PRIVACY NOTICE – BCU ADVANTAGE / Birmingham City University’s SME Growth Service.
How we will use your data.
BCU Advantage, business diagnostic tools and growth services (such as the SME Growth Service) from Birmingham City University (‘BCU’) provides access to BCU Business Specialists, Analysts and Advisors who will work with users to identify growth opportunities, business growth strategy and offers advice and support to help achieve business growth goals. In order to provide the services BCU sometimes needs to collect information about individuals.
By using BCU Advantage, business diagnostic tools or growth services (such as the SME Growth Service) users agree that BCU may process personal data that we collect for the purpose of providing the services. Additional consents may also be provided by users for the purpose of gaining access to updates, news, information about additional services offered and BCU events.
This privacy notice explains how BCU collects, uses and shares personal data collected by BCU Advantage, business diagnostic tools and growth services (such as the SME Growth Service) and explains individuals’ rights in relation to the personal data we hold.
Unless otherwise stated on individual services BCU is the data controller for personal data collected by BCU Advantage and business diagnostic tools (such as the SME Growth Service) and is subject to the Data Protection Act 1998 (‘DPA’) (and, once in force in May 2018, to the General Data Protection Regulation (the ‘GDPR’)).
This privacy notice explains the following:
How we collect your information
The types of information we collect
How we use your personal data
Who we share personal data with
Will you be contacted for marketing purposes?
How we keep your data safe
How long is your information kept?
How we keep your information up to date and
How to exercise your data rights?
How to ask questions or raise concerns?
Changes to this privacy notice
1. How we collect your information
BCU may collect your personal data in a number of ways, for example from the information you provide to us when you interact with BCU, if you provide BCU with your contact details to us by:
2. The types of information we collect
We may collect the following types of personal data about you:
3. How we use your personal data
Your contact details, your reason for contacting BCU and a record of any services provided to you will be stored on our Customer Relationship Management database (‘CRM’).
We will use your information to keep a record of your relationship with the University, to provide business diagnostic and or growth services to you and where requested to inform you of a range of business support activities and opportunities. This includes:
4. Who we share personal data with
We may share your data with other departments and faculties within BCU only where necessary for BCU Business Specialists, Analysts, Advisors and BCU academic research groups to deliver the BCU Advantage and or business diagnostic, growth services and or BCU academic research activities.
For the purposes referred to in the privacy notice, we may share your personal data with certain third parties for the purposes of delivering the BCU Advantage and or business diagnostic or growth services. This will be in accordance with your preferences provided when applicable. We will not share your personal data with third parties except:
If we use or share information with a third party as detailed above, we will always ensure that appropriate controls are in place to ensure data is safe, it is only used for the allowed purpose and it is permanently deleted after the task has been completed.
The CRM used to store your data is kept on a secure cloud network with data centers within the in the European Economic Area (“EEA”). However, some of the personal data we process about you may be transferred to, and stored at, a destination outside the EEA, for example where it is processed by staff operating outside the EEA who work for us or for one of our suppliers, or where personal data is processed by one of our suppliers who is based outside the EEA or who uses storage facilities outside the EEA.
In these circumstances, your personal data will only be transferred on one of the following bases:
5. Will you be contacted for marketing purposes?
BCU will only send you marketing emails or contact you via your selected preference selections where you have expressly agreed to this. We may personalise the message content based upon information you have provided. You can update your preferences at any time see section 8 below.
6. How we keep your data safe
BCU is committed to safeguarding your personal data. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal information, including the Data Protection Act 1998 and from May 2018 the General Data Protection Regulation. In relation to all our BCU Advantage, business diagnostic and growth services records these are held within a dedicated and secure CRM system and or our secure network with access limited on a need to know basis. A range of administrative, technical, physical security controls are used to ensure a robust approach to protecting data held on BCU IT systems, and when approved transfers between third parties are undertaken. For more information a copy of BCU’s overarching Data Protection Policy is available on the policies page of the BCU website.
7. How long is your information kept?
We will hold your personal information within a secure dedicated database for as long as is necessary to provide the BCU Advantage, diagnostic, growth services and BCU academic research activities requested. Where you have indicated you no longer wish to receive any services your information will be retained and securely and permanently destroyed in accordance with the BCU retention and destruction policy.
Where a record has not been used and or there is no active engagement (for example there has been no response to required correspondence), BCU may class the record as dormant or may delete the record in accordance with the BCU retention and destruction policy. When appropriate BCU will email you to confirm your preferences and to notify you of any intention to delete your records if no response is received.
8. How we keep your information up to date and Communication preferences
BCU wants to ensure that we keep the details we hold about you up to date and communicate with you fully in accordance with your wishes. You should also get in touch with us if any of your personal details change. You can update your details and your communication preferences at any time by:
15 Bartholomew Row
9. Your rights
Under the Data Protection Laws, you have the following rights:
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
10. How to exercise your data rights?
If you wish to exercise any of your rights, please contact our Data Protection Officer using the following contact details:
By Email to: firstname.lastname@example.org
By Telephone on: +44 (0) 121 331 5288
By Post to:
Data Protection Officer
Information Management Team
Birmingham City University
15 Bartholomew Row
11. How to ask questions or raise concerns?
If you have any questions, comments or concerns about how we use or handle your personal data please contact the Data Protection Officer using the contact details in section 10 above.
If you are not content with the how we handle your information we would ask you to contact our Data Protection Officer to help you. However, you do also have the right to complain directly to the Information Commissioner at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Information about the Information Commissioner is available at: https://ico.org.uk.
12. Changes to this privacy notice
This privacy notice may be updated from time to time so you may wish to check it each time you submit personal information to BCU. The date of the most recent versions will appear on this page (see version control). We encourage you to check our privacy notice from time to time to ensure you understand how your data will be used and to see any minor updates. If material changes are made to the privacy notice, for instance how we would like to use your personal data, we will provide a more prominent notice (including, for certain services, email notification or correspondence of privacy notice changes).