LITE Privacy Notice

Introduction

LITE is a small medium enterprise that forms part of the LSTM subsidiary company iiDiagnostics which is owned and managed by the LSTM Group. LITE tests insecticide-based vector control products for commercial and academic partners using established World Health Organisation (WHO) testing methods against a variety of mosquito colonies.

What information do we hold?

Most of the information we hold, starts as a result of:

  • Employment
  • Visiting the facility (short-term research activities, contractors and facility tours)
  • An individual directly contacting us wanting to use one of our services.

Personal information that we might hold within LITE includes the likes of name, address, phone number, signatures, email address, etc. We might also hold sensitive personal data (referred to as Special Categories of data under Data Protection legislation) including ethnicity, religion, sexual orientation, disabilities, medical conditions, etc.

Why do we have it and what do we use it for?

We have a Statutory and Legal requirement to provide the above services under our membership to the OECD (Organisation for Economic Co-operation), Human Tissue Act 2004 and the Data Protection Act 2018, UK GDPR and the Data (Use and Access) Act 2025. To deliver these we need to collect and use personal information of those using or affected by these services.

If you access our services then the requirement mentioned above will be our lawful basis for collecting and using your personal data, as we can’t provide you with the service without it.

In a small number of cases, we will process personal data solely on the basis of consent, such as where you might opt in to receive email updates or marketing details about certain services. This will be clearly explained when you sign-up to that service.

Additionally, we collect and use information in line with our requirements as an employer (recruitment, personnel information, payroll and pensions etc).

Whenever we use information, we always limit this to only the details that are needed and we ensure that it is used safely and securely. We require anyone we share information with, or who uses it on our behalf, to do so too. All our staff receive training on data protection and information security.

All of the personal information we hold is kept securely on servers internal to LSTM and servers external to LSTM within the UK as well as a physical archive as governed by LITSOP041. There is also no automatic decision-making when your personal information is processed.

How is your information collected and processed?

We collect the data that staff and visitors personally input into logbooks and into any documentation required to carry out testing in LITE.

Appropriate technical and organisational measures are applied to keep personal data safe including limiting access to data to those who have a business need to access it within LSTM.

When LSTM uses a supplier, appropriate due diligence is undertaken to ensure that they also have appropriate security measures in place.

In some circumstances study information (excluding personal data) held in LITE that is generated as a result of a study can be sent outside the UK or EEA. This is dependent upon the origins of LITE’s Clients, and therefore the information would be shared to the country where the client is based. Appropriate safeguards are in place to ensure adequate levels of protection

Who we share information with and why?

We share information with a range of different types of people and organisations depending on the service being provided or the statutory requirement that we have to comply with. The types of recipients include:

  • Service users
  • Local government organisations
  • Our contractors: organisations that we commission to provide goods and services e.g. iPassport (Genial)
  • Education establishments such as schools, colleges and early years settings e.g. LSTM, In2Science
  • Examining bodies e.g. LSTM
  • Regulatory bodies, investigators and ombudsman (for example MHRA and Local Govt Ombudsman)

For how long do we keep hold of your information?

We only keep information for as long as it is needed. This will differ according to what information we hold and its purpose.

For example:

  • Employee Training Files
  • 8 years from date of departure
  • Study Files and associated documentation
  • Non GLP – 6 years from completion
  • GLP – 8 years from completion
  • Validations
  • Indefinite

It will be based on either a legal requirement (where a law says we have to keep information for a specific period of time) or accepted business practice.

Your information forms part of a record of research activity that was undertaken at LITE and will be archived to enable audit and analysis. The generated data and associated supporting documents are retained and managed according to written, version-controlled procedures, in particular:

LITSOP005 Archiving of electronic and paper documents

LITSUP133 Retention Schedule

Your rights and how to find out what information we hold about you

UK GDPR gives individuals the following rights, it should be noted that these rights are not an absolute:

The right to be informed (ie to be told what personal information we hold about you)

The right of access (ie to receive a copy of the personal data we hold)

The right to rectification (to request that any incorrect information we hold be amended)

The right to erasure (to request that we delete information we hold about you)

The right to restrict processing (eg. to restrict who we share your personal information with)

The right to data portability (the right to request a copy of your information in an appropriate format so that it can be easily uploaded elsewhere)

The right to object (to make a complaint about how we use your information)

Rights in relation to automated decision making and profiling (we need to tell you if any automated processes make key decisions about you)

How to contact us

If you would like further information about the LITE Laboratory, please contact the Test Facility Manager on liteclient@lstmed.ac.uk, 0151 705 3105, or by post to:

Test Facility Manager
iiDiagnostics – Liverpool Insect Testing Establishment (LITE)
Accelerator Building 4th Floor
Daulby Street
Liverpool
L7 8XZ
United Kingdom

If you would like to make an access request for your personal data, please contact the LSTM Data Protection Officer dataprotection@lstmed.ac.uk, 0151 705 3200, or by post to:

Data Protection Officer
Liverpool School of Tropical Medicine
Pembroke Place
Liverpool
L3 5QA
United Kingdom

How to complain

If you are unhappy with how your personal data is being used, please first complain to the Data Protection Officer using the contact details above. If you continue to have concerns, you can contact the Information Commissioner:

Helpline: 0303 123 1113

Website: Make a complaint | ICO