The personal information collected on this site will be processed by the University of Plymouth Face IT administration team and stored on the FaceIT@home website. Data processing will take place in accordance with the General Data Protection Regulations 2018. Data provided by users will be passed to the University of Plymouth for data monitoring purposes. All data will be anonymised to protect the identities of individuals. We will hold your data securely and not make it available to any third party unless permitted or required to do so by law.

1. Purpose for collecting the information and to whom the information will be disclosed.

Name and email address information is collected and stored on the website server to ensure account security. This information is not used for processing or monitoring purposes.

Pre and post intervention outcome measures will be stored and accessed by the researcher at the University of Plymouth or by the health professional supervising the user and will be used to evaluate the effectiveness of the programme and your user experience.

Responses to questionnaires embedded within the intervention (quizzes) will be used to promote the user’s insight into their strengths and areas which they need to focus on within the programme. These data will also be used to indicate progress. These data will be viewed by the user, the health professional supervising the user (where applicable) and unidentifiable versions of these data will be viewed by the researcher at University of Plymouth.

The users can complete an online homework diary that will record their progress, challenges and responses to activities. This will be accessed by the user and health professional supervising them (where applicable) and unidentifiable versions of these data will be viewed by the researcher at University of Plymouth.

2. How long the information will be kept/when it will be destroyed. 

All unidentifiable data held by the University of Plymouth will be held for five years from receipt.

3. Where the information will be stored and how secure it will be.

The data is stored securely through a password protected database on the WordPress platform hosted by SlashDotDash, the appointed data controller inline with the ISO27001 information security standards and data handling best practices.

Unidentifiable data will be stored on University of Plymouth servers and will be accessed via a password protected University of Plymouth secure laptop from data analysis. The data held by University of Plymouth will contain no identifiable information such as name, age, address or email address.