Website Privacy Statement

At Bristol & Bath Regional Capital C.I.C. (BBRC) we’re committed to protecting any personal data you share with us, or that we receive from other organisations and keeping it safe.

This policy governs all pages hosted at www.bab-rc.uk. It does not apply to pages hosted by other organisations to which we may link and whose privacy policies may differ.  Please read the following policy to understand how your personal information will be treated.

For the purpose of the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR), the data controller is Bristol & Bath Regional Capital C.I.C.

Any questions regarding this policy should be sent to [email protected] or by writing to BBRC, Desklodge House, 2 Redcliffe Way, Bristol, BS1 6NL.

Purpose of this statement

BBRC endeavours to always follow best practice when using your information, which includes clearly telling you about our processes. This section is to explain how we protect your information and the ways we will collect information about you.

The website is designed with privacy in mind and your consent will be sought before information about you is collected. These terms represent the agreement between us and you, so please check back occasionally to see if anything has changed.

If you do not agree, please refrain from using the website and/or contact us.

How BBRC collects information

Cookies
Cookies are a small file, normally of letters and numbers, that mean a website can recognise a user’s device. There are different types of cookies, which have different uses. All the cookies on BBRC website are ‘first party cookies’, which means they are not set by a third party company.

Google Analytics
Some information is collected and processed by Google Analytics, which reports on the way people use a website. However, the information processed by Google is not personally identifiable and is kept securely. Users also have the option to install Google Analytics opt-out browser add-on if they do not wish for this information to be collected.

Direct Input
Sometimes you will actively give us information. For example, if you use the website to send an enquiry, apply for a job or sign up to a mailing list.

How we use your information

BBRC will only use your information for the explicitly stated purpose. For instance, to deliver a service you have requested such as sending you a newsletter or considering a job application.

We also use the information collected to review and improve our website to make it more user-friendly or highlight areas of particular interest. However, be assured that your IP address is never linked with identifiable personal information and we will not make any attempt to recognise individual visitors.

How we protect your information

BBRC looks after your information in compliance with the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR).

We proactively work to ensure your information is secure and never rent or sell information to third parties. We do not share your information unless you have given explicit permission or we are required to do so by law.

Some select external bodies process or may view information gathered on the website. For example, the Charity Commission, the Financial Conduct Authority, selected website developers, and Google Analytics. Moreover, the website is hosted by WordPress.org. All such parties to your information are carefully chosen and it is ensured that contracts contain relevant privacy terms. In many cases, a privacy impact assessment is used to mitigate risk.

Non-sensitive details (your email address etc) when transmitted normally over the internet cannot be guaranteed to be 100% secure. Whilst we take all possible means to protect your personal information, we cannot guarantee the security of any information you transmit electronically to us, and you do so at your own risk.

Our responsibilities

The law requires us to tell you the basis on which we process your data.
Some activities, for example sending you emails which promote BBRC, require your consent. If the law requires your consent to process data in a certain way then we will obtain it before carrying out that activity.

Other activities are carried out to fulfil a contract or agreement, for example placing funds which are subject to a funding agreement. This requires us to know who you are and to process your information in order to do the thing you have asked us to do. If a contract is in place then we will process your data based on that contract.

In all other cases the law allows us to process your data if it is in our legitimate interest to do so, but only so long as we need to and your “interests or your fundamental rights and freedoms are not overriding”. Practically speaking this means we carry out an exercise to check that we will not cause you harm by processing your data, that the processing is not overly intrusive and that we will only do so in a way which is described in this privacy notice.

We will keep data for as long as is needed to complete the task for which it was collected. Relationships between investors, investees and BBRC are often long term, and so we expect to keep your data for as long as that relationship exists, or until we no longer need it.

Your Rights

The law requires us to tell you that you have a variety of rights about the way we process your data. These are as follows:

Where our use of your data requires consent, you may withdraw this consent at any time.

Where we rely on our legitimate interest to process data, you may ask us to stop doing so.
You may request a copy of the data we hold about you.

You may change or stop the way in which we communicate with you or process data about you, and if it is not required for the purpose you provided it, then we will do so. Activities like processing and managing funding agreements may mean we can not entirely stop processing your data. We will always endeavour to comply with such a request however.

If you are not satisfied with the way we have processed your data then you can complain to the Office of the Information Commissioner.

Disclaimers

Availability: we reserve the right to withdraw or amend the services we provide on the website without notice. BBRC will not be liable if for any reason the website is unavailable at any time or for any period.

Accuracy: the information provided on this website is for reference purposes only. We will not be liable for loss or damages arising directly or indirectly from the use of or reliance upon any information contained on this website.

Hyperlinks: We may offer hypertext links to other websites, which are likely to be provided by a third party. We have no control over their contents and do not accept responsibility for their use. Please also be aware their privacy policy and cookie use may differ from BBRC.

Jurisdiction: BBRC website is established in England and the English courts will have exclusive jurisdiction over any claim related to this website.

Changes to this notice

We regularly review our privacy statement for the website. This page was last updated on 4 August 2022.

Contacting us

If you have any questions about this privacy notice, about the way in which we process your data, or if you wish to change the way we use your data, including how we communicate with you, then please contact us:

BBRC, Desklodge House, 2 Redcliffe Way, Bristol, BS1 6NL