Privacy Policy

  1. Privacy Protection
  2. General Data Protection Regulation
  3. Purpose Specifications and Data Collection
  4. Other Data we Collect and What we Do With It
  5. Sensitive Data
  6. Cookie Policy and Marketing
  7. Disclosure Of Your Data
  8. International Transfer Of Your Data
  9. Data Retention
  10. Your Rights Under GDPR
  11. Visitor's Choice
  12. Links to/ from Other Sites
  13. Individual Participation/ Access
  14. Security
  15. Privacy Support
     

1. Privacy Protection

This privacy notice provides you with details of how we collect and process your personal data through your use of our website. The D2N2 Growth Hub is the controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice). We have an appointed Data Quality Officer (DQO) who is responsible for privacy-related matters for us.

If you have any questions about this privacy notice, please contact the DQO using the details set out below.

We have a named DQO and can be contacted using the below details…


Data Quality Officer

Nottingham City Council

Loxley House

Nottingham

NG2 3NG


As part of GDPR, it is important that the information we hold about you is accurate and up to date. If you have any changes to your data please let us know by contacting our DQO or our information team: info@d2n2growthhub.co.uk

2. General Data Protection Regulation

By registering for the D2N2 Growth Hub programme, you acknowledge and agree that the data contained within can be held by the D2N2 Growth Hub partners (Nottingham City Council, East Midlands Chamber, Chesterfield Borough Council, Derby City Council, Derbyshire County Council, Derbyshire Dales District Council, Erewash Partnership and Nottinghamshire County Council) and used to provide the support services available through this project, as well as marketing information about the project. Please inform us if any commercially sensitive information should not be included.

Any information recorded here may be shared with other project delivery partners, as well as other identified organisations who can provide additional support within the context of this project.

We will not share your information with any other third parties. However, please note that this service may be wholly or partly funded by European Regional Development Fund and as such records may also be accessed by third parties for monitoring and audit purposes only.

3. Purpose Specifications and Data Collection

In general, you can browse the D2N2 Growth Hub website without disclosing any information about yourself other than the data collected by cookies, click here for the cookie policy. If you visit the D2N2 Growth Hub to read or download information, we collect and store only the following information that is automatically recognised:

  • The date and time
  • The originating IP address
  • The domain name
  • The type of browser
  • Operating system used (if provided by the browser)
  • The URL of the referring page (if provided by the browser)
  • The object requested
  • The completion status of the request

4. Other data we collect and what we do with it

Personal data means any information capable of identifying any living individual or natural person however anonymised data is excluded.

From the data you share we may process the following categories of personal data about you:

  • User Data that includes data about how you use our website and any online services together with any data that you post for publication on our website or through other online services.

 

  • Communication Data this includes but is not limited to any communication that you send to us through our website, through email, text, social media messaging, social media posting, online chats or any other communication that you send us. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defense of legal claims.

Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.

  • Technical Data this includes but is not limited to data about your use of our website and online services such as your IP address, any login data, information regarding your choice of browser, length of visits to web pages, your journey through our website, how often you revisit the site time zone settings and other technology on the devices you use to access our website.

The source of this data is from our analytics tracking system, we process this data to analyze your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our marketing

Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly maintain our website and help our business and to grow and define a marketing strategy.

  • Marketing Data this includes but is not limited to data about your preferences in receiving marketing from us and our third parties and your communication preferences. We process this data to enable you to partake in competitions, prize draws and free giveaways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this marketing

Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business and to decide our marketing strategy.

We may use Communication Data, User Data, Technical Data and Marketing Data to deliver relevant website content and advertisements to you (including Facebook adverts or other display marketing on platforms including but not limited too Youtube, Instagram, Twitter, Google ads display) and to measure or understand the effectiveness of the marketing you see.

Our lawful ground for this processing is legitimate interests which are to grow our business. We may also use such data to send other marketing communications to you. Our lawful ground for this processing is either consent or legitimate interests (namely to grow our business).

We process this data to operate our website effectively and ensure relevant content is provided to you. Like all companies to ensure the security of our website we maintain backups of our website and/or databases and to enable publication and administration of our website, other online services, and business.

Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business and to grow our business and to decide our marketing strategy.

5. Sensitive Data

From time to time we may need to collect sensitive data about you in order to provide you access to the training and funding you are requesting or for the reasons of statistical analysis such as your gender or age. 

When we need to collect sensitive data from you we require your explicit consent for processing this information. Therefore when you submit your details, we will send you a further communication asking for you to confirm your consent to this processing, this will normally come via  email or verbally when collecting the data.

Sometimes we are required to collect personal data by law or under the terms of the contract between the Growth Hub and you.  If you fail to provide us with the information we require we may be forced to cancel the product/service you ordered. If this does happen we will notify you at the time.

We will only use your personal data for a purpose it was collected for or a reasonably compatible purpose if necessary. For more information on this please email the DQO. In case we need to use your details for an unrelated new purpose we will let you know and explain the legal grounds for processing.

We may process your personal data without your knowledge or consent where this is required or permitted by law.

6. Cookie Policy and Marketing

As described above, we sometimes collect anonymous information from visits to our site to help us provide better customer service. For example, we keep track of the domains from which people visit and we measure visitor activity on the D2N2 Growth Hub website, we do this in ways that keep information anonymous. We use the information that we collect to measure the number of visitors to the different areas of our site, and to help us make the site more useful to visitors. This includes analysing these logs periodically to measure the traffic through our servers, the number of pages visited and the level of demand for pages and topics of interest. The logs may be preserved indefinitely and used at any time and in any way to prevent security breaches and to ensure the integrity of the data on our servers.

We collect anonymous information through the use of various technologies, one of which is called "cookies". A cookie is an element of data that a website can send to your browser, which may then be stored on your hard drive. For example, on a website with a login system (if users register for it), cookies are used to save the visitor's password so that it does not have to be entered at each new visit.

This anonymous information is used and analysed only at an aggregate level to help us understand trends and patterns. None of this information is reviewed at an individual level. If you do not want any transaction details used in this manner, you can disable your cookies.

When we engage with marketing activity our lawful ground of processing your personal data to engage with you using marketing communications is either your consent or our legitimate interests (specifically to grow our business).

Under PECR (Privacy and Electronic Communications Regulations) we may send you information about our company if you:  

  • Made a purchase or asked for information from us about our goods or services or
  • You agreed to receive marketing communications and in each case, you have not opted out of receiving such communications since.

Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However, you can still opt out of receiving marketing emails from us at any time.

Before we share your personal data with any third party for their own marketing purposes we will get your express consent.

You can ask us or third parties to stop sending you marketing messages at any time by selecting the unsubscribe option that will be on all marketing communication going forward. If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations etc.

7. Disclosure Of Your Data 

We may have to share your personal data with the parties set out below:

  • Other companies in our group who provide services to us.
  • Service providers who provide IT and system administration services.
  • Professional advisers including lawyers, bankers, auditors and insurers
  • Government bodies that require us to report processing activities.
  • Third parties to whom we sell, transfer, or merge parts of our business or our assets.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the GDPR and other Laws. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions and we will always have a legitimate reason for doing so.

8. International Transfer Of Your Data

Unfortunately, countries outside of the European Economic Area (EEA) do not always offer the same levels of protection to your personal information, so the GDPR and other European Laws outlaw the transfer of personal data outside of the EEA unless the transfer meets certain criteria.

Many of our third parties service providers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

Sometimes we need to transfer your data outside of the EEA, when we do, we do our best to ensure a similar degree of security of data by ensuring a minimum of one of the following safeguards is in place:

  • We will only transfer your personal data to countries that the European Commission have approved as providing an adequate level of protection for personal data (there is a full list on the ICO website that you can look at) by; or
  • Where we use certain service providers, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe; or
  • If we use US-based providers that are part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place.

9. Data Retention

The data we collect from you will be retained only for as long as necessary to fulfill the purposes we collected it for. This will naturally include the purposes of satisfying any legal, accounting, or reporting requirements.

For tax purposes, the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for the minimum of six years after they stop being customers.

In some circumstances, we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

10. Your Rights Under GDPR

  • The Right to be Informed
    You have the right to be informed about the collection and use of your data under GDPR guidelines as highlighted in our privacy policy.
  • The Right of Access
    You have the right to make a written or verbal request to access your personal data. This includes a description of the personal data, the purposes for which it is being processed, recipients, retention period and rights of rectification, erasure, restriction and objections. 
  • Data Retention
    The data we collect from you will be retained only for as long as necessary to fulfil the purposes we collected it for. This will naturally include the purposes of satisfying any legal, accounting, or reporting requirements. In some circumstances, we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
  • The Right to Erasure
    You have the right to request that businesses delete the personal data that they hold on you in certain instances.
  • The Right to Restriction of Processing
    You have the right to obtain restriction of processing in certain instances such as: when accuracy is contested, if processing is unlawful, if data is no longer needed, pending a right to object action.
  • The Right to Data Portability
    You have the right to obtain a copy of your personal data from the controller.
  • The Right to Object
    Individuals have an absolute right to stop their data being used for direct marketing based on your specific company sector and other behavioural marketing traits based on your previous experiences with the D2N2 Growth Hub programme.

11. Visitor's Choice

Registering on the D2N2 Growth Hub programme is optional. If you choose not to register or provide personal information, you can still use the D2N2 Growth Hub. However, you may be restricted with what you can do. D2N2 Growth Hub views the customer information that it collects as a valuable and confidential asset of which we take great care to ensure its safety.

If you choose to register your interest in the D2N2 Growth Hub programme and receive promotional or marketing information from us, you can choose which marketing information you receive by selecting the appropriate option when you register personal data.

We use the information provided for three purposes: to fulfil your requests for certain areas of the website, to contact you if needed, and to help us maintain the website software and hardware.

If you register for the D2N2 Growth Hub programme, your information will no longer be anonymous and will be available to D2N2 Growth Hub staff and to associated partners for the purpose of marketing. If you do not wish to continue receiving promotional or marketing information, please unsubscribe or notify us by email at info@d2n2growthhub.co.uk

12. Links to/ from Other Sites

The specific practices outlined in this privacy statement apply to the D2N2 Growth Hub website. Other bodies/ external websites linked to the D2N2 Growth Hub website may have different practices and privacy policies, we advise that you read these specific privacy policies to understand how your data is handled. The commitment to your privacy through the D2N2 Growth Hub programme will always remain the same. You are encouraged to review the privacy statements of other bodies/ entities when visiting their website(s). Recipients booking on to one of our events on external websites such as Eventbrite should adhere to the privacy policies set out on these external websites. We will only use your information from those sites when managing attendee lists for our events or if you have not already signed an SME enrollment form, we will contact you to send this form and additional information out about the D2N2 Growth Hub programme. Please note that the D2N2 Growth Hub is not responsible for the privacy policies or content on third party websites.

13. Individual Participation/ Access

You can ask us whether we are keeping personal data about you, and you can also request to receive a copy of that personal data. Before sending you any personal data, we will ask you to provide proof of your identity. If you are not able to provide proof of identity, we reserve the right to refuse to send you the personal data.

We will make a sincere effort to respond in a timely manner to your requests to the previous questions or to correct inaccuracies in your personal information. At any time, you may request that we delete or correct your personal information in our logs. For such requests please contact info@d2n2growthhub.co.uk

14. Security

We intend to protect the quality and integrity of our personal information. The D2N2 Growth Hub has implemented technologies and security policies to protect the stored personal data of our users from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss. D2N2 Growth Hub employees and processors who have access to personal data are obliged to respect the privacy of our visitors and the confidentiality of their personal data.
D2N2 Growth Hub will not sell or rent your personal information to anyone.

We will only send personally identifiable information about you to other companies or people:

  • If we are working with associated D2N2 Growth Hub partners for a referral to one of their services so they can contact you regarding the services that they can provide.
  • If we respond to court orders, or any legitimate request by authorities with which we must comply for legal process.
  • If we find that your actions on our website violate these instructions.

15. Privacy Support

If you have any enquiries about our privacy statement, please contact info@d2n2growthhub.co.uk

Last updated 18th December 2019.

Book an Appointment with an Adviser

Your business is unique but the challenges you’ll face in business aren’t, we can help get you through them.

Our free and impartial support is delivered by experienced and expert business advisers, giving you the right advice at the right time for your business. 

Contact us today to access a wealth of support, events, business growth programmes and expert advice.

Tracey Hylton Burrows
Account Manager
Image of Tracey Hylton Burrows
I would like to book an appointment