Chatham House (The Royal Institute of International Affairs) and Chatham House Enterprises Limited ("we") are committed to protecting your privacy and being transparent about what information we may hold about you.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you or that you provide to us is collected and processed by us, whether online (through “our Site”: www.chathamhouse.org), via telephone, email, in letters or in any other correspondence or from third parties.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

This privacy and cookies policy covers the following:

Chatham House, the Royal Institute of International Affairs, is an independent policy institute based in London. Our mission is to help build a sustainably secure, prosperous and just world.

Chatham House is comprised of both a charity and a trading company. In this policy wherever you see the words ‘we’, ‘us’ or ‘our’, it refers to both our charity and/or our trading company.

Our trading company is wholly owned and controlled by our charity. Any information we collect may be used by both our entities. Our trading company exists as a separate legal entity so that we can hold our conferences and provide some limited consulting services.

  • Chatham House (The Royal Institute of International Affairs), registered charity no. 208223. Our main trading address is 10 St James’s Square, London SW1Y 4LE. Our VAT number is 653 2181 53.
  • Chatham House Enterprises Limited, registered company no. 2979061. Our main trading address is 10 St James’s Square, London SW1Y 4LE. Our VAT number is 653 2181 53.

Both our charity and our trading company are registered as data controllers with the Information Commissioners’ Office under the Data Protection Act 1998:

  • Chatham House (The Royal Institute of International Affairs): registration number Z1808639.
  • Chatham House Enterprises Limited: registration number Z1808673.

We take great care to comply with the requirements of the UK Data Protection Act 1998 (“The Act”), the Privacy and Electronic Communications Regulation 2003 and the General Data Protection Regulation 2018, all relating to the personal information you supply to us.

We may collect and process the following data about you:

Personal Data:

Information that you provide by filling in forms on our Site. This includes information provided at the time of registering to use our Site, subscribing to our service, posting material or requesting further services and might include the following:

  • First name
  • Last name
  • Gender
  • Date of birth
  • Email (for login)
  • Address
  • Postcode
  • Telephone number

We may also ask you for information when you report a problem with our Site.

If you contact us, we may keep a record of that correspondence.

Information relating to your area of expertise as a result of communicating with us.

We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

Information that we obtain from you when taking part in an event or making a donation may, in addition to the above, include credit card, debit card or bank account details, but such information will be stored only by our payment provider, Worldpay and will not be held by us.

Sensitive Personal Data:

Information that we obtain from you when you apply for a role at Chatham House or have taken up employment with us. This may include, subject to your prior written consent, sensitive information such as:

  • Racial or ethnic origin
  • Religious beliefs
  • Physical and mental health details
  • Trade union membership
  • Sexual orientation
  • Commission of criminal offences and/or involvement in criminal proceedings

Information we get from your use of our Site and services:

In addition to cookies (for which see the section below entitled What Cookies We Use), we may also collect details about your usage of the Site. Those may include, but are not limited to:

  • Traffic data
  • Location data
  • Weblogs and other communication data (whether this is required for our own purposes or otherwise)
  • The resources that you access, such as text journals, newspaper articles or our library catalog

Information from third parties:

We may also receive information about you from third party event co-organizers or project funders. This can include information such as:

  • Your name
  • Postal address
  • Email address
  • Emergency contact details
  • Dietary requirements
  • Telephone number
  • Whether you are a tax payer so that we can claim Gift Aid
  • What browser you are using
  • Your IP address
  • The computer operating system you are using

Where you have consented or a rule of law applies whereby your consent is not required, your Data will be automatically collected when you sign up to our Services.

We may use information held about you in the following ways:

  • to ensure that content from our Site is presented in the most effective manner for you and for your computer
  • to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
  • to carry out our obligations arising from any contracts entered into between you and us, for example if you take up employment with us. If you unsuccessfully apply for a job at Chatham House, your personal information will be held for 12 months after the recruitment exercise has been completed and will then be destroyed or deleted
  • to allow you to participate in interactive features of our service, when you choose to do so
  • to invite you to events ran by us or our co-partners
  • to administer your donations or support your fundraising, including processing Gift Aid (we do not store credit card details)
  • to notify you about changes to our service
  • to fulfil orders for goods and services
  • to administer your membership
  • to carry out in-house research and analysis, for example data mining, marketing statistics or equal opportunities monitoring
  • to approach you for charitable funding where you have consented to be contacted for such purposes
  • to monitor customer traffic patterns, Site usage and related Site information in order to optimize your use of our Site; data collected in this way will be aggregated and anonymized and passed to a reputable third-party, but these statistics will include no information personally identifying you

You can opt out of your data being used for any of the Purposes of Use by accessing our Preference Centre.

The Purposes(s) of Use in relation to:

  • your Personal Data is lawful because it is necessary for us to hold and use your Personal Data so that we can perform our obligations under the contract we have entered into with you
  • your Sensitive Personal Data is lawful because you have given us your explicit consent to process your data in this way when applying for a role at Chatham House or if you have taken up employment with us
  • usage Data and Third Party Data is lawful because it is necessary for the purposes of legitimate interests pursued by us and/or our web developers in order to keep the Site up to date, organize events and functions and provide additional services to our users from time to time

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of our Site. The table below explains the cookies we use and why. We do not do this to track individual users or to identify them, but to gain useful knowledge about how the Site is used so that we can keep improving it for our users.

The law states that we can store cookies on your machine if they are essential to the operation of the Site but that for all others, we need your permission to do so.

You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However, in a few cases some of our Site features may not function as a result.

If you do not wish to receive cookies from us or any other website, you can turn cookies off on your web browser: please follow your browser provider’s instructions in order to do so. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org, www.allaboutcookies.org or www.civicuk.com/cookie-control/browser-settings

DomainCookie NamePurposeValidity Length

.chathamhouse.org

_ga

This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.

1 Year

 

_gid

This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.

1 Day

 

_gat

This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.

0 Days

 

_gat_UA-9108403-1

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

0 Days

 

__unam

This cookie is usually associated with the ShareThis social sharing widget placed in a site to enable sharing of content across various social networks. It counts clicks and shares of a page.

9 Months

.facebook.com

fr

Encrypted Facebook ID and Browser ID, this is used by Facebook for the purpose of advertisement.

3 Months

 

datr

This cookie identifies the browser connecting to Facebook. It is not directly tied to individual Facebook the user. Facebook reports that it is used to help with security and suspicious login activity, especially around detection of bots trying to access the service. Facebook also say the behavioural profile associated with each datr cookie is deleted after 10 days. This cookie is also read via Like and other Facebook buttons and tags placed on many different websites.

2.5 Years

 

locale

Remembers display locale when user logs out, for returning language and location preferences

6 Months

 

lu

Used to manage the login process, remembers user on return visit if they choose to stay logged in.

2.5 Years

 

x-src

Targeting/advertising

6 Months

.sharethis.com

 

This domain is owned by Share This. The main business activity is: ShareThis provides web widgets that site owners embed into their pages or other content, to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted, behavioural advertising.

 

 

__stid

This cookie is used by Share This to provide social sharing capabilities.

1 Year

 

__uset

Used to determine if a user has received other cookies from ShareThis, to prevent repetition within 8 hours

1 Day

 

pxcelPage_c010

There is not yet any general information about this cookie based on its name only.

1 Week

 

pxcelBcnLcy

 

cdn.syndication.twimg.com | This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations, that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies.

0 Days

.twitter.com

__utma

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It it used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customised by website owners

3.5 Years

 

__utmb

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30 minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor.

1.5 Years

 

__utmz

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour measure of site performance. This cookie identifies the source of traffic to the site - so Google Analytics can tell site owners where visitors came from when arriving on the site. The cookie has a life span of 6 months and is updated every time data is sent to Google Analytics.

2 Years

 

auth_token

Twitter does not currently provide information on the use of specific cookies.

17 Years

 

guest_id

Twitter does not currently provide information on the use of specific cookies.

3.5 Years

 

remember_checked

Twitter does not currently provide information on the use of specific cookies.

7 Years

 

remember_checked_on

Targeting/advertising

7 Years

 

secure_session

Twitter does not currently provide information on the use of specific cookies.

17 Years

 

twll

Twitter does not currently provide information on the use of specific cookies.

7 Years

cdn.syndication.twimg.com

 

 This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies.

 

 

lang

Used to store Twitter language preferences, potentially to serve up content in the stored language.

0 Days

global.ib-ibi.com

 

Its purpose is unknown, but the cookies used and sites found on indicate a purpose of user tracking across domains.

 

 

ASP.NET_SessionId

General purpose platform session cookie, used by sites written with Microsoft .NET based technologies. Usually used to maintain an anonymised user session by the server.

 

.crwdcntrl.net

 

This domain is owned by Lotame. The main business activity is: Data Management Platform - Targeting /Advertising

 

 

_cc_cc

Targeting/advertising

9 Months

 

_cc_aud

Targeting/advertising

9 Months

 

_cc_id

Targeting/advertising

9 Months

 

_cc_dc

Targeting/advertising

9 Months

.rfihub.com

 

This domain is owned by Rocketfuel. The main business activity is: Advertising

 

 

euds

Targeting/advertising

0 Days

 

smd

Targeting/advertising

1 Year 26 Days

 

rud

Targeting/advertising

1 Year 26 Days

 

euds

Targeting/advertising

1 Year 26 Days

.ctnsnet.com

 

This is a tracking domain.

 

 

opt

Targeting/advertising

1 Year

 

cid

Targeting/advertising

1 Year

.adsrvr.org

 

This domain is owned by TheTradeDesk. The main business activity is: Ad Serving Platform

 

 

TDID

Targeting/advertising

1 Year

 

TDCPM

Targeting/advertising

1 Year

.exelator.com

 

The main business activity is: Advertising Data Aggregation

 

 

EE

Targeting/advertising

4 Months

 

ud

Targeting/advertising

4 Months

 

hsk_350

Targeting/advertising

4 Months

.weborama.com

 

Weborama is an online marketing technology company that offers ad analytics and behavioral targeting services.

 

 

wui

Targeting/advertising

3 Months

 

wam-sync

Targeting/advertising

1 Week

.weborama.fr

 

Targeting/advertising

 

 

AFFICHE_W

Targeting/advertising

3 Months

.agkn.com

 

This domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.

 

 

u

Targeting/advertising

1 Year

 

uuid

Targeting/advertising

5 Years

 

ab

Targeting/advertising

1 Year

.s.thebrighttag.com

 

This domain is owned by Signal Inc. a US based marketing technology company.

 

 

bt3

Targeting/advertising

1 Year

 

btv3.gcms

Targeting/advertising

6 Months

 

btv3.X7aCaxG

Targeting/advertising

1 Month

.semasio.net

 

This domain is owned by Semasio, a German business specialising in profiling and behavioural targeting of consumers.

 

 

SEUNCY

Targeting/advertising

6 Months

ibeu2.mookie1.com

 

This domain is owned by Media Innovation Group, as US based digital marketing business. The main business focus is providing targeted online marketing services.

 

 

ASP.NET_SessionId

General purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.

432 Years

 

ibkukiuno

Targeting/advertising

1 Year

 

ibkukinet

Targeting/advertising

1 Year

.doubleclick.net

 

Doubleclick is a business owned by Google that makes it money from online advertisers and publishers.

 

 

test_cookie

Targeting/advertising

0 Days

 

id

Targeting/advertising

2 years

 

IDE

Targeting/advertising

2 Years

.tidaltv.com

 

This domain is owned by Videology. The main business activity is: Advertising

 

 

sync-his

Targeting/advertising

1 Year

.go.affec.tv

 

This domain is owned by Affectv. The main business activity is: Advertising/Behavioural Targeting Technology

 

 

ck

Targeting/advertising

5 Years

 

oo

Targeting/advertising

5 Years

 

pt

Targeting/advertising

5 Years

www.entitytag.co.uk

 

There is not yet any general information about this host domain.

 

 

json

There is not yet any general information about this cookie based on its name.

2 Years

.adnxs.com

 

Adnxs.com is run by AppNexus, a company that provides technology, data and analytics to help companies buy and sell online display advertising.

 

 

sess

Targeting/advertising

1 Day

 

uuid2

Targeting/advertising

3 Months

.dsp.io

 

There is not yet any general information about this host domain.

 

 

eicm

There is not yet any general information about this cookie based on its name.

1 Year

 

EXID

There is not yet any general information about this cookie based on its name.

1 Year

 

IOID

There is not yet any general information about this cookie based on its name.

1 Year

.tapad.com

 

This domain is owned by Tapad Inc. a US based company that provides technology to track users across devices to enhance targeting capabilities.

 

 

TapAd_TS

Targeting/advertising

1 Month

 

TapAd_DID

Targeting/advertising

1 Month

.eyeota.net

 

This domain is owned by Eyeota, a global company specialising in audience data to enable targeting of advertising based on visitor profiling.

 

 

mako_uid

Targeting/advertising

1 Year

.ml314.com

 

This domain appears to be connected to a company called Bombora, a USA based audience targeting and intelligence business.

 

 

u

Targeting/advertising

0 Days

 

pi

Targeting/advertising

1 Year

 

tp

Targeting/advertising

2 Weeks

 

AWSELB

Targeting/advertising

0 Days

match.rundsp.com

 

This domain is owned by RUN, a USA based company providing programmatic advertising technology focussed on mobile platforms.

 

 

RUN_ID

Targeting/advertising

3 Months

.crsspxl.com

 

The ownership of this domain is hidden behind a privacy registration service. We therefore assume that the purpose of the cookies set by it is in the most privacy intrusive category.

 

 

uuid

Targeting/advertising

2 Months

tag.crsspxl.com

 

Targeting/advertising

 

 

AWSELB

Targeting/advertising

0 Days

.bluekai.com

 

This domain is owned by Blue Kai.

 

 

bkdc

Targeting/Advertising

6 Months

 

bku

Targeting/Advertising

6 Months

.rlcdn.com

 

This domain is owned by Live Ramp Inc, providers of a platform for targeted marketing and profiling.

 

 

ck1

Targeting/Advertising

6 Months

 

rlas3

Targeting/Advertising

6 Months

 

rtn1-z

Targeting/Advertising

6 Months

.rfihub.com

 

This domain is owned by Rocketfuel. The main business activity is: Advertising

 

 

euds

Targeting/Advertising

0 Days

 

ruds

Targeting/Advertising

0 Days

 

rud

Targeting/Advertising

13 Months

 

eud

Targeting/Advertising

13 Months

.nexac.com

 

This domain is owned by Datalogix. The main business activity is: Advertising

 

 

na_tc

Targeting/Advertising

2 Years

 

We aim to ensure that there are appropriate physical, technical and managerial controls in place to protect your Data. Within our offices, all of our staff receive training on handling data security.

Where we use external companies to collect or process data on our behalf, your Data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of support services.

The purpose for such transfers can be a combination of a number of things: the costs of data storage may be lower in countries based outside the EEA; our support teams may be based there (again, usually for reasons of cost; or one of our subsidiary companies which deal with your Data may be based outside of the EEA.

However, we will meet our obligations under the legislation by ensuring that the information has the same protection as if it were being held within the EEA because our hosting company either benefits from the Privacy Shield or has entered into model EU clauses with any sub-processor it uses and based outside the EEA or has established a set of binding corporate rules with its foreign subsidiaries who are based outside the EEA or the Information Commissioner has made a positive finding of adequacy in relation to the territory in which the sub-processor is based and to which your Data may be transferred .

We will take all steps reasonably necessary to ensure that your Data is treated securely as we do and in accordance with this privacy policy.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We may share your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.

We may also share your Personal Information with third parties in the following circumstances:

  • In the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets. In that event, we will attempt to notify you prior to the event and offer you the chance to cease use of the Services and remove your information from our database where we are able to contact you and you require its deletion. In any event, we will endeavour to ensure that your rights and freedoms in respect of the processing of your personal data are adequately and appropriately protected
  • If we or substantially all of our assets are acquired by a third party, in which case Personal Data held by us about you will be one of the transferred assets
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Chatham House (The Royal Institute of International Affairs), our customers, or others. This includes exchanging information with other companies and organisations for the purposes of terrorism, fraud protection and credit risk reduction
  • When acting as agents and data processors carrying out work on our behalf such as fulfilment companies, event partners or program funders. Where we enter into a relationship with an external party, any such arrangements will be subject to a formal agreement between Chatham House and that organization to protect the security of your data
  • Hotels, airlines and travel agencies should Chatham House arrange your travel and accommodation, for example if you are an invited guest speaker for one of our events

The Purposes of transfer of your Data (save in the case of Sensitive Data, where we will have obtained your specific consent to do so for one or more of the Purposes) are lawful because it is necessary for us to hold and use your Personal Data so that we can perform our obligations under the contract we have entered into with you for the Purpose(s).

In the event of any of the above scenarios occurring, we will endeavour to ensure that your rights and freedoms in respect of the processing of your personal data are adequately and appropriately protected.

We will not sell your data to any third party.

Withdrawing your consent

You have the right to ask us not to process your personal data for marketing and donation request purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes.

You can exercise your right to prevent such processing by accessing our Preference Centre.

Our Site may, from time to time, contain links to and from external websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Accessing and managing your personal information

You have the right to request a copy of your Personal Data by making a ‘subject access request’ under The Act and to have any inaccuracies corrected.

You also have the following rights:

  • to request us to erase your Personal Data
  • to request us to restrict our processing of your Personal Data
  • to object to the way in which we are dealing with and processing your Personal Information.

Should you wish to exercise these rights, we will require you to prove your identity with two pieces of approved identification. Please address requests to the Data Protection Officer, Chatham House, 10 St James’s Square, London SW1Y 4LE and we will respond within thirty days of receipt of your written request and confirmed ID.

Please provide as much information as possible about the nature of your contact with us to help us locate your records.

To exercise any of these rights, you should contact our Data Protection Officer at the above address.

If you are not happy about the way in which we have processed or dealt with your information, you can complain to the Information Commissioner’s Office (ICO).

Here, you can find more details on how to complain.

Complaining to the ICO

You have the right to complain to the Information Commissioner’s Office if you think there is a problem with the way we handle your data.

We will hold your personal information on our systems for as long as is necessary to operate the service in accordance with legal requirements and tax accounting rules.

Where your information is no longer required, we will ensure it is disposed of in a secure manner.

We keep our privacy notice under regular review. This privacy notice was last updated on 16 August 2017.

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.

By continuing to use our Site, you shall be deemed to have accepted such changes.

If you have any questions, comments and requests regarding this privacy policy you can email us or write to:

Data Protection Officer,
The Royal Institute of International Affairs
Chatham House
10 St James’s Square
London SW1Y 4LE