General Mailing List Privacy Notice

Updated 12th November 2026

 

This notice explains how NSPC uses your personal data if you subscribe to our general mailing list. It should be read in conjunction with our general privacy notice. 

What personal data we collect

When you subscribe, we collect:

  • your name;
  • your email address;
  • the date, time and method of your sign-up, so we have a record of your consent.

When you receive our emails, we also collect information about whether you opened them and which links you clicked.

How we use your data

We use your data to send you NSPC news, updates, information about our courses and events, and requests for feedback.

Our emails include tracking that tells us whether an email was opened and which links were clicked. This helps us make our emails more relevant. You can prevent it by turning off automatic image loading in your email app.

We will never sell your data or share it with other organisations for their own marketing.

Our lawful basis

What we do

Lawful basis

Sending you mailing list emails

Consent. You give this when you subscribe.

Using email tracking

Consent. You give this as part of your subscription.

Keeping a record of your consent, and keeping your email address on a “do not contact” list after you unsubscribe

Legal obligation. We must be able to show that we had your consent, and make sure we do not contact you again after you have opted out.

Withdrawing consent. You can withdraw your consent at any time by clicking “unsubscribe” in any of our emails or by emailing [email protected]. This does not affect anything we did before you withdrew it. If you object to us using your data for direct marketing, we will always stop.

Who processes your data

We use Brevo to manage our mailing list and send emails. Brevo acts as our data processor under a written agreement and may only use your data on our instructions. Brevo stores data mainly in the EU, which is covered by the UK’s adequacy regulations. Where data is transferred outside the UK or EEA, an appropriate safeguard is in place. For more information, see Brevo’s Privacy Policy.

How long we keep your data

We keep your details for as long as you are subscribed. If you have not opened or clicked any of our emails for two years, we will ask whether you would like to stay subscribed, and remove you if you do not reply.

If you unsubscribe, we will delete your details within one month, except for your email address and a record of your consent and unsubscribe, which we keep on a “do not contact” list so that we do not email you again by mistake.

Your rights and contact details

NSPC Ltd is the data controller for this data. You have the right to access, correct or delete your data, and the other rights set out in our general privacy notice. To exercise them, or if you have any questions, contact our Data Protection Lead, Danny van Deurzen-Smith, at [email protected] or NSPC Ltd, 61–63 Fortune Green Road, London NW6 1DR. You also have the right to complain to the Information Commissioner’s Office.

Our responsibilities 

All staff and students who handle personal data for which NSPC is responsible must follow our Data Protection Policy and any related guidance issued by NSPC or Middlesex University. 

Changes to this notice 

We may update this notice from time to time. The current version, and the date it was last reviewed, is shown at the top of this document and published on the NSPC website.