Privacy Notice

Data is obtained as a result of the personal relationship you have with the Business Engagement, Careers and Employability Directorate, and may include survey responses, business cards, emails, telephone correspondence, event booking or attendance, collaborative working with other teams within the University, or queries received via our website, email channels, other partners or social media

• We may also obtain information from third parties such as one of your colleagues, from your organisation or from publicly available information on your organisation's website or professional profile.
• Administration of employer/student engagement activities on and off campus e.g. administration and registration at events, careers fairs and or recruitment activities (including workshops), and the subsequent collection of feedback on impact of participation.
• Administration of applications to specific roles, whereby the University is the working with you, the employer, to promote specific opportunities and receive job applications from students on your behalf in the case of a Knowledge Transfer Partnership.
• Research and analysis relating to recruitment of students and graduates for management reporting and strategic planning of employer engagement purposes.
• Processing and recovery of accounts and payments, e.g. sponsorship and attendance of events and fairs.
• Building strategic, cross University of Suffolk partnerships and relationships, making connections between parties and communities interested in advancing or investigating areas of mutual Interest e.g. exploring funding opportunities with the Team, and connecting you to key academics relevant to the services we provide.
• To share with you information about upcoming events that we believe are relevant to your needs, business sector or areas of interest based upon our prior engagements, for example, sending out email newsletters, SMS or other messaging apps.

We may collect use and store the following personal data;

• Contact details, such as name, title, addresses (or approximate location), telephone numbers, fax number, email addresses
• Records of appointments and notes from meetings
• Social media handles
• Job title, employer/organisation, registered business/charity number
• Signature
• Bank details and information with regards to sponsorship of events/payment of events and services.

Storing your details with third parties

• We have a partnership with Innovation Labs Stowmarket and for the purposes of managing membership to our co-working space it is necessary to share contact details of members. 
• We may also store your data within Mailchimp for the purposes of sending out newsletters and within our Customer Relationship Management (CRM) system. 
• As part of our event booking process, we may use EventBrite, Microsoft Teams or Zoom or other third party online meeting/webinar systems. 
• For the purposes of securing funding or support for your business, we may share your contact details with organisations who operate or manage other growth or support programmes in the region. 
• Where several organisations are involved in planning specific events as partners, such as International Womens' Day, please note that your contact details will be shared with all partners to facilitate the organisation of the event and for follow up after the event. Each partner will have their own opt out processes and opting out of one, will not automatically opt you out of any follow up from other partners.

Whilst we endeavour to ensure the content and relevance of external websites is correct, we cannot be held responsible for the privacy policies of other sites. Please do not assume that external websites follow our Privacy Notice.

On rare occasions, we may need to share your data without your knowledge or consent, for other reasons that are exempt from the GDPR’s transparency obligations. We will always endeavour to balance respect for your individual rights and proportionate measures to safeguard:

• Public and/or national security;
• Prevention investigation, detection or prosecution of criminal offences;
• Breaches of ethics in regulated professions; and
• Protection of the vital interests, rights and freedoms of others, for example.

We thought it would be helpful to set out your rights under GDPR. You have the right to:

• withdraw consent where that is the legal basis of our processing
• access your personal data that we process;
• rectify inaccuracies in personal data that we hold about you;
• be removed, that is your details to be removed from systems that we use to process your personal data;
• restrict the processing in certain ways;
• obtain a copy of your data in a commonly used electron form; and
• Object to certain processing of your personal data by us.

Further information may be obtained from the Information Commissioner's Office (ICO), or by emailing the institutional Data Protection Officer on dataprotection@uos.ac.uk. 

You have the right to complain. A complaint can be raised through the University's Complaints Procedure. Alternatively, you have the right to complain directly to the ICO about the way in which we process your personal data.  

View the main University of Suffolk policies.

We may occasionally run free competitions at events. These will be free to enter, but may require completion of a survey or form and certain criteria may need to be fulfilled by those entering (e.g. location, business type, event attendance) this will be made clear. To facilitate the delivery of prizes, we may need to share your contact details with a third party. Any data sharing will be kept to a minimum and will be used for administration purposes only. The third parties may subsequently invite you to subscribe to receive regular updates directly from them - this is entirely optional and you will have the right to unsubscribe at any time. Terms and conditions of any prize draw will be made available to entrants, along with closing dates.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.  In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Data provided to one of our Business Development and Knowledge Exchange (BDKE) team, may be shared with other University of Suffolk teams for the purposes of project administration/completion.