Women’s Business Station C.I.C. (WBS) honours the right of its members, employees and other users’, including website visitors, to privacy and data protection. WBS is fully committed to complying with the provisions of all applicable Data Protection legislation and regulations such as Data Protection Act and EU GDPR.
The Policy is effective as of 27/11/2019 and will be continuously assessed against new technologies, business practices, regulatory changes and the evolving needs of WBS and the memberships services and activities provided . We are registered with the Information Commissioners Office, the UK’s Data Protection Authority.
The Data Controller for all personal data collected via this website is WBS with its registered office at Unit 37, City Quay, Camperdown Street, Dundee, DD1 3JA This means that we are responsible for deciding what data we collect and how we hold and use your personal data. We will implement appropriate data security measures for protecting the data from unauthorised access and loss, as laid out in the Security section of this Policy.
WBS collects and maintains a variety of personally identifiable information, including names, email addresses, phone numbers, payment information, social media profiles, business addresses, demographic information such as the local authority area or industry sector of the business and details of WBS services the users may be interested in such as trading opportunities, events and training courses. WBS collects information directly from individuals or from the parent companies of the individuals. The information could be collected through e-mails, phone calls, online registration forms, event registration forms and face to face meetings. WBS does not collect personal data about individuals except when there is a legitimate business requirement or when such information is provided on a voluntary basis.
The personal data collected is used by WBS to give you information relating to WBS membership, WBS website, other WBS services, customer administration, prospecting new members, account management with existing members, to process and respond to queries received from the public or other relevant stakeholders. WBS may perform statistical analyses of user behaviour and characteristics to measure interest in and the use of various sections of the website. The personal data held by WBS may also be used on an aggregate basis without any personal identifiers to provide third parties with information, such as the composition of membership, and to help us develop new member services and products, improve the features and content of the website or other marketing material, and to provide sponsors and others with aggregate information about our members, website users and their usage patterns in relation to services and/or the website.
By becoming a member of the WBS, you are signing you up to receive certain information related to the organisation.
If you are not a member of WBS, you can choose to opt in or out of further contact with us. We also receive non-member data through networking (e.g. business cards, event registrations) and add these details, if relevant, onto our CRM or other data management system.
The personal data collected is stored in the WBS CRM system and other appropriate data management systems, both paper based and electronic.
Personally identifiable information will not be disclosed to any third party except if permission has first been obtained from the users. The data will not be transferred to any agency located outside the EU. At regular intervals, we will:
review the length of time we keep your personal data for
WBS uses reasonable measures to safeguard personally identifiable information. The implemented measures will be appropriate to the type of information maintained and compliance with all relevant legislation governing protection of personal information. Measures are implemented to preserve the confidentiality, integrity and availability of the personal information. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we limit access to your personal data to only those employees, contractors or agents who have a legitimate business need to have access to that data. The employees, contractors or agents will process your personal data in accordance with our instructions. They will be subject to a duty of confidentiality and due care with respect to handling the personal data. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. WBS employees are trained on data security and information protection. Relevant areas of the WBS website will employ Secure Socket Layer (“SSL”) or Transport Layer Security (“TLS”) encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information collected and retained by WBS.
WBS is a membership organisation and for its legitimate business interests, must maintain contact information on its members and the wider business community to communicate information on membership, events, training courses, policy and research, trade and any other WBS products or services. The WBS also sends promotional material promoting its events, training courses, membership services, business support services, policy and research work and other relevant offerings. From time to time, WBS collaborates with other relevant organisations and companies to promote other programs that may be of interest to members and the wider business community. In such cases, WBS does not provide these organisations with any personally identifiable information but may distribute the organisation’s information on their behalf to those who may legitimately be benefited from receiving such information or have elected to receive such information. If you do not wish to receive marketing material, you may opt out. Every marketing e-mail will include an ‘unsubscribe’ link at the bottom. You may also notify WBS in writing as set out below.
We may use third party provided tools such as Hootsuite or Buffer to manage our social media interactions. If you send us a private or direct message via social media the message may be stored by Hootsuite or Buffer. Like other personal data, these direct messages will not be shared with any other organisations.
The General Data Protection Regulations gives you the right to access your personal data held by us (“subject access request”). If you have an established business relationship with WBS, you may request from us a list of the categories of personal information held about you. Subject access requests must be made in writing to the details below. We will respond to the request within a reasonable period and in any event within one month as required by the relevant provisions in the GDPR.
It is important that the personal data we hold about you is accurate and current. We will take all reasonable measures to ensure that the personal data we hold about you is accurate. We have also implemented procedures to enable you to review and correct your personal information, should there be any changes to your circumstances or errors in the gathered data. When you make a request to access or review the personal data we hold about you, we will request you to verify your identity before the request can be fulfilled.
In addition to the rights of access, review and correction, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please e-mail firstname.lastname@example.org or send a letter marked “Data Protection” to WBS offices at Unit 37, City Quay, Camperdown Street, Dundee, DD1 3JA
If you have further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the data protection authority for the UK. Please visit https://ico.org.uk/ for more details on your data protection rights and how to contact them.