Data Protection
and Privacy Policy

In the order for Enterprise CUBE to deliver its services it must collect, store and handle data about individuals, including customers.  Enterprise CUBE is committed to ensuring that it collects, handles and stores this data appropriately and that its practices do not put individuals or their data at risk.

This policy describes how this personal data must be collected, handled and stored to meet the company’s data protection standards — and to comply with the law.

Enterprise CUBE will take every reasonable step to ensure it:

• Complies with data protection law and follows good practice
• Protects the rights of staff, customers and partners
• Is open about how it stores and processes individuals’ data

DATA PROTECTION LAW

The Data Protection Act 1998 describes how organisations — including Enterprise CUBE— must collect, handle and store personal information.

Enterprise CUBE will handle data in accordance with the UK General Data Protection Regulation (GDPR).

HOW WE USE DATA

ONLINE LEARNERS

When our customers and users register with us we commit to only using your data in certain ways:

• Enterprise CUBE will retain information about you on a database and handle that data in accordance with the UK Data Protection Act 1998 and GDPR regulations.
• Enterprise CUBE will use this data for the purposes of administration of the StriveLive programme, and to support you with your businesses. Enterprise CUBE will contact you from time to time and send you messages in connection with supporting your start-up business. All communication from us or our staff can be stopped or unsubscribed from at any time.
• Enterprise CUBE may disclose information supplied by you to the specific organisations who funded or organised the Strive project you are enrolled in and the organisation that arranged your place on that project.
• Enterprise CUBE will use information it holds to produce public reports of aggregated summary data about its work provided, however, no statistical information that would identify you as an individual will be published or shared publicly.
• Enterprise CUBE will not use an individual’s data for marketing purposes or pass data to any third parties other than with the express consent of the individual.

USE OF COOKIES – ONLINE USERS

The primary purposes of our use of cookies is to provide a convenience to you.

You can accept or decline cookies, and still make use of our websites and services. Some internet browsers, such as Chrome or Safari, automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.

Enterprise CUBE’s website uses “cookies” to help you personalise your online experience. A cookie is a text file that is placed on your hard disk and stores information. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a server in the domain that issued the cookie to you.

For example, if you want to quickly log into your Strive learning account and start learning where you left the site last time, a cookie helps Enterprise CUBE to recall this specific information.

Cookies will store some personal information, such as recalling your email address you use for logging into the Strive learning portal.

DISCLOSING DATA

In certain circumstances, the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.

Under these circumstances, Enterprise CUBE will disclose requested data. However, Enterprise CUBE will ensure the request is legitimate, seeking assistance from the company’s legal advisers where necessary.

DATA ACCURACY

The law requires Enterprise CUBE to take reasonable steps to ensure data is kept accurate and up to date.

It is the responsibility of all employees who work with data to take reasonable steps to ensure it is kept as accurate and up to date as possible.

• Data will be held in as few places as necessary. Staff should not create any unnecessary additional data sets.
• Staff should take every opportunity to ensure data is updated. For instance, by confirming a customer’s details when they call.
• Data should be updated as inaccuracies are discovered. For instance, if a customer can no longer be reached on their stored telephone number, it should be removed from the database.

RIGHT TO ACCESS YOUR DATA
SUBJECT ACCESS REQUESTS

All individuals who are the subject of personal data held by Enterprise CUBE are entitled to:

• Ask what information the company holds about them and why.
• Ask how to gain access to it.
• Be informed how to keep it up to date.
• Be informed how the company is meeting its data protection obligations.

If an individual contacts the company requesting this information, this is called a subject access request. Subject access requests from individuals should be made by email, atinfo@enterprisecube.org. Enterprise CUBE will aim to provide the relevant data within 14 days.

Enterprise CUBE will always verify the identity of anyone making a subject access request before handing over any information.

CONTACT AND COMPLAINTS

For further information or if you have any queries or questions about the data we hold about you, please contact our Data Protection Officer:

• ​Richard Lanning
  Director – Data Controller
• info@enterprisecube.org
• 9 Commercial Yard, Barnard Castle, England, DL12 8FE

Contacting the Information Commissioner’s Office (ICO)

​If you are unhappy with the way we have handled your personal data or our response to a request you have made to us, you have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office details:

• Wycliffe House
  Water Lane
  Wilmslow
  Cheshire
  SK9 5AF
• 0303 123 1113
• casework@ico.org.uk
• www.ico.org.uk/concerns