The purpose of this privacy notice (“Notice”) is to give you information on how Node4 Ltd collects and processes your personal data. This Notice covers any data you may provide when using our website, when you make contact with us via the website, when you sign up to receive our newsletter, take part in a survey or any other marketing initiatives.
Node4 are strongly committed to keeping your personal data safe and as such we design our services with security and your privacy in mind by ensuring that we have appropriate controls in place to protect your personal data.
Personal data means any information about an individual from which that person can be identified either directly or indirectly.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We may collect, use, store and transfer different kinds of personal data about you including:
We use different methods to collect personal data about you including through:
Direct interactions with you: you may give us your identity and contact data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
Cookies: We may collect certain personal data in part through the use of a technology called a “cookie.” A cookie is a small text file that is saved to your device using your browser, which allows sites to recognize you and store preferences and other information if you return to the site using the same device and browser. Please refer to our cookie policy for more information.
Third parties which are publically available sources. We may receive personal data about you from various third parties and public sources as set out below:
Third parties who are acting contractually on behalf of Node4 to process the data collected from the Website and online forms.
What is our legal basis to process your personal data?
Node4 processes your personal data lawfully. What this means is that we will only process your personal data where we have identified a legal basis to do so. The table below sets out the lawful basis Node4 relies upon to process your personal data.
Purpose | Personal Data | Legal Basis |
| To respond to enquiries (online and otherwise). | Name, email | Legitimate Interest |
| To provide you with our direct marketing communications by email or text. | Name, email and telephone number | Consent or Legitimate Interest |
| To provide you with our direct marketing communications by telephone or post. | Name, telephone and address. | Legitimate Interest |
| Subscriptions to our newsletter and publications | Name, email and telephone number | Consent |
| Where you have entered into a contract with us and processing is necessary to fulfil our obligations to you. | Name, email and telephone number, contract details | Contract |
| Your survey responses | Name, email | Legitimate Interest |
| Collecting your feedback | Name, email and telephone number, services used and feedback | Legitimate Interest |
| Non-essential web cookies | Technical Data | Consent |
| Functional web cookies | Technical Data | Legitimate interest |
With whom will you share my personal data?
We do not sell your personal data to third parties. We may however, share your information within our organisation or with third party suppliers who work with Node4. The third parties with whom we share your personal data include service providers, for example, those who support our website and online form functionality. We may also be share personal data with our professional advisors, cloud storage suppliers, marketing platforms providers that assist us with our business operations. There may be also occasion where we are obliged to share your personal data because we have a legal or regulatory obligation to do so.
Will my personal data be transferred outside the UK?
We may transfer your personal data outside the UK to other members of the Node4 group and where our third party suppliers are located outside the UK. Some of our offices and suppliers are based outside the EEA. Where we transfer your personal data outside the UK and the EEA, we ensure adequate safeguards are in place to protect your personal data.
Whenever we process your personal data, we’ll only keep it for as long as is necessary and in accordance with our retention policy. Please contact dpo@node4.co.uk if you require additional information about our retention policy.
| Where you have a contract with us | 6 years following the end of the contract |
| Where you have a subscription with us | One year following the end of the subscription |
| Where you ask us to send you marketing material | Until such time as you notify us that you do not wish to receive marketing communications from us |
| Where you contact us to make a website enquiry | 6 months after your enquiry is resolved |
| Where you make a complaint | For 6 years after the complaint is received. |
| Survey responses | Your survey responses will be anonymised following the end of the survey period |
| Cookies | For up to 12 months |
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. These parties will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.
Our Contact details are:
Node4 Limited
Millennium Way
Derby
DE24 8HZ
Tel: 0845 123 2222
Email: dpo@node4.co.uk
You have a number of rights under data protection law in relation to your personal information and if you want to exercise any of these rights, please contact us at dpo@node4.co.uk and we’ll be happy to help. These rights are as follows:
If you have any data protection complaints, you may contact the Information Commissioner’s Office (ICO) by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Email: casework@ico.org.uk Telephone: 0303 123 1113
We’d like to try and help with any concerns you may have before you contact the ICO, so please get in touch with dpo@node4.co.uk in the first instance.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.
We reserve the right to amend this privacy notice from time to time and will publish changes here. If we need to let you know about any changes we make, we will make reasonable attempts to contact you.