Bioregional is committed to protecting and respecting your privacy and your data.
For the purpose of the General Data Protection Regulations 2016, the Data Protection Act 1998 (the Act) and the Privacy and Electronic Communications Regulations 2003, the data controller is Bioregional Development Group of The BedZED Centre, 24 Helios Road, Wallington, Surrey, SM6 7BZ. Bioregional Development Group is a registered charity with registration number 1041486.
In order for us to deliver an effective service to you it is necessary for us to store and use personal information about you. We will treat all information supplied by you in accordance with this policy.
Information supplied to us will be processed and stored on a secure server and may be used in connection with future visits to this website to facilitate easy repeated use. Transaction processes will use data, encrypted using a Secured Socket Layer (“SSL”) session. You should ensure that your version of your web browser supports SSL.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Depending on how you use the website, we may collect and process the following data about you:
All storage, use and transmission of personal information relating to an individual or company is subject to the Act. The Act gives you the right to access information held about you. We will provide you with a copy of this free-of-charge on your first application. Any further request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy.
While we do our best to protect your personal data, the transmission of information over the internet is never completely secure. We cannot guarantee the security of your data transmitted to our site and in using our website you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
We may collect information about your computer, including operating system and browser type, for system administration and to report aggregate information to our advertisers. We have anonymised IP addresses through Google Analytics so we are not collecting any personally identifiable data.
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
Tidio Live Chat
We use Getsitecontrol to deploy pop-up banners and call-to-action widgets in order to help signpost web content for our users. Currently we do not process any identifiable user data via Getsitecontrol. You can read their GDPR statement here.
Third parties and your information
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985 and section 1159 of the UK Companies Act 2006 as applicable.
We may also have to disclose your personal information to relevant third parties such as our website developers. We will, except where required by law, keep your information confidential and will not disclose any such information except where a disclosure is made at your request or with your consent.
In some cases, we may wish to pass your data on to third parties when we are working with them in partnership on sustainability issues. However, in cases where we would like to pass on your data to our partners we would only do this if you have given permission when we collect your data. Bioregional does not otherwise sell, rent, or disclose any information to third parties for their marketing purposes.
You acknowledge and agree that some of the data that we process may amount to sensitive personal data under the Act. Your continued use of the website amounts to agreement that we may process such data. We, our subcontractors and agents will apply appropriate technical and organisational measures to prevent the unauthorised processing of personal data and protect against accidental loss of or damage to personal data.
You may contact us at anytime to have data deleted. Please see below for contact details of our Data Protection Manager.