GDPR and Privacy

What is the Lawful Basis for processing your data?

We don’t engage in generic marketing, cold-calling or mail-shots, our aim is to help you or your business to grow and thrive.  It is in your (and our) legitimate interest to contact you if we have found funding that you could benefit from, a project you could take part in, access to further skills development based on your previous interactions or just in response to your enquiries.  In this case, the Lawful Basis for processing your data is in furtherance of a Public task: the processing is necessary for us to perform a task in the public interest and for our official functions, and the task or function has a clear basis in law.

If you move onto one of our funded programmes then we have a legal obligation to process your data in order to comply with the national or international (eg EU/ DWP/ DHCLG) regulations.

What do we mean by “processing your data” and why is it necessary?

In order to properly understand your needs, we have to ask you about the problems you want to solve, the history of how you got to where you did, your current or planned structure or development goals and various other information.   Most of it is company information, not personal data, and is outside the scope of GDPR, but occasionally we collect sensitive personal data such as age or ethnicity of the person we are working with as a requirement to measure that we are not discriminating against any one group of people.  Your data is stored on secure and centralised systems so that we don’t have to keep asking you the same questions every time every time you contact us.  We might contact you if a regional advisor refers you to us and you have given them permission.

How does this balance with your rights and freedoms?

We use the data to track how well we serve your needs, whether projects are on schedule and what outcomes they achieved.  We don’t sell your data to anyone else, and we don’t pass your information on to anyone unless you agree and we believe it is in your best interests.

Note - If you ask for us never to contact you again, we still have to retain your email address so we can set up a “never email this address again” rule.  If you ask for that to be deleted then there is no guarantee that you will never receive an email from us again.  Other than that, you’re in control and we don’t want to push things out to you, we want to be led by the needs of you or your business.