Privacy Policy

Last updated: February 2026

BISSH – British Institute of Skills and Simulation in Healthcare (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

BISSH is the data controller responsible for your personal data. Our contact details are available on our Contact page.

2. Personal data we collect

We may collect:

  • Identity data (e.g. name, job title, organisation)
  • Contact data (e.g. email, phone, address)
  • Technical data (e.g. IP address, browser type, device information)
  • Usage data (e.g. how you use our website and services)
  • Marketing and communications preferences

We may also process special category data (e.g. health-related data) only where necessary for the delivery of our healthcare simulation and training services, with an appropriate lawful basis and safeguards.

3. How we use your data

We use your personal data to:

  • Provide our services, including skills and simulation in healthcare
  • Respond to enquiries and manage your relationship with us
  • Send relevant updates, events and resources (where you have agreed)
  • Improve our website and services
  • Comply with legal and regulatory obligations

4. Lawful basis

We process personal data only where we have a lawful basis under UK GDPR: consent, contract, legal obligation, vital interests, public task, or legitimate interests (where these are not overridden by your rights).

5. Data retention

We keep your data only for as long as necessary for the purposes set out in this policy or as required by law. Retention periods are documented in our internal data retention schedule.

6. Your rights

Under UK GDPR you have the right to: access your data; rectification; erasure (“right to be forgotten”); restrict processing; data portability; object to processing; and to withdraw consent where applicable. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK: ico.org.uk.

7. Data security

We put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.

8. Sharing and international transfers

We do not sell your data. We may share data with trusted service providers (e.g. hosting, email) under contracts that require them to protect your data. If we transfer data outside the UK, we ensure appropriate safeguards are in place as required by UK law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will be revised. Please review this page periodically.

10. Contact

For any questions about this Privacy Policy or your personal data, please contact us via our Contact page at www.bissh.org.uk or by email at the address given there.