Bioregional is committed to protecting and respecting your privacy and your data.

This privacy policy sets out how Bioregional uses and protects any information that you give Bioregional when you use this website. Please contact our Data Protection Officer (details below) if you have any questions or would like to delete your data.

For the purpose of the General Data Protection Regulations 2016, the Data Protection Act 1998 (the Act) and the Privacy and Electronic Communications Regulations 2003, the data controller is Bioregional, Sustainable Ventures, County Hall, Belvedere Road, London SE1 7PB. Bioregional Development Group is a registered charity with registration number 1041486.

Privacy statement

In order for us to deliver an effective service to you it is necessary for us to store and use personal information about you. We will treat all information supplied by you in accordance with this policy.

This policy only applies to this website and you should refer to the privacy policy of any third party website that you access in connection with this website, whether by means of hyperlink or otherwise.

Security

Information supplied to us will be processed and stored on a secure server and may be used in connection with future visits to this website to facilitate easy repeated use. Transaction processes will use data, encrypted using a Secured Socket Layer (“SSL”) session. You should ensure that your version of your web browser supports SSL.

Legal basis for processing this information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• Where you have provided your consent.

Information we may collect from you

Depending on how you use the website, we may collect and process the following data about you:

• Information that you provide by filling in forms on our site www.bioregional.com (our site) including without limitation your name, address, telephone number, position and the organisation you work for (where applicable). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with the website.
• If you contact us, we may keep a record of that correspondence.
• If you sign up to our mailing list via the double opt-in process, we will keep a record of the information you provide
• Details of your involvement in any volunteer work or campaigns in relation to Bioregional Development Group or our affiliates.
• Details of any contracts that you have entered into with us or any work that you have carried out in conjunction with us.
• Surveys used for research or marketing purposes, although you do not have to respond to them.
• Details of your interest in Bioregional Development Group, our work or a related subject.
• Details in regard to your attendance at events, including confirmation emails.
• Details of transactions you carry out through our site and of the fulfillment of your orders, including products, invoices and payment receipts.
• Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

How we use this information

• Identify you when you re-visit the site.
• Help administer any accounts, services and products or facilitate purchases or services offered by us from time to time.
• Provide you with information, products or services that you request from us or which we feel may interest you and update you as to services offered. If you do not wish to receive this information, please contact our Data Protection Manager using the contact details below.
• Share relevant knowledge and experience and make improvements based on your feedback.
• Publish anonymous and statistical data as part of dissemination of our monitoring and research work.
• Allow you to participate in interactive features of our service, when you choose to do so.
• If you have signed up to our mailing list via the double opt-in process, we will send you marketing emails. You can unsubscribe at any time via the link at the bottom of these emails.
• Ensure that content from our site is presented in the most effective manner for you and for your computer.

All storage, use and transmission of personal information relating to an individual or company is subject to the Act. The Act gives you the right to access information held about you. We will provide you with a copy of this free-of-charge on your first application. Any further request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy.

While we do our best to protect your personal data, the transmission of information over the internet is never completely secure. We cannot guarantee the security of your data transmitted to our site and in using our website you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.

IP addresses and cookies

Google Analytics

We may collect information about your computer, including operating system and browser type, for system administration and to report aggregate information to our advertisers. We have anonymised IP addresses through Google Analytics so we are not collecting any personally identifiable data.

Cookies

The website makes use of cookies. Cookies are data files that are stored on your computer’s hard drive and keep records of your visit to a website. They allow us to recognise you and tailor your visit to suit your individual preferences.

By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.

You may be able to configure your web browser to prevent the use of cookies although some functions or services may not be available. If any third party websites you can access through the website use cookies, we cannot access or control that. If you want to know more about cookies you could try visiting www.allaboutcookies.org.

Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback.

Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

LinkedIn

We occasionally run promoted posts on LinkedIn, and we use LinkedIn's Insights Tag on our website to track and optimise our ad campaigns. You can read all about LinkedIn's Insights Tag here, and the LinkedIn Privacy Policy here.

Tidio Live Chat
We use Tidio, a live chat platform, in order to help connect web users with our team if they'd like a quick response to a question. We collect email addresses only with the consent of the users, in order to start the chat. The messages and data exchanged are stored within the Tidio application. For more information, please refer to Tidio's Privacy Policy. We do not make any use of these messages or data other than to follow up on users’ enquiries. Your personal data will be processed and transmitted in full accordance with the General Data Protection Regulation (GDPR).

Getsitecontrol
We use Getsitecontrol to deploy pop-up banners and call-to-action widgets in order to help signpost web content for our users. Currently we do not process any identifiable user data via Getsitecontrol. You can read their GDPR statement here.

Ecwid
Ecwid is an Ecommerce platform used to process orders for our One Planet Living® Associates scheme. Ecwid's privacy policy can be viewed here.

PayPal
We use PayPal as the payment gateway for users purchasing a subscription to our One Planet Living® Associates scheme. PayPal's privacy policy can be viewed here.

Third parties and your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985 and section 1159 of the UK Companies Act 2006 as applicable.

We may also have to disclose your personal information to relevant third parties such as our website developers. We will, except where required by law, keep your information confidential and will not disclose any such information except where a disclosure is made at your request or with your consent.

In some cases, we may wish to pass your data on to third parties when we are working with them in partnership on sustainability issues. However, in cases where we would like to pass on your data to our partners we would only do this if you have given permission when we collect your data. Bioregional does not otherwise sell, rent, or disclose any information to third parties for their marketing purposes.

You acknowledge and agree that some of the data that we process may amount to sensitive personal data under the Act. Your continued use of the website amounts to agreement that we may process such data. We, our subcontractors and agents will apply appropriate technical and organisational measures to prevent the unauthorised processing of personal data and protect against accidental loss of or damage to personal data.

How long will you keep my data for?

• BedZED tours: We will delete any personally identifiable data after two years
• Download forms: Your information will be kept for three years.
• Mailing list: We will send an email every three years to those signed up to our newsletter to ask you to update your details. You can also unsubscribe from our mailing list at any time using the link at the bottom of our emails.
• Events: We will delete any personally identifiable data after two years.

Right to be forgotten

You may contact us at anytime to have data deleted. Please see below for contact details of our Data Protection Manager.

Changes to our privacy policy

Any changes we may make to our privacy policy will be posted on this page.

Contact

If you have any questions, comments or requests regarding this privacy policy you should address them to The Data Protection Manager, Bioregional, Sustainable Workspaces, County Hall, Westminster Bridge Road, London SE1 7PB or email info@bioregional.com