Data processing policy

This policy outlines how we handle personal data collected through this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Purpose of Processing

NSSIF processes personal data to:

  • Respond to enquiries and correspondence
  • Support investment and engagement activities
  • Improve website functionality and user experience
  • Fulfil legal, regulatory, and public interest obligations

Lawful Basis for Processing

We process personal data under one or more of the following legal bases:

  • Consent – when you actively provide permission (e.g. via contact forms)
  • Legal obligation – to comply with statutory duties
  • Public task – to carry out functions in the public interest
  • Legitimate interests – to operate and improve our services, where this does not override your rights

Categories of Data Processed

We may process:

  • Contact details (e.g. name, email address)
  • Technical data (e.g. IP address, browser type)
  • Communication records (e.g. enquiries, feedback)
  • Usage data (e.g. page visits, interaction patterns)

We do not collect or process special category data unless explicitly required and lawfully justified.

Data Sharing and Third Parties

We may share data with:

  • Government departments and public bodies
  • Approved service providers supporting website operations
  • Regulatory authorities, where required by law

All third-party processors are subject to strict data protection agreements and security standards.

Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or meet legal requirements. Retention periods are reviewed regularly and data is securely deleted when no longer required.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure servers and encrypted communications
  • Access controls and audit trails
  • Regular security reviews and updates

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Withdraw consent (where applicable)

To exercise your rights, please Contact us

Changes to This Policy

We may update this policy from time to time. Any changes will be published on this page with a revised effective date.