Privacy Policy

Last updated 13/ 10/ 2025

1. Who We Are

This website is operated by EPICare: England’s National Psychosis Platform, hosted by

UCL Division of Psychiatry,
6th Floor, Maple House,
149 Tottenham Court Road,
London, W1T 7NF, United Kingdom.

Our website address is: https://epicare.uk

EPICare is a national research and clinical platform aiming to improve psychosis care and outcomes through the better use of real-world data. We are committed to protecting your privacy and handling all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


For any questions about this policy, please contact:
📧 feedback@epicaremh.org

2. The Purpose of This Policy

We collect and process personal information only when necessary and lawful.

Information You Provide Directly

When you contact us via forms or email, we may collect:

  • Your name

  • Email address

  • Organisation, role, or affiliation (if provided)

  • The content of your enquiry

This data is used only to respond to your request or provide the information you asked for.

Information Collected Automatically

When you visit our site, we may automatically collect:

  • IP address and general geographic location

  • Browser type and operating system

  • Pages visited and time spent on site

  • Referring website

This helps us improve our website performance and content. 

3. What Personal Data We Collect

We collect and process personal information only when necessary and lawful.

Information You Provide Directly

When you contact us via forms or email, we may collect:

  • Your name

  • Email address

  • Organisation, role, or affiliation (if provided)

  • The content of your enquiry

This data is used only to respond to your request or provide the information you asked for.

Information Collected Automatically

When you visit our site, we may automatically collect:

  • IP address and general geographic location

  • Browser type and operating system

  • Pages visited and time spent on site

  • Referring website

This helps us improve our website performance and content.

 

Cookies

Our site uses cookies to:

  • Enable essential website functions (e.g., security, accessibility)

  • Remember user preferences

  • Analyse website traffic and performance (via tools such as Google Analytics)

You can control or delete cookies at any time through your browser settings.

If you use our cookie consent banner (powered by CookieYes), you can choose which types of cookies you consent to. 

4. How We Use Your Data

We use your information only for the following purposes:

  • To respond to your enquiries or contact requests

  • To improve website content and performance

  • To ensure site functionality and security

  • To manage user accounts or content (for registered users only)

We do not sell or share personal data for marketing.

5. Legal Bases for Processing

Under the UK GDPR, we rely on one or more of the following lawful bases:

  • Consent: when you actively opt in (e.g., to receive email updates).

  • Legitimate interests: for improving site performance, ensuring security, or analysing anonymised usage data.

  • Legal obligation: if required to comply with law or regulation.

6. How Long We Retain Your Data

  • Contact form submissions: kept for up to 12 months

  • Analytics data: stored securely for up to 12 months for follow-up and administrative purposes

  • Comment data: retained indefinitely so follow-up comments can be recognised automatically

  • Newsletter subscriptions: retained until you unsubscribe or withdraw consent

7. Cookies and Analytics

Cookies

Our website uses CookieYes to manage consent and record visitors’ preferences. You can accept, reject, or customise which cookies are used.

Cookies Used by Our Site

  • Necessary cookies: required for basic functionality, such as remembering your cookie preferences.

  • Functional cookies: enhance user experience (e.g., remembering display preferences).

  • Analytics cookies: help us understand how visitors use the site (via Google Analytics, with IP anonymisation enabled).

  • Login cookies (if applicable): if you log into the site, temporary cookies are set to determine browser compatibility and save login details.

Managing Cookies

You can manage or withdraw consent at any time via the CookieYes banner.
For full details, see our Cookie Policy.

 

Analytics

We use Google Analytics (with IP anonymisation) to collect aggregated, non-identifiable information about how visitors use the website.
This data helps us monitor site performance and usability.

You can opt out by adjusting your cookie preferences or using the Google Analytics Opt-out Browser Add-on.

8. Embedded Content From Other Websites

Pages on this website may include embedded content (e.g., videos, images, articles).
Embedded content from external websites behaves exactly as if you visited those websites directly.

These websites may collect data about you, use cookies, or track your interaction with their embedded content.
We recommend reviewing the privacy policies of those external services, such as:

9. How We Protect Your Data

We use a range of security measures to safeguard your information:

  • SSL (HTTPS) encryption

  • Regular WordPress and plugin updates

  • Limited access to authorised administrators

  • Encrypted server backups

In the event of a data breach, we will investigate promptly and, if necessary, notify affected individuals and the ICO.

10. Who We Share Your Data With

We may share limited data with trusted third parties who provide website hosting, analytics, or email delivery services.
All providers act under written agreements that comply with UK GDPR.
Visitor comments may be checked through an automated spam-detection service.

We do not transfer identifiable personal data outside the UK unless appropriate safeguards (such as the UK International Data Transfer Agreement) are in place.

11. Your Rights

Under the UK GDPR, you have the right to:

  • Access a copy of your personal data

  • Request correction or deletion of inaccurate data

  • Withdraw consent where processing is based on consent

  • Object to or restrict processing

  • Request data portability in machine-readable format

To exercise these rights, email feedback@epicaremh.org
We will respond within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Information Commissioner’s Office (ICO):  https://ico.org.uk/make-a-complaint/

12. Children's Privacy

Our website and services are intended for general informational purposes and are not directed at children under 16.
We do not knowingly collect or store data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
The latest version will always be available on this page, with the date shown at the top.

14. Contact Us

If you have any questions or concerns about how we handle your data, please contact:

feedback@epicaremh.org

 

This Privacy Policy complies with: 

  • UK General Data Protection Regulation (UK GDPR)

  • Data Protection Act 2018

  • Privacy and Electronic Communications Regulations (PECR)