This privacy notice provides you with details of how we collect and process your personal data through your use of our website. The D2N2 Growth Hub is the controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice). We have an appointed Data Quality Officer (DQO) who is responsible for privacy-related matters for us.
If you have any questions about this privacy notice, please contact the DQO using the details set out below.
We have a named DQO and can be contacted using the below details…
Data Quality Officer
Nottingham City Council
As part of GDPR, it is important that the information we hold about you is accurate and up to date. If you have any changes to your data please let us know by contacting our DQO or our information team: firstname.lastname@example.org
By registering for the D2N2 Growth Hub programme, you acknowledge and agree that the data contained within can be held by the D2N2 Growth Hub partners (Nottingham City Council, East Midlands Chamber, Chesterfield Borough Council, Derby City Council, Derbyshire County Council, Derbyshire Dales District Council, Erewash Partnership and Nottinghamshire County Council) and used to provide the support services available through this project, as well as marketing information about the project. Please inform us if any commercially sensitive information should not be included.
Any information recorded here may be shared with other project delivery partners, as well as other identified organisations who can provide additional support within the context of this project.
We will not share your information with any other third parties. However, please note that this service may be wholly or partly funded by European Regional Development Fund and as such records may also be accessed by third parties for monitoring and audit purposes only.
Personal data means any information capable of identifying any living individual or natural person however anonymised data is excluded.
From the data you share we may process the following categories of personal data about you:
Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.
The source of this data is from our analytics tracking system, we process this data to analyze your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our marketing
Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly maintain our website and help our business and to grow and define a marketing strategy.
Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business and to decide our marketing strategy.
We may use Communication Data, User Data, Technical Data and Marketing Data to deliver relevant website content and advertisements to you (including Facebook adverts or other display marketing on platforms including but not limited too Youtube, Instagram, Twitter, Google ads display) and to measure or understand the effectiveness of the marketing you see.
Our lawful ground for this processing is legitimate interests which are to grow our business. We may also use such data to send other marketing communications to you. Our lawful ground for this processing is either consent or legitimate interests (namely to grow our business).
We process this data to operate our website effectively and ensure relevant content is provided to you. Like all companies to ensure the security of our website we maintain backups of our website and/or databases and to enable publication and administration of our website, other online services, and business.
Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business and to grow our business and to decide our marketing strategy.
From time to time we may need to collect sensitive data about you in order to provide you access to the training and funding you are requesting or for the reasons of statistical analysis such as your gender or age.
When we need to collect sensitive data from you we require your explicit consent for processing this information. Therefore when you submit your details, we will send you a further communication asking for you to confirm your consent to this processing, this will normally come via email or verbally when collecting the data.
Sometimes we are required to collect personal data by law or under the terms of the contract between the Growth Hub and you. If you fail to provide us with the information we require we may be forced to cancel the product/service you ordered. If this does happen we will notify you at the time.
We will only use your personal data for a purpose it was collected for or a reasonably compatible purpose if necessary. For more information on this please email the DQO. In case we need to use your details for an unrelated new purpose we will let you know and explain the legal grounds for processing.
We may process your personal data without your knowledge or consent where this is required or permitted by law.
As described above, we sometimes collect anonymous information from visits to our site to help us provide better customer service. For example, we keep track of the domains from which people visit and we measure visitor activity on the D2N2 Growth Hub website, we do this in ways that keep information anonymous. We use the information that we collect to measure the number of visitors to the different areas of our site, and to help us make the site more useful to visitors. This includes analysing these logs periodically to measure the traffic through our servers, the number of pages visited and the level of demand for pages and topics of interest. The logs may be preserved indefinitely and used at any time and in any way to prevent security breaches and to ensure the integrity of the data on our servers.
We collect anonymous information through the use of various technologies, one of which is called "cookies". A cookie is an element of data that a website can send to your browser, which may then be stored on your hard drive. For example, on a website with a login system (if users register for it), cookies are used to save the visitor's password so that it does not have to be entered at each new visit.
This anonymous information is used and analysed only at an aggregate level to help us understand trends and patterns. None of this information is reviewed at an individual level. If you do not want any transaction details used in this manner, you can disable your cookies.
When we engage with marketing activity our lawful ground of processing your personal data to engage with you using marketing communications is either your consent or our legitimate interests (specifically to grow our business).
Under PECR (Privacy and Electronic Communications Regulations) we may send you information about our company if you:
Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However, you can still opt out of receiving marketing emails from us at any time.
Before we share your personal data with any third party for their own marketing purposes we will get your express consent.
You can ask us or third parties to stop sending you marketing messages at any time by selecting the unsubscribe option that will be on all marketing communication going forward. If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations etc.
We may have to share your personal data with the parties set out below:
We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the GDPR and other Laws. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions and we will always have a legitimate reason for doing so.
Unfortunately, countries outside of the European Economic Area (EEA) do not always offer the same levels of protection to your personal information, so the GDPR and other European Laws outlaw the transfer of personal data outside of the EEA unless the transfer meets certain criteria.
Many of our third parties service providers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
Sometimes we need to transfer your data outside of the EEA, when we do, we do our best to ensure a similar degree of security of data by ensuring a minimum of one of the following safeguards is in place:
The data we collect from you will be retained only for as long as necessary to fulfill the purposes we collected it for. This will naturally include the purposes of satisfying any legal, accounting, or reporting requirements.
For tax purposes, the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for the minimum of six years after they stop being customers.
In some circumstances, we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Registering on the D2N2 Growth Hub programme is optional. If you choose not to register or provide personal information, you can still use the D2N2 Growth Hub. However, you may be restricted with what you can do. D2N2 Growth Hub views the customer information that it collects as a valuable and confidential asset of which we take great care to ensure its safety.
If you choose to register your interest in the D2N2 Growth Hub programme and receive promotional or marketing information from us, you can choose which marketing information you receive by selecting the appropriate option when you register personal data.
We use the information provided for three purposes: to fulfil your requests for certain areas of the website, to contact you if needed, and to help us maintain the website software and hardware.
If you register for the D2N2 Growth Hub programme, your information will no longer be anonymous and will be available to D2N2 Growth Hub staff and to associated partners for the purpose of marketing. If you do not wish to continue receiving promotional or marketing information, please unsubscribe or notify us by email at email@example.com
The specific practices outlined in this privacy statement apply to the D2N2 Growth Hub website. Other bodies/ external websites linked to the D2N2 Growth Hub website may have different practices and privacy policies, we advise that you read these specific privacy policies to understand how your data is handled. The commitment to your privacy through the D2N2 Growth Hub programme will always remain the same. You are encouraged to review the privacy statements of other bodies/ entities when visiting their website(s). Recipients booking on to one of our events on external websites such as Eventbrite should adhere to the privacy policies set out on these external websites. We will only use your information from those sites when managing attendee lists for our events or if you have not already signed an SME enrollment form, we will contact you to send this form and additional information out about the D2N2 Growth Hub programme. Please note that the D2N2 Growth Hub is not responsible for the privacy policies or content on third party websites.
You can ask us whether we are keeping personal data about you, and you can also request to receive a copy of that personal data. Before sending you any personal data, we will ask you to provide proof of your identity. If you are not able to provide proof of identity, we reserve the right to refuse to send you the personal data.
We will make a sincere effort to respond in a timely manner to your requests to the previous questions or to correct inaccuracies in your personal information. At any time, you may request that we delete or correct your personal information in our logs. For such requests please contact firstname.lastname@example.org
We intend to protect the quality and integrity of our personal information. The D2N2 Growth Hub has implemented technologies and security policies to protect the stored personal data of our users from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss. D2N2 Growth Hub employees and processors who have access to personal data are obliged to respect the privacy of our visitors and the confidentiality of their personal data.
D2N2 Growth Hub will not sell or rent your personal information to anyone.
We will only send personally identifiable information about you to other companies or people:
If you have any enquiries about our privacy statement, please contact email@example.com
Last updated 18th December 2019.
Your business is unique but the challenges that you face aren’t, with our support, we can help get you through them.
Our impartial business support is delivered by experienced, expert business advisers, giving you the right advice at the right time for your business.
Contact us today to access a wealth of support, events, business growth programmes and expert advice.