National Institute for Health and Care Research

Privacy notice

AIM includes a team of researchers and clinicians with the goal of contributing to the development of more targeted, effective and efficient treatments for children and young people. To do this, our work focuses on facilitating a greater understanding of the mechanisms that drive mental health difficulties such as emotion regulation, worry, and repetitive thinking. A key aspect of this work is information and access to new and existing questionnaires that are frequently used to assess these mechanisms.

The AIM website provides researchers and clinicians with an information resource specialising in these questionnaires. It enables researchers and clinicians to source key information on the questionnaires and their application.

The collection of questionnaires is designed to work as a ‘living library’ with questionnaires being continually added to the library, not only by the AIM team but other researchers, clinicians and those who would like to share their knowledge by contributing relevant information on existing questionnaires and/or by adding new questionnaires to the library.

Contributions to the library are made by using Microsoft Forms. By completing the form, an account is created. The account is for communication and verification purposes. For security the account will require a log in. The form therefore asks for some personal details. Details we request are your name, email address and telephone number.

This privacy notice explains how we use the personal data we collect from you when you create an account.

Our project is part of the Mental Health in Development project based at the University of Oxford. We adhere to the policies and procedures of the University of Oxford.

What data do we collect?

We collect the following data: Name, email address, and telephone number.

How do we collect your data?

Your data is collected by us via in the online form you complete when submitting content to the library.

How will we use your data?

We would like to use your data to get in touch with you via email to confirm the details you have provided.

We would like to use your data to create a two-factor authentication log in.

What is our lawful basis for processing your data?

Legitimate interest is the lawful basis for processing your data. Processing this data allows interested individuals to submit relevant information and/or new questionnaires to be included in the library. It will allow a two-factor authentication log in and it will allow communication between the AIM team and contributors to the library.

How can you contact us about your data

At any point you have the right to ask us about what data we have and how we use it. You can also update your personal information and, if you wish, you can close your account. At this point all identifiable information will be destroyed. If you wish to discuss any aspect of our data processing, please contact us by using our dedicated email address aim@psy.ox.ac.uk.

How long will we store your data?

We will store your personal information until you request to close your account. You can do this at any point by emailing aim@psy.ox.ac.uk.

Who has access to your data?

Access to your data within the University will be provided to those who need to view it as part of their work in carrying out the purposes described above.

Third party processors are required to take appropriate security measures to protect your data in line with our policies. We do not allow them to use your data for their own purposes. We permit them to process your data only for specified purposes and in accordance with our instructions. Third party processors include:

  • Bitjam Limited
  • Minervation
  • AWS
  • Atlas Mongo
  • Twilio
  • Mailgun

Where we share your data with a third party, we will seek to share the minimum amount necessary.

How will we keep your data safe?

We’re using two trusted platforms to store and manage our data: Amazon Web Services (AWS) and MongoDB Atlas. Both are used by companies all over the world, from small startups to big corporations like Netflix and Adobe.

Here’s how they help keep your data safe:

  1. Encrypted Data
    Your data is locked up with strong encryption—kind of like putting it in a super secure digital safe. This protects it whether it’s sitting on a server or being sent from one place to another.
  2. Access Controls
    Only people with the right keys (permissions) can access the data. We use strict rules to make sure only the right team members and systems can see or touch your information.
  3. Regular Backups
    The data is backed up regularly. So even if something unexpected happens, like a system crash, we can quickly restore everything and avoid data loss.
  4. Monitoring & Alerts
    Both AWS and MongoDB Atlas constantly monitor for unusual activity. If something strange happens—like someone trying to break in—they send alerts immediately so we can act fast.
  5. Compliance Standards
    These platforms follow international security standards (like GDPR, SOC 2, HIPAA depending on the setup), which means they’re built to meet strict privacy and security rules.

Who is responsible for keeping your data safe?

The AIM research team will be responsible for the day-to-day handling of your data. The AIM team is based in the Departments of Experimental Psychology, Psychiatry and Education at the University of Oxford. If you have any questions about how we keep your data safe in the first instance please contact the team using aim@psy.ox.ac.uk

The University of Oxford is the data controller with respect to data we collect as part of website activities. Further information about your rights with respect to your personal data, and contact details should the AIM team not be able to help, is available from the University’s Information Compliance website or by emailing data.protection@admin.ox.ac.uk.

Privacy policies on other websites

Our website contains links to other websites and information regarding questionnaire availability. Our privacy policy applies only to our website.

This Privacy Notice was created on 13th May 2025 and will be reviewed once every 48 Months.

Back to Top