This policy explains how Factbase collects, uses, and protects personal information when you visit our websites or use our services, and the rights you have over your information under UK data protection law.
1. Who we are
Factbase is the data laboratory for the Global Institute for National Capability. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Global Institute for National Capability is the data controller responsible for your personal information. You can contact us at:
Factbase — the Data Laboratory for the Global Institute for National CapabilityOxford Centre for Innovation, Blue Boar Court, 9 Alfred Street, Oxford, OX1 4EH, United Kingdom
[email protected]
2. What this policy covers
This policy applies to the Factbase websites at factbase.org and its subdomains (including studio.factbase.org and docs.factbase.org), together with the datasets, indices, tools, and APIs we make available through them. It does not cover third-party websites we link to, which have their own privacy policies.
3. Information we collect
We collect only the information we need to run our services well:
- Identity and contact information — such as your name and email address, when you create an account, subscribe to updates, or contact us.
- Technical information — such as your IP address, browser type, device information, and the pages you view, collected automatically as you use the site.
- Usage information — how you interact with our datasets, tools, and APIs, so we can understand what is useful and improve it.
- Communications — the content of messages you send us and your contact preferences.
We do not intentionally collect special category data, and we ask that you do not send it to us.
4. How we collect it
We collect information in three ways: directly from you when you interact with us; automatically through cookies and similar technologies as you browse (see our Cookie Notice); and from analytics providers who help us measure how the site is used.
5. How we use your information and our legal basis
We use your information to operate and secure our services, respond to your enquiries, send updates you have asked for, understand and improve how our datasets and tools are used, and meet our legal obligations. We rely on the following lawful bases under the UK GDPR:
- Legitimate interests — to run, protect, and improve our services, where this is not overridden by your rights.
- Consent — for optional cookies and marketing emails, which you can withdraw at any time.
- Contract — where processing is needed to provide a service you have requested.
- Legal obligation — where we are required to process information by law.
6. Email updates
If you opt in, we may send you occasional updates about Factbase datasets and features. Every email includes an unsubscribe link, and you can opt out at any time by contacting us. We do not sell your contact details or share them for others' marketing.
7. Sharing your information
We share personal information only where necessary: with service providers who process data on our behalf under contract (for example hosting and analytics providers); with professional advisers where needed; and with public authorities where we are legally required to do so. We do not sell your personal information.
8. International transfers
Some of our providers may process information outside the UK or European Economic Area. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses, so your information receives an equivalent level of protection.
9. Cookies
We use cookies and similar technologies to run the site and, with your consent, to measure how it is used. Full details are in our Cookie Notice.
10. How long we keep your information
We keep personal information only for as long as we need it for the purposes described here, or for as long as the law requires. When it is no longer needed, we delete it or anonymise it.
11. Keeping your information secure
We use appropriate technical and organisational measures to protect personal information against loss, misuse, and unauthorised access. If a data breach is likely to affect your rights, we will notify you and the relevant authority as required by law.
12. Your rights
Under the UK GDPR you have the right to access your personal information; to have it corrected or erased; to restrict or object to how we process it; to data portability; and to withdraw consent where we rely on it. To exercise any of these rights, contact us at [email protected]. We will respond within one month.
13. Complaints
If you have a concern about how we handle your information, please contact us first so we can try to put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.
14. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, let you know by other means.