1. NMC-REVALIDATION.ORG and their affiliates (together "NMC-REVALIDATION.ORG") are the data controllers of your information under the Data Protection Act 1998 ("the DPA")

2. All NMC-REVALIDATION.ORG employees and representatives, whether permanent or temporary, must be aware of the requirements of the Data Protection Act when they collect or handle data about an individual.

3. They must not disclose data except where the disclosure complies with the requirements of the DPA, or, where relevant, statutory guidance issued by the Information Commissioner's Office ("the ICO"). Data sent to outside agencies to process on NMC-REVALIDATION.ORG’s behalf must always be protected by a written contract.

4. NMC-REVALIDATION.ORG will only collect personal data that is relevant to the carrying out of the legitimate purposes and function of NMC-REVALIDATION.ORG.

5. Members have the opportunity of opting out of marketing material from the NMC-REVALIDATION.ORG and of either opting into or out of (depending on the circumstances) receiving offers and other information from other organisations with whom the NMC-REVALIDATION.ORG have negotiated favourable member rates. This may be done by using the provided tick box option. These third party operated services may generate income, and other benefits, for NMC-REVALIDATION.ORG in pursuit of our aims to improve the quality and delivery of services to Members.

6. Mobile telephone numbers are never passed onto third parties for marketing purposes.

7. NMC-REVALIDATION.ORG web pages use cookies if the visiting User Agent is set to accept them. For more information on our use of cookies and how to opt out, please view our cookie policy.

8. We will strive to ensure that data collected is as accurate as possible. Individuals about whom data is held have the right to the amendment or deletion of incorrect entries within a reasonable time.

9. Appropriate technical and organisational measures will be adopted to protect the security of all personal data held by NMC-REVALIDATION.ORG, including sensitive personal data as defined by the Data Protection Act 1998.

10. Information will be held in an environment as secure as possible. NMC-REVALIDATION.ORG employees and representatives will be responsible for ensuring that all regular data care procedures are fully and conscientiously followed.

11. All ordered manual files and databases will be kept up-to-date and will have an agreed archiving policy.

12. Data no longer required for the legitimate purposes of NMC-REVALIDATION.ORG will be regularly purged. A clear rationale will be supplied for personal data to be kept beyond six years.

13. Where data is passed to a third party for processing, the NMC-REVALIDATION.ORG will ensure that a written contract is in place that states that the agent will:

• a. process the data transferred only on the express instructions of NMC-REVALIDATION.ORG
• b. ensure data is used in full compliance with the DPA; and
• c. implement appropriate security measures to protect the information transferred.

13. Any request for data based on a legal requirement e.g. from police or other bodies, must, where possible, be put in writing and will be checked against the advice of the NMC-REVALIDATION.ORG's Data Protection Officer, before data is disclosed.

14. All employees and representatives have a duty to protect individuals' data from accidental disclosure and are required to comply with the following obligations:

• a. not to give our passwords to other people, who will then have access to the data you are entitled to view;
• b. not to recycle reports that contain personal data;
• c. to take due care to ensure that data is not left about on laptops or in files either in or out of the office, where they can be accessed by unauthorised personnel.

15. NMC-REVALIDATION.ORG will provide data subjects access to their personal information on request, accompanied by a maximum fee of £10. The data will be provided within 40 days of receipt of written request unless it does not need to be disclosed under the DPA.

16. We may make changes to this privacy charter from time to time. If we do make any such changes, we will post the changes on this page. Please revisit this charter each time you consider giving NMC-REVALIDATION.ORG personal information.

17. Requests about NMC-REVALIDATION.ORG data protection and privacy policy should be sent to the: Data Protection Officer, Email: contact@nmc-revalidation.org.

Last review: November 2017