OUR PRIVACY AND COOKIES POLICY
St Albans Enterprise Agency (known as STANTA) is committed to respecting your privacy including the privacy of our clients, contacts and of every visitor to our website. If we collect information about you, it will be used to fulfil the required services, to meet contractual obligations (e.g. as we may provide services which are in part funded by governmental bodies we may be required to keep evidence of service) and enable us to improve how, as an organisation, we deal with you.
Should you have a question about the data we store, our contact details are:
St Albans Enterprise Agency Ltd (STANTA)
Address as below
The information that we collect about you will only be used lawfully (in accordance with the Data Protection Act 1998 and the General Data Protection Regulation 2018). All data is retained exclusively within the United Kingdom, or transferred only to ‘third countries’ where ‘adequacy of protection’ or specific certification as defined by The GDPR has been confirmed.
This information will not be disclosed to anyone outside STANTA or its associated companies, partners, and other organisations with which STANTA has arranged services for your benefit, which may include UK and European Union government departments and bodies (which may provide funding for our services).
We expect the information we hold to be accurate and up to date. You have the right as an individual to find out what information we hold about you and make changes if necessary; you also have the right, assuming we are not obligated by law to refuse, to ask us to stop using the information. To have your information removed or rectified, please contact STANTA’s Data Controller at firstname.lastname@example.org.
The type of information that we will collect on you, and you voluntarily provide to us, will vary depending on whether you are signing up for our newsletter on our website, or whether you are receiving business advice and/or training, usually provided free for start-up and early-stage businesses. The information we hold for the former may include:
- Your name
- Telephone number(s)
- Email address
If you take advantage of our business advisory services we will generally require additional information, depending especially on the requirements of any publicly-funded, or part-funded programme. These will usually require us to hold special data such as sex, age, ethnicity,
employment status, education (so that the funder can assure themselves that we do not discriminate and for statistical purposes of any particular programme). We will also keep notes on
conversations, actions we may have suggested to you and other personal details, information and documents that you may have disclosed to us in order that we can help you
You are under no statutory or contractual requirement or obligation to provide us with your personal information; however, we require at least the information above in order for us to deal with you as a client in an efficient and effective manner.
The legal basis for processing your data is 1) our legitimate interests in providing free or low-cost support to businesses, for their benefit and for the benefit of the economy as a whole, 2) for the performance of a contract when we are supplying services under a contracted programme, 3) for you, our client’s own interest to get benefit from our mostly free services, and 4) your specific consent, which we request whenever we first provide individual advice. We will not store, process or transfer your data outside the parties detailed above unless we have an appropriate lawful reason to do so. Unless we are precluded from doing so by law, you have the right to remove your consent at any time depending on the relationship either by unsubscribing from our newsletters or by contacting us and requesting that processing of your details be restricted or deleted. If we are required to keep your data for contractual reasons, we will inform you and delete any data that is not required by the contract.
Otherwise, we will delete your data as soon as practical, including shredding hard copy data.
Advice clients often contact us many years after first contact and funded contracts may require us to evidence the service we have provided for up to 10 years, so, unless otherwise required by law, your data will be stored for a period of up to 12 years after our last contact with you, at which point it will be deleted. If you have only used the newsletter service for information, your details will be deleted as soon as practicable after you unsubscribe.
PROTECTION OF PERSONAL INFORMATION
STANTA takes precautions, including administrative, technical, and physical measures, to safeguard your Data against loss, theft, and misuse, as well as against unauthorised access, disclosure, alteration, and destruction.
STANTA uses industry-standard efforts to safeguard the confidentiality of Data, including encryption, firewalls and SSL (Secure Sockets Layer). We have implemented reasonable administrative, technical, and physical security controls to protect against the loss, misuse, or alteration of your Data.
If you have a concern about how we handle your data, or you would like to lodge a complaint, you may do so by contacting The Information Commissioners Office.