1. Introduction

This policy relates to the privacy practices of the Enigma App (“the App”) under the auspices of the University of Southampton (southampton.ac.uk) (“the University”).

2. General Statement

The University fully respects your right to privacy and actively seeks to preserve the privacy rights of those who share personal data through the App.

3. How We Use Your Personal Data

We collect and process personal data based on the following legal grounds:

• Consent: You may provide personal data voluntarily, such as signing up for a mailing list.
• Contract: We process data when necessary for a contract.
• Legitimate Interests: We collect technical data (e.g., IP address, browser type) to enhance security and improve user experience.

Data is handled in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1998 to 2018.

4. How Long We Keep Your Data

We store data only as long as necessary, following the University’s Records Management Policy.

5. Cross-Border Data Transfers

Some third-party contractors may process data outside the UK or the EEA. In such cases, we ensure compliance through legally approved mechanisms such as the Standard Contractual Clauses.

6. Links to Other Websites

The University is not responsible for external sites linked from the App. Their privacy practices may differ.

7. Your Rights

You have the following rights regarding your personal data:

• Access and receive copies of your data.
• Correct inaccuracies in your personal information.
• Request deletion or restriction of your data.
• Object to processing under certain conditions.
• Withdraw consent (where applicable).
• Request data portability.

To exercise your rights, contact:

Information Governance and Compliance Team
University of Southampton, Building 37 Room 4015, University Road, Highfield, Southampton, SO17 1BJ
Email: data.protection@southampton.ac.uk

8. Queries or Complaints

If you have concerns, you may contact the University’s Information Governance and Compliance Team (see above) or lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Changes to This Privacy Policy

This policy may be updated periodically. Please check this page for the latest version.