Privacy policy

Who this policy applies to

This policy applies to personal information collected through the AI Growth Zones Wales website, including when you:

• visit the site
• contact us by email
• submit a pledge or supporter form
• sign up to receive campaign-related updates
• interact with downloadable materials or related site features

If the site later adds additional services, forms, or integrations, this policy may be updated to reflect that. Privacy notices should be kept accurate and updated when purposes or processing change.

Who is responsible for personal information

For the purposes of data protection law, the controller of personal information collected through this website is:

AI Growth Zones Wales
Email: hello@aigrowthzones.wales

If you have any questions about this policy or about how your information is used, please contact us using the details above. The ICO says people should be told who the controller is and how they can contact them.

What personal information may be collected

Depending on how you use the site, we may collect:

• your name
• your email address
• the organisation or role you provide
• information you include in a message or form submission
• supporter or pledge details you choose to submit
• technical information needed to operate the site, such as limited server or request information
• cookie-related information where relevant, as explained in the Cookie Policy

We aim to collect only the information that is reasonably necessary for the relevant purpose. UK data protection law requires organisations to be clear about what they collect and why.

How personal information is used

We may use personal information to:

• administer and respond to pledge or supporter submissions
• reply to enquiries you send us
• send campaign-related updates where appropriate
• maintain records of supporter engagement
• improve the website and campaign communications
• protect the security and integrity of the site
• comply with legal obligations where they apply

A privacy notice should explain both the purpose of processing and the lawful basis relied on for it.

Lawful bases for processing

Depending on the context, we may rely on one or more of the following lawful bases under UK GDPR:

Consent

Where you actively choose to receive updates or agree to optional processing, we may rely on your consent. If consent is required under PECR for marketing or similar communications, consent is also generally the appropriate UK GDPR lawful basis for that processing.

Legitimate interests

We may process personal information where it is reasonably necessary for legitimate campaign, website administration, security, supporter management, or communication purposes, provided those interests are not overridden by your rights and interests. The ICO describes legitimate interests as flexible, but says it must be assessed properly and documented in context.

Legal obligation

We may process personal information where needed to comply with legal or regulatory requirements. The ICO’s lawful basis guidance requires organisations to identify the correct basis before they begin processing.

Campaign communications

If you ask to receive updates from us, we may use your contact details to send you campaign-related information, updates about the framework, publication updates, events, or related engagement activity.

Where the law requires consent for this type of communication, we will seek it before sending such messages. You can opt out at any time by using the unsubscribe option where provided or by contacting us at hello@aigrowthzones.wales. People always have the right to object to direct marketing, and if they object, that use must stop.

Sharing personal information

We do not sell personal information.

We may share personal information only where reasonably necessary, for example with:

• website hosting or technical service providers
• form-processing or email service providers used to operate the site
• professional advisers where necessary
• public authorities, regulators, or law enforcement where required by law

If we share personal information with service providers, we expect that to be for defined purposes connected with operating the website or campaign. The ICO says organisations must identify a lawful basis for any sharing and explain recipients in the privacy information they provide.

International transfers

If any service provider used in connection with the website stores or processes personal information outside the UK, we will take steps intended to ensure that appropriate safeguards are in place where required by law.

If international transfers become relevant to this site, we will update this policy with more specific information. The ICO says privacy information should explain transfers where applicable.

Retention

We will keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to administer supporter records, respond to enquiries, maintain campaign communications, resolve disputes, and comply with legal obligations.

Retention periods may vary depending on the type of information and the reason it was collected. Privacy information should explain retention periods or the criteria used to determine them.

Individual rights

Depending on the circumstances, you may have the right to:

• be informed about how your information is used
• request access to your personal information
• request correction of inaccurate information
• request deletion of your information
• request restriction of processing
• object to certain types of processing
• request transfer of your information in some cases
• withdraw consent where consent is the basis relied on

The rights available can depend on the lawful basis being used, but the right to object to direct marketing always applies.

To exercise any of these rights, contact hello@aigrowthzones.wales.

Complaints

If you have concerns about how your personal information is handled, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection matters. The ICO says privacy notices should tell people how they can complain if they have concerns.

Cookies and similar technologies

This website may use cookies and similar technologies for essential operation and, where applicable, analytics or embedded third-party content. More information is set out in the Cookie Policy.

The ICO treats cookies and similar technologies separately and expects users to be given clear information and appropriate control where consent is required.

Third-party links

This website may contain links to third-party websites, documents, or platforms. If you follow a link to another site, that site will have its own privacy terms and practices. We are not responsible for the privacy practices of third-party sites.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the website, campaign activity, service providers, or legal requirements. The latest version will always be published on this page with the updated date shown above. The ICO says privacy information should be kept up to date when processing changes.

Contact

If you have any questions about this Privacy Policy or about how personal information is used on this website, contact:

AI Growth Zones Wales
Email: hello@aigrowthzones.wales