National Institute for Health and Care Research

Privacy notice

AIM includes a team of researchers and clinicians with the goal of contributing to the development of more targeted, effective and efficient treatments for children and young people. To do this, our work focuses on facilitating a greater understanding of the mechanisms that drive mental health difficulties.

The AIM resource platform provides researchers and clinicians with research-related resources that facilitate treatment development using robust methods, and access to a library of measures frequently used to assess mechanisms of mental health in children and young people. The platform is built to be a source of knowledge exchange and therefore a resource that is continually being added to, not only by the AIM team but other researchers, clinicians and those who would like to share their knowledge by contributing resources and measures to the site.

Users are invited to become members of the AIM community. Membership provides access to the facility to add a resource and/or new measure to the platform and the option to be added to a membership mailing list to be informed of news and upcoming events. Users can also request to be added to the mailing list without becoming a member of the AIM community. For security and communication purposes the membership form and mailing list request form asks for your name, email address and telephone number. Members will not be contacted via telephone, this information if for two-factor authentication only. The mailing list asks for your name and email address only. This privacy notice explains in more detail how we use the personal data we collect from you.

Our project is part of the Mental Health in Development project based at the University of Oxford. We adhere to the policies and procedures of the University of Oxford.

What data do we collect?

We collect the following data (membership only): Name, email address, telephone number, organisation (if applicable), region and role

How do we collect your data?

Your data is collected by us when you complete the relevant online form (membership, mailing list)

How will we use your data?

We would like to use your data to get in touch with you via email to confirm the details you have provided and, if applicable, clarify any content we may be unsure of and if you request to be added to the mailing list send you information on news and details of upcoming events.

What is our lawful basis for processing your data?

Legitimate interest is the lawful basis for processing your data. Processing this data allows communication between the AIM team and AIM community members and individuals interested in receiving news and updates.

How can you contact us about your data?

At any point you have the right to ask us about what data we have and how we use it. You can also update your personal information and, if you wish, you ask for any identifiable data to be erased. If you wish to discuss any aspect of the data we hold and how we process it please contact us by using our dedicated email address aim@psy.ox.ac.uk.

How long will we store your data?

We will store your personal information until you request that we remove it from our database. You can do this at any point by emailing us aim@psy.ox.ac.uk

Who has access to your data?

Access to your data within the University will be provided to those who need to view it as part of their work in carrying out the purposes described above.

Third party processors are required to take appropriate security measures to protect your data in line with our policies. We do not allow them to use your data for their own purposes. We permit them to process your data only for specified purposes and in accordance with our instructions. Third party processors include:

  • Minervation Ltd
  • AWS
  • Atlas Mongo
  • Twilio
  • Mailgun

Where we share your data with a third party, we will seek to share the minimum amount necessary.

How will we keep your data safe?

All the information we collect will be kept secure and in confidence. Personal data will be stored in a restricted access folder on the University of Oxford provided storage system (Nexus 365 OneDrive for Business) and in the website login system.

We are using three trusted platforms to store and manage our data: Amazon Web Services (AWS) and MongoDB Atlas and Krystal Hosting Limited. These reputable providers are used by companies all over the world, from small startups to big corporations like Netflix and Adobe and comply with data protection legislation.

Here’s how they help keep your data safe:

  1. Encrypted Data
    Your data is locked up with strong encryption—kind of like putting it in a super secure digital safe. This protects it whether it’s sitting on a server or being sent from one place to another.
  2. Access Controls
    Only people with the right keys (permissions) can access the data. We use strict rules to make sure only the right team members and systems can see or touch your information.
  3. Regular Backups
    The data is backed up regularly. So even if something unexpected happens, like a system crash, we can quickly restore everything and minimise data loss.
  4. Monitoring & Alerts
    Both AWS and MongoDB Atlas constantly monitor for unusual activity. Krystal Hosting monitors traffic to the website in a similar way. If something strange happens—like someone trying to break in or compromise system software—they send alerts immediately so we can act fast. The website system is regularly checked for updates, patches and security upgrades.
  5. Compliance Standards
    These platforms follow international security standards (like GDPR, SOC 2, HIPAA depending on the setup), which means they’re built to meet strict privacy and security rules.

Who is responsible for keeping your data safe?

The AIM research team will be responsible for the day-to-day handling of your data. The AIM team is based in the Departments of Experimental Psychology, Psychiatry and Education at the University of Oxford. If you have any questions about how we keep your data safe in the first instance please contact the team using aim@psy.ox.ac.uk

The University of Oxford is the data controller with respect to data we collect as part of website activities. Further information about your rights with respect to your personal data, and contact details should the AIM team not be able to help, is available from the University’s Information Compliance website at https://compliance.admin.ox.ac.uk/individual-rights or by emailing data.protection@admin.ox.ac.uk.

Privacy policies on other websites and for related research resources

Our website contains links to other websites and information regarding research-related resources. Our privacy policy applies only to our website. This Privacy Notice was created on 18th May 2025, updated on 15th October 2026 and will be reviewed once every 48 Months.

Back to Top