Technology in Professional Services privacy notice
This privacy notice tells you what information we collect, use and why.
Contact details
technologyaccelerator@lancaster.ac.uk
What information we collect, use, and why
We collect or use the following information when you register for an account to provide and improve products and services for clients:
- Names and contact details
- Addresses
- Occupation
- Usage data (including information about how you interact with and use our website, products and services)
- Website user information
- Company name
- Sector
- Company size
- Organisation’s region
We collect or use the following personal information for information updates or marketing purposes:
- Names and contact details
- Website and app user journey information
We collect or use the following personal information for scientific or historical research purposes, for statistical purposes or for archiving in the public interest:
- Names and contact details
- Addresses
We collect or use the following personal information for recruitment purposes:
- Contact details (eg name, address, telephone number or personal email address)
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website: https://ico.org.uk/
Which lawful basis we rely on may affect your data protection rights which are set out in brief below.
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
- Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure - You have the right to ask us to delete your personal information.
- Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
- Your right to object to processing - You have the right to object to the processing of your personal data.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. Our legitimate interests are:
- By collecting email contact details we are able to provide updates about resources available from the TiPS repository (e.g. as new case studies become available).
Our lawful bases for collecting or using personal information for information updates or marketing purposes are:
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone.
- By collecting email contact details we are able to provide updates about resources available from the TiPS repository (e.g. as new case studies become available).
Our legitimate interests are:
Our lawful bases for collecting or using personal information for recruitment purposes are:
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone.
- By collecting email contact details we are able to provide updates about opportunities to participate in TiPS programmes.
Our legitimate interests are:
Where we get personal information from
- Directly from you through the registration process.
How long we keep information
We keep information submitted when registering on the website until an account is deleted.
We use Google Analytics for some aspects of the website.
- _ga: Cookie set by Google Analytics - Expires after 12 days
- _gid: Cookie set by Google Analytics – Expires after a session
- alert_*_closed: Cookie set by the Tips site, used to store user choice for dismissing alert banners - Expires after a session
- _GRECAPTCHA: Cookie set by Google reCAPTCHA for spam protection - Expires after 6 months
The registration system also collects data that expires at the end of a session:
- PHP Session (CraftSessionId): Maintains the user's web request session across the front end. By default, it is named CraftSessionId (customizable via phpSessionName in general settings).
- CSRF Token (CRAFT_CSRF_TOKEN): Used for Cross-Site Request Forgery protection on forms (like login, registration, and password reset) when CSRF protection is enabled.
- Remember Me Username (<random-prefix>_username): Set if the user checks a "remember me" or username-persistence option during login, storing the username for a configured duration.
- User Identity (<random-prefix>_identity): While primarily used for Control Panel (admin) authentication, front-end user sessions that rely on persistent auto-login (enableAutoLogin) utilise identity tokens managed via Craft's craft\web\User session handling.
Your rights
If you have any questions about our use of your personal information, you can contact us:
Email: technologyaccelerator@lancaster.ac.uk
