Last updated 15 July 2024
Privacy Statement
We’re a small team of data protection consultants, providing no-nonsense advice and support to clients across a range of sectors. We publish guides and insight to support people in their day-to-day roles. We also run events where professionals share their experience, and we regularly deliver data protection training.
The aim of this privacy statement is to tell you how we collect and use personal information about you. It explains how you can ask for a copy of this information, or ask us to delete it.
About us
The Data Protection Network is operated by Data Protection Network Associates Ltd (“DPN Associates”).
DPN Associates is a UK-based data protection consultancy, helping organisations to identify their data compliance risks and advise them on how to implement effective and practical solutions. When we refer to “we”, “us” or “our” in this Statement we mean DPN Associates.
The Data Protection Network (DPN) is an online platform located in the UK. It’s dedicated to providing expert opinion, quality resources and learning materials, to both experts and non-experts in the field of data protection and privacy. The Data Protection Network/DPN is a trading name of DPN Associates.
Our registered office is: 12 Old Great North Road, Stibbington, Peterborough PE8 6LR. Our company registration number is 12568068.
We do not actively offer or promote our services to European citizens and the personal information we handle is governed by UK data protection law.
How to contact us
If you have any questions about this Privacy Statement or would like to contact us about any other matter, please use the following contact information:
Email: info@dpnetwork.org.uk
Address: 12 Old Great North Road, Stibbington, Peterborough PE8 6LR
How we collect your personal information
We collect information about you in the following ways:
- When you give us contact details in asking for information about our services, either via the telephone, our online enquiry forms or in-person.
- When you engage our consultancy services and/or data protection training.
- When you sign up as a subscriber for our emails.
- When you register to attend one of our events or webinars, or download one of our in-depth guides/reports.
- When you complete one of our surveys. Routinely we do not ask for personal information on our surveys, and responses are treated anonymously. Should this not be the case we would clearly bring this to your attention.
- Via openly available public sources (e.g. LinkedIn or company websites).
Types of personal information we collect
The details we routinely collect include:
- Full name
- Email address
- Job title
- Phone number
We do not collect any details considered particularly sensitive under data protection law, such as health data, biometrics or ethnicity. Our services are not aimed at children.
Our use of cookies
Our website uses essential and basic aggregated site performance cookies to better understand how visitors browse our website and to ensure we provide users with interesting and useful content. We collect your consent to use non-essential cookies and similar technologies.
To find out more about these and how to update your cookie preferences, please click on the green cookie icon. You should see this in the bottom left on our website. Alternatively click on Cookie Settings in the navigation bar at the bottom of our website.
How we use your personal information
The following table gives you details of the reasons, ‘purposes’ for which we collect and use information about you.
Under data protection law, we need to make sure we have a lawful basis for our activities. The table includes which lawful basis we rely on, and shows where we’ve assessed we can rely on legitimate interests.
Purpose | Lawful basis |
---|---|
To fulfil a query, request for services and/or to administer our services to clients | Our Legitimate Interests, which we have balance with the interests of our prospects and clients. |
To facilitate your attendance at one of our events or webinars, or facilitate access to one of our online courses | For the performance of a contract or agreement. |
To maintain records of prospective, current and past clients and our suppliers | Our Legitimate Interests, which we have balanced with the interests of our clients, suppliers and business contacts. |
To contact you to ask if you might be interested in being a guest speaker or sponsoring one of our events. | Our Legitimate Interests, which we have balanced with the interests of individuals and business contacts. |
To contact you at your business email address about our events, reports, topical articles and services | Our Legitimate Interests, which we have balanced with the interests of individuals. A clear opportunity to object will always be provided. |
To send email newsletters to you, if you have signed up via our website | Your consent. |
To send you feedback surveys | Our Legitimate Interests, which we have balanced with your interests. We’ll always provide an opportunity to opt-out. |
To share your event registration details with third-party Sponsors | Our Legitimate Interests, which we have balanced with the interests of our clients, suppliers and business contacts. A clear opportunity to object will always be provided. |
About our email newsletters
On the DPN website we invite you to opt-in and give your consent to receive our email newsletters. We deploy pixels, via our email service provide Mailchimp, to be able to assess open rates. You can unsubscribe from these email newsletters at any point by clicking on the unsubscribe link on any email you receive from us. Alternatively, you can ask us to remove your details by emailing info@dpnetwork.org.uk.
About our events and reports
We run regular webinars and other events on topical data protection areas and challenges. When you register, we collect your name and business email address, along with your job title, organisation and location. We use this information to facilitate your attendance at the webinar/event. It also allows us to gain a flavour of the job roles and sectors attendees work in so we can tailor the content of our events accordingly, where appropriate. We may also ask for your details when you download one of our in-depth reports.
Your details may be used by us to send you email communications to your business email address about future events and services. We’ll always provide you with a clear opportunity to indicate you’d prefer us not to contact you.
We may also share your details with sponsors of our events or whitepapers. We’ll always make this very clear, and you can always indicate you don’t want us to do this.
Your rights regarding your personal information
You have a number of rights under UK data protection law. These are listed below, along with our contact details, should you wish to make a request.
- Informed: You have the right to be informed about how we handle your personal data. This privacy statement is one of the ways we do this.
- Access: You have the right to ask for a copy of the personal data we hold about you and the purposes for which we are using it. ‘Personal data’ is any information which can directly, or indirectly, identify you.
- Rectification: You have the right to ask us to change any details which are incorrect or need updating.
- Erasure: You have the right to ask us to delete your personal details. We will assess any deletion request on a case by case basis. If you’re subscriber to our email list, we can quickly fulfil your request, but in other circumstances there may be reasons why we need to keep information about you. If you have authored any content on the DPN and would like this to be deleted, please let us know.
- Object: You have the absolute right to object to receiving direct marketing from us. You also have the right to raise an objection about how we are handling your personal information.
- Restriction: You have the right to ask us to restrict or suppress your personal information. This would mean we’d store it but not use it.
- Portability: You have the right to obtain and reuse your personal data for your own purposes across different services. Due to the nature of our business and the limited nature of the personal data we handle, we do not believe this right is likely to apply.
We don’t carry out any activities involving automated decisions being made about you.
If you’d like to exercise any of these rights or have any other query please use the following contact details:
Email: info@dpnetwork.org.uk
Address: 12 Old Great North Road, Stibbington, Peterborough PE8 6LR
To fulfil your request, depending on our relationship with you, we may need to ask you for proof of identity. We’ll handle any requests as soon as possible, at least within one calendar month.
If you’re concerned about the way in which we have collected and used your personal information, please contact us and we’ll do our best to resolve this with you. If you remain unhappy with how we have handled your personal information, you have the right to raise a complaint with the UK’s Information Commissioner’s Office.
How we keep your personal information secure
We take appropriate steps to make sure personal information is stored in a secure environment to prevent any unauthorised access. We are Cyber Essentials certified. We store your personal information at our registered offices, at other DPN Associates consultants’ sites in the UK and on occasion when working in our clients’ offices.
Who we share personal information with
Other organisations: We won’t share your personal information with any other businesses for them to use for their own marketing purposes, unless we have specifically informed you (see ‘About our events’ above). We may disclose your personal data if required to do so by law.
Service providers: We use external service providers to support the efficient running of our business. For example to send email newsletters, run online events, manage our accounts and develop our website. These service providers handle your personal data on our behalf, and we have appropriate contractual arrangements in place covering these relationships.
Where a service provider is based outside the UK the transfer of personal information (including access to it) is based on one of the following safeguards: an EU Adequacy decision (recognised by the UK), EU Standard Contractual Clauses (SCCs) and the UK Addendum to EU SCCs. If you would like further information please email info@dpnetwork.org.uk.
Other third parties: In the event of a sale or acquisition, we may share personal data with the other party as long as that party uses personal information for the same purposes you originally gave it to us for.
How long we keep your personal information for
We keep your personal details for as long as is necessary for the reasons we are using them for. How long, varies depending on our relationship with you. We routinely update our email subscriber lists to make sure those who are not engaged are removed. If you would like more information about this, please contact us at info@dpnetwork.org.uk.
External links
Please remember if you use a link to go from our website to another website, or you request a service from a third party, this Privacy Statement will no longer apply once you have left our website. Your browsing and interaction on any other website is subject to that website’s own rules and policies.
Updates to this statement
We regularly review and update this Statement to improve it, and where necessary to make changes if our activities alter or there are regulatory changes. We encourage you to review it from time to time. If we make any significant changes, we’ll endeavour to contact you to let you know.