Procurious Limited is committed to protecting and respecting your privacy. As a network connecting professional people, it is important that we treat your personal data properly and with care.
Please read the following carefully to understand how we will respect and manage your personal data. By visiting our website, or by providing us with any information about yourself, you are accepting and agreeing to the practices described in this notice.
For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) as applicable in the UK and as amended, supplemented or replaced from time to time (“Data Protection Law”), the data controller is Procurious Limited of 3rd Floor One London Square, Cross Lanes, Guildford, Surrey, United Kingdom, GU1 1UN.
This notice sets out our commitment to be transparent about the data we collect about you, how it is used and with whom it is shared.
1. Information provided to Procurious
1.1 Any information you provide Procurious
This is any personal information that you provide Procurious by:
- a. filling in forms on our website
- b. corresponding with us by phone, e-mail or otherwise;
- c. registering to use our site or become a Procurious member, and completing your profile;
- d. subscribing to any service that we offer;
- e. signing up for any learning programme, event, or professional development tool;
- f. subscribing to any mailing list;
- g. participating in discussion boards or social media functions on our site;
- h. entering competitions, promotions and surveys;
- i. reporting a problem with our site, products or services; or
- j. applying for a job.
The information you give us may include your name, address, e-mail address, images, phone number, skype contact, financial and credit card information, professional qualifications, professional affiliations, education, details about your work and career and personal description.
If you provide any information about other individuals such as colleagues or next of kin, you warrant us that you are entitled to provide that information and authorise us to process this data on the same basis as outlined in this privacy notice.
1.2 Information Procurious collects about you
When you visit our site, we may automatically collect the following:
- a. technical information, including the Internet Protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, browser plug-in types, plug-in versions, operating system and platform;
- b. information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), items you viewed, page response times, download errors, length of visits to pages, page interaction information (such as scrolling, clicks, mouse-overs) and methods used to browse away from the page.
1.3 Information we receive from other sources
We may receive information about you from sources other than directly from yourself, which may include social media such as LinkedIn, Facebook and Twitter. We may also receive information from partners who we work with, such as event sponsors.
2. Data Processing
2.1. Legal basis of Processing
Data Protection Law requires us to fulfil at least one “legal ground” for processing data that contains personally identifiable information, currently set out in Article 6 of the General Data Protection Regulation. The grounds applicable to the personal data to which this notice relates to are:
- a. Where the processing is necessary for us to perform a contract that you are party to, or to take steps at your request prior to entering a contract;
- b. Where the processing is necessary for compliance with a legal obligation to which we are subject;
- c. Where processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party (provided that your fundamental rights and freedoms are not overridden). Our legitimate interests comprise the management, marketing and promotion of our business, products and services, the administration of your participation in the Procurious community and its events, programmes and other activities, and the recruitment and management of staff.
If more than one of the above grounds apply to the processing of data in question, the applicable ground will be the first one listed.
2.2 How Procurious processes the information you provide
We will use this information to:
- a. administer your membership if you join as a Procurious member;
- b. carry out our obligations arising from any contracts entered into between you and us;
- c. deliver information, products and services that you request from us;
- d. share information about other products and services we or our partners offer that are similar to those that you have already obtained from us or enquired about;
- e. permit selected third parties to provide you with information about products or services we feel may interest you, so long as, where required by law, you have given the relevant consent;
- f. notify you about changes to our services, events or other items;
- g. ensure that content from our site is presented in the most effective manner for you and for your device;
- h. manage our own legal or risk issues;
- i. process job applications submitted to Procurious, in order to evaluate and manage that application.
When you enter into a contract, or make a request, with Procurious you are required to provide the necessary information. Otherwise, we may not be able to fulfil the contract or request.
2.3 How Procurious processes the information we collect about you
We will use this information to:
- a. administer our site;
- b. manage internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- c. improve our site to ensure that content is presented in the most effective manner for you and for your device;
- d. allow you to participate in interactive features of our service, when you choose to do so;
- e. support our efforts to keep our site safe and secure;
- f. measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
- g. make suggestions and recommendations to you and other users of our site about content, goods or services that may interest you or them.
2.4 How Procurious processes the information we receive from other sources
We will aggregate multiple sources of data we collect about you from other sources and use this data only for the purposes outlined in this privacy notice.
3. Cookies and Pixels
Pixels or beacons may be included in our emails. These are similar to cookies, and may be used to track users’ activity in relation to our emails. If you become a Member or sign up to receive emails, newsletters etc, each email can collect limited information, for example about whether and when you opened our mail. If you do not want this information to be collectable, you should disable and not open images in your email application.
4. Information Disclosure
4.1. Within our group
You agree that we have the right to share your personal information with Procurious Limited and any group undertakings, for administrative purposes as defined in s1161(5) of the UK Companies Act 2006. This includes any undertaking which is under 50% or more ultimate common ownership with Procurious Limited, provided that they are either:
- a. within the UK or European Economic Area;
- b. in a country that the UK or European Union has decided has adequate data protection laws in place; or
- c. have provided appropriate data protection safeguards of the sort approved by the UK or European Union and provide effective rights and remedies for you.
Any use of one group member’s personal data (beyond administration) by other members of the group will be subject to all the requirements of Data Protection Law.
4.2. Parties we may disclose your information to
Procurious may disclose your information to third parties which may include:
- a. Sponsors (where you have given explicit consent);
- b. business partners, suppliers and sub-contractors for the performance of any contract we enter into with you.
We may disclose your personal information to third parties in the following instances:
- a. If we outsource any aspect of our business or systems, then we may disclose your personal data to our service provider(s); or
- b. If we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
- c. If we or a substantial part of our assets are acquired by a third party, in which case personal data held by us about our customers may be one of the transferred assets; or
- d. In the event of a legal obligation to an authorized body or to protect the rights, property, or safety of Procurious, our customers, or others. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
5. Special Categories of Personal Data
If you provide us with any special categories of personal data, you expressly consent (and you hereby do) to us processing that data for the purposes set out in clause 2.1. Under special categories of personal data, article 9 of the GDPR refers to information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, physical or mental health, sex life or sexual orientation or genetic or biometric data or personal data relating to criminal convictions and offences. If you do not want us to process any such categories, please do not provide it to us.
6. Data storage
6.1. Where we store your personal data
The data that we collect from you will be stored on our servers or those of our service providers. It will not be transferred to, and stored at, a destination outside the UK or European Economic Area ("EEA") unless:
- a. one of our group undertakings to which section 4.1 applies;
- b. to a processor acting on our behalf which is either (i) within the UK or EEA, or (ii) in a country that the UK or European Union has decided has adequate data protection laws in place, or (iii) has provided appropriate data protection safeguards of the sort approved by the UK or European Union and provide effective rights and remedies for you; or
- c. you have given consent to us transferring data about you to third parties outside the UK or EEA.
All payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site you are responsible for keeping this password confidential, and for all use made of your account with such password. We ask you not to share your password with anyone.
Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted via the internet; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
6.2. Length of data storage
Our policy is to ensure that each element of personal data is only stored for as long as is necessary for its purposes (as set out at section 2 above). The criteria that we will use in determining this will include our legal obligations, good industry practice and the guidance from relevant UK authorities. If you would like to know what that means in respect of your personal data, please contact us on [email protected].
If you decide to delete your account, then your personal data will be removed from our servers shortly afterwards.
7. Your rights
You have various rights under Data Protection Law. These include:
- a. the right to ask us not to process your personal data for direct marketing purposes, even if you have given consent;
- b. the right to withdraw any consent you may have given for our processing of your data – if you exercise this right, we will be required to stop such processing if consent is the sole lawful ground on which we are processing that data;
- c. the right to ask us for access to the data we hold about you (see section 8 below for further details);
- d. the right to ask us to rectify any data that we hold about you that is inaccurate or incomplete;
- e. the right to ask us to delete your data in certain circumstances;
- f. the right to ask us to restrict our processing of your data in certain circumstances;
- g. the right to object to our processing of your data in certain circumstances;
- h. the right to require us to give you the data we hold about you in a structured, commonly used and machine-readable format so that you can provide the data to another data controller.
You can exercise any of the rights set out above, free of charge, by contacting us at [email protected]. If we require any more information from you in order to process the request, we will ask this from you following your request.
If you submit unfounded or excessive requests to exercise any of these rights, we reserve the right to decline your request or make a reasonable charge for fulfilling your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk) if you are concerned that we are not respecting your rights under Data Protection Law. The Information Commissioner’s Office is the authority in the UK which is responsible for overseeing the application of, and enforcing, Data Protection Law.
8. Accessing your data
You have the right to obtain from Procurious a confirmation as to whether we are processing (including holding) personal data about you.
If we are processing personal data about you, you are entitled to be provided with:
- a. information as to the purposes for which we process the data;
- b. information as to the categories of the data that we are processing;
- c. information as to the recipients or categories of recipients to whom the data has or will be disclosed;
- d. information as to the envisaged period for which we will store the data, or if that has not been determined, the basis on which that period will be determined;
- e. a copy of the data (should you request further copies, we may make a reasonable charge which will inform you of at the time). Please note that this right is subject to the rights of others in relation to their own or someone else’s personal data.
9. Other websites
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
10. Changes to this privacy notice
Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, we will notify you by e-mail. Please ensure you review this privacy notice frequently to see any updates or changes.
If you have any questions, comments and requests regarding this privacy notice, please email them to [email protected].
Updated: July 2020