly Students’ Union University of Greenwich).
Our data protection registration number is Z2206248.