This privacy notice is for the Cardiff University website only (www.cardiff.ac.uk, blogs.cardiff.ac.uk, sites.cardiff.ac.uk and campaigns.cardiff.ac.uk).
For information about data protection in general and privacy notices for enquirers, students and staff, please see our Data Protection pages.
The personal data we collect
The Cardiff University website collects personal data from you in two ways:
- data you provide yourself
- data collected automatically.
The personal information collected is not sold to third-parties.
Data you provide yourself
Our website includes several different types of online form, as explained below. The data gathered through online forms will only be used for the purpose described on collection unless you also consent to other defined uses.
When you complete an online form on www.cardiff.ac.uk, blogs.cardiff.ac.uk or sites.cardiff.ac.uk, the personal data you provide is sent to Cardiff University.
The information you submit via www.cardiff.ac.uk is hosted in the UK by Squiz, the company that provides our hosting services. Squiz operates as our data processor, processing personal data on our behalf. Your data is deleted within 30 days.
The information may then be passed to trusted partners under contract to help us do what you requested (such as sending you a printed prospectus).
Open day booking forms
Data collected automatically
The data collected automatically by our website helps us understand which parts of it are most popular, where visitors are coming from and how they are using it. This allows us to make improvements in future.
As you use our website, data about the pages visited is sent to Google Analytics so that we know how many people are using it. This includes the individual pages visited, an anonymised IP address, the device, browser and the website you came from. Google can also collect demographic and interests information from the DoubleClick cookie, if it's present on your device.
On parts of our website, we use code provided by Google, Facebook, Twitter or Snapchat to serve adverts based on someone’s past visit (retargeting) and to measure the effectiveness of our advertising campaigns. This code sends data to Google, Facebook or Snapchat about the individual pages visited, actions completed on the page, IP address, device and browser.
This data may be held outside of the EU. Google, Facebook, Twitter and Snapchat are certified compliant with the EU-US Privacy Shield. You can request this data or ask for it to be deleted via the Facebook Your Information, Google’s Ads Settings, Twitter privacy controls and Snapchat Support pages or visit Your Online Choices and switch off behavioural advertising from a large number of companies.
We may also use code provided by Infinity to determine whether online adverts result in clicks on the phone numbers displayed on our website. The code sends data to Infinity about the pages visited and the phone number clicked as well as IP address, a generated Infinity visitor ID, device screen resolution, browser information and Google Analytics ID number. The data is held in the UK. Page view data is stored for three months and other data is stored until the contract with Infinity comes to an end. To request this data or ask for it to be deleted contact firstname.lastname@example.org
We may also use code provided by Adform to measure the effectiveness of other online adverts. No personal data is sent to Adform.
When we use interactive maps that show your position, we will do so only with your consent. If you provide consent, the map will use the coordinates of your current location but this data will not be sent to us or stored.
On some parts of our website we use Hotjar to record anonymous data about how specific pages are used (such as clicks or mouse movements). This does not collect or store any personal data.
On pages that have embedded Twitter content, we instruct Twitter not to record any information about you. You can opt-out of all Twitter tracking from the Twitter Personalisation settings page.
On some parts of our website we use Catchpoint to record how long pages take to load. This is so that we can learn how to make it faster. No personal data is sent to Catchpoint but it does record the browser used on the pages we are monitoring.
Our website detects the country you are in, based on your IP address. This allows us to personalise parts of our website for international visitors.
Our web servers record requests for web pages (URLs) but no personal data is collected or stored.
Do not track
Our website does not currently support the “Do not track” browser setting.
Changes to this privacy notice
We reserve the right to change this information without notice.