IQI privacy notice 

This Schedule sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. 

We may from time to time use personal data otherwise than in accordance with this policy. Where this is the case you will be informed before such use. 

For the purpose of applicable data protection legislation, the data controller is Imaging Quality Improvement Ltd, c/o Veale Wasbrough Vizards LLP, Narrow Quay House, Narrow Quay, Bristol BS1 4QA.

Who we are 

Imaging Quality Improvement Ltd, a trading subsidiary of The Royal College of Radiologists (RCR) and the College of Radiographers (CoR). The RCR is a registered charity (no. 211540) that works with our Fellows and members to improve the standard of medical practice across the fields of clinical radiology and clinical oncology. The CoR is a registered charity (no. 01287383) that is concerned with public awareness and the promotion and development of diagnostic imaging and radiotherapy. 

Our nominated representative for the purpose of applicable data protection legislation is the RCR Data Protection Officer, working on behalf of IQI Ltd, who can be contacted on [email protected]. 

What type of information is collected about you? 

The personal and sensitive data we may collect, or that you may provide to us, will include your: 

• Name 
• Email contact details 
• Job role 
• Employer name 

Why we need this information and our lawful basis for processing: 

We collect and process your data so that we can: 

• Contact you to verify the information you have provided (lawful basis: legitimate interest, consent). 
• Grant your nominated representatives access to the QSI Hub (lawful basis: legitimate interest, consent).

It also helps us: 

• To ensure that our records of organisations who are members of the QSI Hub, and individuals associated with those organisations, remains up to date and accurate (lawful basis: legitimate Interests, consent). 
• To contact you with updates that might be of interest to you or your employer (lawful basis: legitimate interest, consent). 

We do not collect special category data.  

We will not carry out automated decision making.  If this changes, we will update this notice and take such other steps as required to comply with applicable law. 

Who do we share your information with? 

Your personal information will be processed by employees of the Royal College of Radiologists and we may also disclose your personal information to third parties: 

• If we are under a duty to do so in order to comply with any legal obligation. 
• To protect the rights, property or safety of RCR or others. 

The RCR will not share your information for marketing purposes with any third parties. 

Consent  

Where we need your consent to hold your information we will ask you to confirm your consent in writing and we will inform you why we are collecting the information, how we will use it, how long we keep it for, who else will have access to it and what your rights are. Where we do rely on consent you have the right to change your mind and withdraw that consent at any time by writing to us. If you withdraw your consent we will cease using any personal information obtained and processed under that consent unless we have some other legal obligation to continue to use it. Please note that withdrawing consent will not affect the lawfulness of our processing prior to consent being withdrawn. To withdraw consent, please contact us at [email protected].

Access to your information and correction 

Your rights

You have the right to ask us to provide you with access to and rectification or erasure of your personal data. Upon receiving a request for erasure we will confirm whether your personal data has been deleted or a reason why it cannot be deleted (for example because we have a legal obligation to keep the information).   Providing you this information is free of charge, but charges may apply for excessive requests. To do this, please email or write to us (FAO: Data Protection Officer, IQI Ltd c/o The Royal College of Radiologists, 63 Lincoln’s Inn Fields, London WC2A 3JW).

You have the right to object to processing of your data. You may request that we stop processing information about you. Upon receiving your request we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or bring or defend legal claims. 

You have the right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

We want to make sure that your personal information is accurate and up to date. We verify and refresh our datasets including through the use of information provided voluntarily by you. In order to assist us with ensuring your personal information is up to date please confirm any updates to us by emailing [email protected].

You have the right to ask us to provide you with the personal data you have provided to us in an electronic format or to ask us to provide it to a third party. 

Complaints procedure 

Any complaints regarding the method in which we handle your data may be logged by sending an e-mail to [email protected].   

You have the right to lodge a complaint with the Information Commissioner’s Office via its website www.ico.org.uk/concerns or you can call them on 0303 123 1113, or write to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. 

Where does information go? 

We are situated in the United Kingdom.  If you are located outside the United Kingdom, you will voluntarily be transferring your personal data to the United Kingdom. 

How long do we keep your personal data? 

We keep your personal data for the duration of our agreement or IQI Ltd to provide services to your organisation, plus a further period of no more than 12 months. You have the right to request the deletion of your personal data; to exercise this right please contact the Data Protection Officer.

Changes to our privacy policy 

Any changes we may make to our privacy policy in the future will be posted on our web pages and, where appropriate, notified to you by email. 

Contact us about data protection 

To exercise all relevant rights, or for queries or complaints please contact the Data Protection Officer.