How we use your personal information – subscribers to digital newsletters and updates
This policy explains what personal information we gather about you when you subscribe to our digital newsletters and updates and details how that information is used.
Please take a moment to read and understand this policy. This policy supplements our other privacy policies and notices and is not intended to override them.
We (Cambridge Enterprise Limited) are a wholly owned subsidiary of the University of Cambridge (the University). Reference to the University includes its spin-out and proto-companies and any reference to academics, researchers, staff, students and alumni are to those of the University.
Cambridge Enterprise Limited (Cambridge Enterprise) is a company registered in England and Wales with registered company number 01069886.
Cambridge University Technical Services Limited, a company registered in England and Wales with registered company number 05749230, is a wholly owned subsidiary of Cambridge Enterprise Limited. Cambridge University Technical Services Limited has no employees and uses the same infrastructure as Cambridge Enterprise Limited to deliver consultancy services on behalf of Cambridge Enterprise Limited. Reference to Cambridge Enterprise includes Cambridge Enterprise Limited and Cambridge University Technical Services Limited.
Cambridge Enterprise is the data controller responsible for the personal information that you agree to share with either Cambridge Enterprise Limited or Cambridge University Technical Services Limited.
The named person responsibility for data protection compliance for Cambridge Enterprise Limited and Cambridge University Technical Services Limited is our Deputy Director. If you have any questions about how your personal information is being used, or wish to exercise any of your rights, please contact:
Cambridge Enterprise Limited, University of Cambridge
Hauser Forum, 3 Charles Babbage Road, Cambridge CB3 0GT
What is ‘personal information’?
‘Personal information’ means any information which relates to or identifies you as an individual.
How does this web page relate to other information about data protection?
Please see further information on our Data Protection pages.
Who will process my personal information?
The information published here applies to the use, sharing and disclosure of your personal information by Cambridge Enterprise.
What personal information will be processed?
Cambridge Enterprise will keep a record of the details you provided on your enquiry, application or registration form, any supporting documents requested and additional details provided by you.
We will collect:
- Your name and contact details, including email address
We maintain:
- A record of your enquiry, subscription preferences and any supporting documents provided by you
- A record of your electronic communications with us, including feedback, questions for and information provided by Cambridge Enterprise
- A record of your preferences to receive marketing communications with us for any relevant updates that we offer
We do not collect your communications with third parties. We record, store and securely transmit your personal information in paper and electronic formats, in email and voice recording. We limit access to your personal information to your personal information to our employees and those at the University who have a need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
We may combine the information you submit with other information we have collected from you, whether online or offline, and on your usage of our website.
We may collect certain information automatically as you navigate around our website.
Please see our Cookie Policy and How we use your personal information – website users for further details.
What is the purpose of the processing?
We will process your personal information for a range of contractual, statutory or public interest purposes, including to:
- Verify your credentials
- Process and manage your use of our website
- Respond to your messages submitted through our website or via any other communication
- Manage your account for marketing, including customising the type of communication we send to you according to your preferences
- Protect our legitimate interests and your interests and fundamental rights do not override those interests
What is the legal basis for processing?
We set out in the table below, details of the lawful basis for which we process your personal information.
If we require your consent for any specific use of your personal information, we will collect it at the appropriate time and you can withdraw this at any time. We will not use your personal information to carry out any wholly automated decision-making that affects you.
| Purpose | Legal basis for processing including basis of legitimate interests |
|---|---|
| To manage our relationship with you from when you visit our website | a) Necessary to comply with a legal obligation b) Necessary for our legitimate interests (to keep our records updated and to study how academics, researchers, staff, students and alumni and those external to the University of Cambridge use our services) |
| To provide you with relevant communications according to your submitted subscription preferences | a) Necessary to fulfil your request to receive communications b) Necessary to comply with a legal obligation c) Necessary for our legitimate interests (to keep our records updated and to study how academics, researchers, staff, students, alumni and those external to the University of Cambridge use our services) |
| To measure or understand the effectiveness of the information on and engagement with our services | Necessary for our legitimate interests (to study how academics, researchers, staff, students and alumni and those external to the University of Cambridge use our services, to develop them, to commercialise intellectual property, and to inform our marketing strategy) |
| To interact with our business teams | Necessary for our legitimate interests (to commercialise intellectual property, grow our business and support academics, researchers, staff, students and alumni, and to inform our marketing strategy) |
| To protect the vital interests of academics, researchers, staff, students and alumni using our services | Necessary for our legitimate interests (in order to protect the vital interests of academics, researchers, staff, students and alumni and those external to the University of Cambridge ) |
| To protect our vital interests | Necessary for our legitimate interests (in order to better serve academics, researchers, staff, students and alumni) |
| To collect and share any necessary feedback submitted via or relating to our communications | Necessary for our legitimate interests (in order to better serve academics, researchers, staff, students, alumni and subscribers) |
| To comply with our legal obligations concerning the services we provide | Necessary for compliance with a legal obligation (in order to disclose your personal information to legal or regulatory authorities, with whom we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to comply with any legal obligation, or to protect the rights, property, or safety of us, academics, researchers, staff, students and alumni and third parties) |
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data) | (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation |
Who will my personal information be shared with?
Your personal information is shared as permitted or required by law, on a considered and confidential basis, with the University.
Transferring your information outside the United Kingdom or European Economic Area (EEA)
We may need to transfer your personal information outside of the UK or EEA in order to provide you with the services and products you require or as necessary for our legitimate interests. This will most likely occur when our third-party providers are based outside the EEA. Any such transfers are carried out with appropriate safeguards in place to ensure the confidentiality and security of your personal information.
Other than as set out above, we will not normally publish or disclose any personal information about you to other external enquirers or organisations unless you have requested or consented to it, or unless it is in your vital interests to do so (e.g. in an emergency situation).
Links to other websites
Our website may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and not responsible for their privacy policies or statements.
This Privacy Policy does not apply to any website operated by a third party. If you visit a third party website, please read its Privacy Notice or privacy statement to find out how it uses your personal data.
Your rights
You have the right to access the personal information that is held about you by the Cambridge Enterprise. Further details can be found at Making a Subject Access Request.
You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or to receive an electronic copy of the personal information you provided to us. Please email us via the button below if you believe we have some inaccurate personal information held about you.
If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, SK9 5AF. We would however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
How long is my information kept?
Information about how long different types of information are retained by Cambridge Enterprise is published on our Records Management page.
Are changes made to this page?
This web page was last updated July 2023. It is reviewed when necessary and at least annually. Any changes will be published here.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.