Privacy Notice1.Universities Economic Development Unit (UEDU) as part of the University of Chester Group, is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your working relationship withus, in accordance with data protection legislation. It applies to all current and former employees, workers and contractors and does not form part of any contract of employment or other contract to provideservices.2.UEDU is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protectionlegislationtonotifyyouoftheinformationcontainedinthisprivacynotice.3.It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.Data Protection Principles4.We will comply with data protection legislation, which says that the personal information we hold about you mustbe:Used lawfully, fairly and in a transparentwayCollectedonlyforvalidpurposesthatwehaveclearlyexplainedtoyouandnot used in any way that is incompatible with thosepurposesRelevant to the purposes we have told you about and limited only to those purposesAccurate and kept up to dateKept only as long as necessary for the purposes we have told youaboutKeptsecurelyWhat information does the UEDU collect?5.Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). There are special categories of more sensitive personal data which require a higher level of protection.6.The types of information we hold about youinclude:personal contact details such as your name, title, address, telephone numbers, email address, information from due diligence check e.g. directorships and other relevant businessinterests;date of birth and gender (where applicable, for example: start-upsupport);evidence of your nationality and eligibility to work/start-up a business in the UK (where applicable for example: start-upsupport)information about the requested business support needs and potential provision and assistance suggested to/agreed withyou;


correspondence with or about you, for example letters to you about the start-up/business support requested/ provided about/through our projects;your national insurance number (whereapplicable);information about your use of our information and communications systems;photographs for use inmarketing.7.We may also hold the following categories of more sensitive personal information:equality monitoring information such as information about your marital status, ethnic origin, sexual orientation, religion orbelief;8.Most of the information we hold about you will have been provided by you, but some may come from other external sources and intermediaries, such as referrals from the Growth Hub; Chambers of Commerce, MHCLGetc.9.Data will be stored in a range of different places, including your beneficiary file, and in other IT systems, such as the UEDU’s email system and project-based CRMsystem.Why does the UEDU process personal data?10.We will only use your personal information when the law allows us to. The University needs to process data to enter into a contract with you and to comply with our contractual obligations, for example, providing you with the agreed business support services, making claims to funders supporting the projects or undertaking many of the activities listed in the following paragraph. It also needs to process your data in order to comply with legal obligations, for example, state aid legislation.11.The UEDU also needs to process personal data to pursue its legitimate business interests. Processing personal data allows the UEDUto:operate recruitment and promotionprocesses;determine the support, distribution and progress of beneficiaries of its projects and through its deliverypartners;maintain accurate and up-to-date project beneficiary records and contact details;operateandkeeparecordofsupportprovidedthroughandfundedby itsproject;provide referrals where applicable and appropriate to other business support agencies we believe could help you and yourbusiness;maintain and promote equality in theworkplace;undertake business management and planning, including accounting and auditing;maintaincontactwithyoutoascertaintheimpactandresultsofthesupport provided;obtain feedback and conduct evaluations to enable the development and improvement of our projects (current andnew);ensure network and information security and compliance with information and communicationpolicies.


12.Where UEDU relies on legitimate interests as a reason for processing data, it has considered whether or not those interests are overridden by the rights and freedoms of employees and has concluded that they arenot.13.Where we process special categories of personal information, such as those relating to your ethnicity, religious beliefs, sexual orientation, disability or gender identity, this is done for the purposes of equal opportunitiesmonitoring.14.Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personalinformation.15.Wewillonlyuseyourpersonalinformationforthepurposesforwhichwecollected it, unless we reasonably consider that we need to use it for another reason and thatreasoniscompatiblewiththeoriginalpurpose.Ifweneedtouseyourpersonal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to doso.16.Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted bylaw.17.We do not envisage that any decisions will be taken about you using automated means, however we will notify you if this positionchanges.Who has access to data?18.Yourinformationmaybesharedwithprojectdeliverypartners,including:University of Chester, ManchesterMetropolitan University, Reaseheath College, aswell as the Cheshire and Warrington Growth Hub; consultants and project evaluators as appointed by us and by auditors, if access to the data is necessary for performing theirroles.19.We will only disclose information about you to third parties if we are legally obliged to do so or where we need to comply with our contractual obligations, for instance we may need to pass on certain information about you to the relevant funding bodies supporting the Unit and its Projects. The University Group also shares data with third parties that process data on its behalf, for example consultants andauditors.20.We do not send your personal data outside the European Economic Area. If this changes in the future, you will be notified of this and the safeguards in place to protect the security of yourdata.How does the UEDU protect data?21.UEDU and wider University Group takes the security of your data very seriously, and has internal policies and controls in place to try and ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. They will onlyprocessyourpersonalinformationonourinstructionsandtheyaresubjectto a duty of confidentiality. For more information, please see the University’s Data Protection Policy.


22.Where UEDU or the University asks third parties to process data on its behalf, for example consultants or evaluators, they do so on the basis of written instructions, are under a duty of confidentiality and must ensure that they have appropriate technical and organisational measures in place to keep the data secure.23.We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to doso.For how long does UEDU and University keep data?24.We will only retain your personal information for as long as necessary to fulfilthe purposes we collected it for, including for the purposes of satisfying any legal, accounting, contractual or reportingrequirements.25.Your personal data will be stored throughout your involvement with UEDU’s projects, and for a period afterwards: due to funding requirements all ESIF funded projects will need to be retained until at least 31st December 2035 or until notified by Government that records can bedestroyed.26.Insomecircumstanceswemayanonymiseyourpersonalinformationsothatitcan no longer be associated with you, in which case we may use such information without further notice to you. Once project records are no longer required contractually and/or for statutory purposes we will securely destroy your personal information in accordance with our data retention policy.What if you choose not to provide personal data?27.Certain information, such as contact details, your eligibility to work in the UK etc.are required to allow the UEDUto enter into a contractual relationship with you asproject funding streams have eligibility criteria that must be compliedwith.28.You have certain obligations under your beneficiary contract to provide the UEDU with data. For example, to ascertain eligibility to access funding support; ascertain previous state aid awardsetc.Your duty to inform us ofchanges29.It is important that the personal information we hold about you is accurate and current.Pleasekeepusinformedifyourpersonalinformationchangesduringyour working relationship withus.Your rights30.As a data subject, under data protection legislation, you have various rights in relation to your personal data. Youcan:


request access to your own data by making an access request –this enables you to receive a copy of the personal information we hold about you and check that we are lawfully processingit;request that we correct any inaccuracies in the data that we hold about you;request that we erase your personal data where we are not entitled by law to process it or it is no longer needed for the purpose it wascollected;request that processing of your data is restricted –this enables you to ask us to suspend the processing of personal information about you, for example if you want to establish its accuracy or the reason for processing it;object to processing of your personal information where we are relying on our legitimate interests and there is something about your particular situation which makes you want to object to processing on thisground;request the transfer of your personal information to anotherparty.31.Inmostsituationswewillnotrelyonyourconsentasalawfulbasisforprocessing your data. If we do request your consent to process your data for a specific purpose, you are under no obligation to provide it and you have the right to withdrawthatconsentatanytime.Thiswillnotaffectthelawfulnessofprocessing before your consent waswithdrawn.32.If you wish to make an access request or assert any of the rights detailed above, please contact the Data Protection Officer using the contact detailsbelow.33.You have the right to make a complaint to the Information Commissioner if you believe we have not complied with the requirements of data protection legislation with regard to your personal data. You can do this by contacting the Information Commissioners’ Office directly. Further details on your rights and contact details are available Protection Officer34.The University’s Data Protection Officer is Mr Rob Dawson, Institutional Compliance Officer, who can be contacted on 01244 511610 to this privacy notice35.We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personalinformation

The Cheshire and Warrington Business Growth Programme is a consortium of North West based partners set up to deliver business growth activities across priority sectors from 2016-2023.

With a £3.85m investment of European Regional Development Funding (ERDF) matched by investment by the three partner Institutions, this innovative programme brings together three key business support providers across Cheshire and Warrington to offer businesses access to a variety of services.

Copyright © Cheshire and Warrington Business Growth Programme