The Faculty of Pharmaceutical Medicine of the Royal Colleges of Physicians of the United Kingdom (FPM) is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.
It will be updated from time to time, in line with changes to our systems, processes and procedures, so please check this page occasionally to ensure you’re aware of any changes.
What kind of personal data do we collect and how do we use it?
When you request a service from us, for example when you apply for membership, training or examinations, we need to collect information about you. We will only ask for details that are necessary for providing you with the services you have requested. In addition, where appropriate and in accordance with regulatory or legal requirements, we may also collect information related to your gender, diversity information or details of your fitness to practice and/or professional conduct.
To provide the range of membership services for you, we need to process certain information about you such as your name, contact details, qualifications, date of birth and workplace. We will also collect your banking details to process subscription fees if you have opted to pay via direct debit.
Specialty training and qualifications
If you are in training and/or working towards an FPM qualification we need to collect and use information about you, or individuals at your organisation, to provide you with services such as:
- examination entry
- providing you with access to the trainee e-portfolio
- monitoring your progress through training
- providing you with support in your training programme (or assisting another organisation to do so)
- notifying you of content provided by us which is likely to be relevant and useful
If you are connected to FPM as your designated body for revalidation purposes we need to collect and use information about you to provide you with services such as:
- providing you with access to an appraiser, the appraisal system and e-portfolio
- passing on or receiving relevant revalidation and appraisal information from previous and future employers and designated bodies
- meeting our legal and regulatory obligations in reference to the revalidation legislation and national guidance
- notifying you of content provided by us which is likely to be relevant and useful
When you book on to an FPM event we need to collect and use information about you for the purposes of event administration. Your name, organisation and job title may be printed on a name badge or delegate list made available during the event to other delegates, exhibitors and sponsors. We may take photographs during an event for use in publications and/or social media. We will make it clear when we plan to take photographs, so if you don’t want your photograph being used in this way, let a member of FPM staff know when you register at the event.
Consultations, research and surveys
When you contribute to a consultation, research project or survey we may need to collect and use information about you such as your name and contact details. By submitting a contribution, you are consenting to it being shared with the relevant parties, such as an FPM committee or working group, but we will not share your contribution more widely without your express permission.
Prospective members and enquirers
If you are enquiring about how to become a member of FPM or looking for information about a career in pharmaceutical medicine we need to collect and use information so that we can supply such information directly to you by post, email or telephone.
We need a small amount of personal data from our suppliers such as contact details of relevant individuals for the purposes of administering contracts. We also need other information such as bank details so that we can pay for the services provided (if this is part of the contractual arrangements between us).
How do we collect your personal data?
There are two main ways in which we collect your personal data, either directly from you or from third parties. You may provide personal data to us in a number of ways. These may include:
- directly via our website (www.fpm.org.uk) by entering your details through the MYFPM member area
- providing information via on-line forms, surveys or questionnaires
- collecting your data through a contractual or commercial relationship with you e.g. for membership subscriptions or attending an event
- via a form which could be online as part of our website or a form provided to us as hard copy or electronically, for example an application form as part of the membership registration process
- emailing your CV to us as part of an application process or to apply for a voluntary appointment
Personal data may be given to us through another organisation with which you have registered and we may be required to process that data to fulfil services that you expect of us. This could include one of the following:
- via a regulatory body such as the General Medical Council
- via another authorised body with whom joint education or professional development takes place
- via organisations with whom there is a sharing of registration for events or activities
How is your information used?
We will process any of your personal data, in accordance with our obligations under applicable data protection laws and regulations, for the following reasons:
- to provide you with the services you have requested
- to comply with applicable laws and regulations
- for administrative purposes
- to assess enquiries
- to provide you with information about us and our services
Who do we share your personal data with?
We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data to comply with any legal obligation, or to enforce or apply any agreements; or to protect the rights, property, or safety of FPM, or others. This includes exchanging information with other companies and organisations to comply with statutory regulations as well as with those organisations with whom you and we have reciprocal agreements for providing services for education or professional development.
We will also pass your information to our third-party service providers, this includes our accountants, auditors and IT support provider. Where we use third-party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own purposes.
Protecting your data
We will take all appropriate technical and organisational steps to protect the confidentiality, integrity, availability and authenticity of your data, including when sharing your data within our organisation and with authorised third parties.
We will make appropriate contact with you to provide the agreed services. We will also contact you for marketing purposes where we believe you may have a legitimate interest in the information we are providing. You have a right at any time to stop us from contacting you for marketing purposes and you can change your marketing preferences at any time by emailing firstname.lastname@example.org.
Cookies are small pieces of information sent by a website to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual.
Types of cookie used by FPM
Third party cookies are set by another website, for example we use a third-party analytics company, Google Analytics, who set their own cookie to perform this service.
Session Cookies are stored only temporarily during a browsing session and are deleted from the user’s device when the browser is closed.
Persistent cookies are saved on your computer for a fixed period (usually a year or longer) and are not deleted when the browser is closed. They are used where we need to know who you are for more than one browsing session. For example, we use this type of cookie to store your preferences, so that they are remembered for the next visit. They are used on the main FPM website, Revalidation e-portfolio and CPD e-portfolio.
To provide personalised services to individual users, to improve your user experience by enabling the website to ‘remember’ you, either for the duration of your visit (using a ‘session cookie’) or for repeat visits (using a ‘persistent cookie’) and to help us to monitor and improve the services we offer.
For more information about cookies and managing them, visit http://www.aboutcookies.org.uk, this includes information about how they can be disabled in most commonly used browsers. However, you should be aware that disabling certain cookies may cause the website not to function properly.
Transferring information out of the European Economic Area (EEA)
In some circumstances your information may be transferred outside the EEA. For example, this may happen if our servers, or the servers of our service providers, are located in a country outside of the EEA. These countries may not have similar data protection laws to the UK. By submitting your personal data, you are agreeing to this transfer, storing or processing. If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy notice.
If you use our services while you are outside the EEA, your information may be transferred outside the EEA to provide you with those services, for example if you attend an FPM event or an exam held outside of the EEA.
Individuals are provided with legal rights governing the use of their personal data. These rights are known as individual rights under the General Data Protection Regulation.
The following list details these rights:
- the right to be informed about the personal data being processed
- the right of access to your personal data
- the right to object to the processing of your personal data
- the right to restrict the processing of your personal data
- the right to rectification of your personal data
- the right to erasure of your personal data
- the right to data portability (to receive an electronic copy of your personal data)
- rights relating to automated decision making including profiling
Further information on your individual rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
You can exercise your individual rights at any time. However, there may be some situations where we may be unable to fully meet your request, for example if you make a request to delete all your personal data, we may be required to retain some data for taxation, regulatory, statutory or other legitimate purposes.
Right to complain
If you are dissatisfied with any aspect of the way in which we process your personal data please contact us. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO). The ICO may be contacted via its website which is https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113
How to contact us?
Any questions regarding how we collect, store or process data should be sent by email to email@example.com or by post to:
The Data Protection Officer
19 Angel Gate
326a City Road
London EC1V 2PT
See also our Terms and Conditions