How The Neuroverse collects, uses, stores and protects your personal data — and the rights you have over it.
The Neuroverse is the data controller for personal data about clients, prospective clients, job applicants, current and former employees, event/training attendees, and newsletter subscribers. This privacy notice explains how we use their data, outlining the collection, use, and storage of data, and the responsible party for keeping it up to date.
We do not trade personal data for commercial purposes and will only disclose it if required by law, necessary to arrange your event/training attendance, or with your consent. The Neuroverse prioritises the privacy of its stakeholders, and this policy underscores our commitment to compliance with updated GDPR legislation.
We collect identifiable personal data or information that is specifically and voluntarily provided by visitors to our website, prospective clients, and partnerships contacting us directly. Identifying information, such as name, title, company address, email address, and telephone/fax numbers, may be collected for various purposes:
Data collected may include, but is not limited to:
This data is usually collected upon the first contact with the company, such as during onboarding. We do not use third parties to gather personal data. Personal and financial data are securely stored in encrypted systems, and physical documents are kept in locked filing systems. We retain personal data only for as long as needed in compliance with retention periods.
Our website does not collect or compile personally identifying information for dissemination or sale to outside parties for consumer marketing purposes, nor does it host mailings on behalf of third parties.
We use your Personal Data to meet contractual requirements, support our provision of a data protection service, and comply with legal obligations, such as tax purposes. We use your information for invoicing and tracking payments.
We use your name, contact information, and information about your business activities to follow up on inquiries via email, phone, or the contact us page on our website.
When you book a workshop, we collect your name, email address, contact telephone number, and payment details for administering the workshop. Information is retained for 12 months.
We use Google Analytics to collect standard internet log information and details of visitor behaviour patterns. This information is processed in a way that does not identify individuals.
Visitors can unsubscribe from mailing lists or any registrations by following instructions on the appropriate webpage or in communications. For assistance, visitors may contact us at maggie@unlockingtheneuroverse.co.uk.
Cookies are small text files placed on your computer by websites. To manage cookies, visit www.aboutcookies.org or www.allaboutcookies.org. Most web browsers allow control of cookies through settings.
Before The Neuroverse collects any data, we ensure that we have the legal basis to do so. Following GDPR legislation there are six grounds in which we can process your data; outlined below are the grounds we use.
We will ensure that we first have consent before collecting or processing your data. We will do this by only collecting personal data from the individual and no third party. Individuals will have to give us permission to hold their data, and they will be made aware as to the reasons behind us collecting such data.
We may also collect data for contract purposes. This will be for our employees, individual clients and organisations. We will collect personal data from them to be able to draw up contracts and configure terms and conditions for our business with them. This will protect both us, and the organisation.
We will collect your data for legitimate and vital interest. This can mean interests such as knowing individuals' next of kin for their health and safety, having organisations' and individuals' bank details to give and receive payment, and individuals' personal addresses for bank statements or sending deliveries.
We will collect your data for legal obligation. This includes employees' right to work and employees' dates of birth so we can comply with national minimum wage, and organisations' data so we can be sure we trade under the correct legal standards.
This is not an extensive list of how we may process your data. The Neuroverse holds the right to change this at any time. In these situations, this privacy notice will be updated.
The Neuroverse does not and will not share any personal data with any third party unless the individual has given us permission to do so. For individual and organisational data, this may be shared within the organisation to carry out necessary processes. Data will only be shared with departments and individuals on a need-to-know basis, and confidentiality will remain at the utmost importance across the whole organisation.
The data we collect will usually be stored in encrypted software. For this data we have the following guidelines for employees. These guidelines also apply to data that is usually stored electronically but has been printed out for some reason:
It must be protected from unauthorised access, accidental deletion, and malicious hacking attempts:
Personal data is of no value to The Neuroverse unless the business can make use of it. However, it is when personal data is accessed and used that it can be at the greatest risk of loss, corruption, or theft:
GDPR requires that organisations not keep any personal data for longer than is legally required. Therefore, once our business has been conducted with an individual, we will ensure we delete their information before the end of the stated retention period. This is usually up to two years from last contact. In terms of organisational data, we may keep this for longer than individuals' personal data after last contact, this is in case we wish to do business again in the future.
The Neuroverse respects the rights of individuals and their access to personal data. To access the data we hold on you, you can carry out a subject access request.
All individuals who are the subject of personal data held by the organisation are entitled to:
The Neuroverse has a central procedure for dealing with all requests for access to personal information. All requests will be dealt with by the business within 40 days of receipt of the request from the individual in writing, together with a £10.00 access fee. Any requests received must be passed immediately to the Finance Team, whether from employees or external sources.
As an individual whose personal data is processed by The Neuroverse, you have these rights:
If, at any time, you want to verify, update or amend your personal data please email maggie@unlockingtheneuroverse.co.uk.
You also have the right to lodge a complaint about our processing with the UK's Information Commissioner's Office (https://ico.org.uk).
For data inquiries, contact our internal information team at maggie@unlockingtheneuroverse.co.uk.