When you engage with our Business & IP Centre (BIPC) we will collect information about your business (potentially including financial information), as well as your contact details, and certain other data required to meet equality monitoring requirements (which will include Sensitive Personal Information in relation to your  ethnicity and gender).

We will use your personal information to provide you with the Services that you have requested from us, such as workshop bookings, attendance at events, advice sessions, and similar business support activities (e.g. in the performance of a contract with you). We will also use your contact information in order to supply you with relevant transactional documentation.

We may use your contact information to contact your business with information about our Services which we believe may be of interest to you. This is on the basis of our legitimate interests, as set out in the Privacy of Electronic Communication Regulations 2003 (as amended), which covers business to business email communications.

Many of the services that we offer through the BIPC are funded by the European Regional Development Fund (ERDF), which is administered by the Greater London Authority (GLA). Where the services that you have requested are funded by the ERDF we have a legal obligation to provide GLA and ERDF with your information for audit purposes, in order to ensure proper use of EU funding and that equality and diversity obligations are being met.

Many of the services that we offer through the BIPC are also available through our partner organisations in the British Library Business & IP Centre National Network. We may share your information with our partners in the Network as necessary to provide you with the services you have requested, and to carry out our legitimate interests in monitoring, auditing, and developing the services of the Network. Our Network partner organisations may also use your information for the same reasons.

The services that you have requested will be provided by a variety of third party consultants who will be experts in the relevant field. We will share your information with them for the purpose of providing the services, and they may also use your information to offer you further support outside of the Library’s service provision.

We may use various organisations to provide IT capabilities in support of our Services, and who may process your information on our behalf. These Data Processors will process your information only under contract to the Library, and may not use your information in any other way. In particular, we use the following systems to process your information:

• We use Hubspot, from Hubspot Inc., for marketing services. Hubspot may process your information in the United States, and is certified under the EU-US Privacy Shield Framework in order to implement appropriate safeguards in relation to your information. Hubspot’s Privacy Policy can be found at https://legal.hubspot.com/privacy-policy.
• We use Basecamp, from Basecamp LLC, to administer the BIPC Centre National Network. Basecamp may process your information in the United States, and is certified under the Eu-US Privacy Shield Framework in order to implement appropriate safeguards in relation to your information. Basecamp’s Privacy Policy can be found at https://basecamp.com/about/policies/privacy.
• We use Eventbrite, from Eventbrite Inc., for event advertising, booking, and ticket sales. Eventbrite may process your information in the United States, and is certified under the EU-US Privacy Shield Framework in order to implement appropriate safeguards in relation to your information. Eventbrite’s Privacy Policy can be found at https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy. 

If you engage with a BIPC service which is funded by the ERDF we will retain your information for 15 years, in accordance with the provisions of our EU funding agreement. If you engage with any other service we will retain your information for the current year plus a further six years after the date of your transaction in order to comply with tax and accounting rules.