Data processing for website visitor or service user

Data processing for website visitor or service user

How we use your personal data

Purpose	Data processed	Lawful basis for processing	Retention period
Providing and managing your company’s account.	Personal identification such as name; Contact information such as email addresses and telephone number(s).	Legitimate interests and performance of contract.	For duration of the period we work with you plus 12 months.
Providing and managing your access to our website.	Login credentials	Legitimate interests.	For duration of the period we work with you plus 12 months.
Responding to your queries.	Personal identification such as name; Contact information such as email addresses and telephone number(s).	Legitimate interests.	Completion of enquiry plus 12 months.
Supplying our Investment Network services to you.	Personal identification such as name; Contact information such as email addresses and telephone number(s). Information that you choose to submit about your Company for presentation purposes	Contract performance.	For duration of the period we work with you plus 12 months.
Undertaking due diligence (including AML checks) for the purpose of showcase events or investment by the Fund.	Shareholding information about your company: shareholder names, % and addresses; Details of any arrangements with individuals as part of reviewing company data (e.g. director loans and/or all shareholdings); Dates of birth, addresses and remuneration arrangements for statutory directors.	Legal obligation and Contract Performance.	Up to 7 years from last submission.
Investment in your company by the Oxford Innovation EIS Growth Fund (“our Fund”).	Shareholder names/addresses; Director names/addresses	Legitimate interests.	If we invest, we will retain information for the duration of our investment in your company plus 12 months. If, following due diligence, we do not invest, we will retain your data for a period of 12 months.
Sending information about our services that may be of interest to you.	Personal identification such as name; Contact information such as email addresses and telephone number(s).	Legitimate interests and consent.	Three years from when you last expressed interest in our services.
Analysing your use of our website to improve user experience.	Online identification such as IP address.	Legitimate interests.	Per Google Analytics data retention terms

Data sharing

To meet the Purposes stated above, we share your personal data with:

Oxford Innovation Space and Oxford Innovation Advice for the purpose of contacting you about services relevant to your company
SQW Group Ltd and its subsidiaries for the purpose of providing support services to Oxford Innovation Finance
Third-party service providers, including payment processing, search engine facilities, advertising, and marketing
Investment Network members and Sponsors as part of key information provided at Showcase events
Investment Committee members for the purpose of carrying out pre-investment due diligence

Your personal data may have been shared with us by the following organisations:

Data type	Source
Personal identification such as name (in connection with your Company who are seeking funding); Contact information such as email addresses and telephone number(s).	Oxford Science Enterprises
Personal identification such as name (in connection with your Company who are seeking funding); Contact information such as email addresses and telephone number(s).	Oxford University Innovation
Personal identification such as name (in connection with your Company who are seeking funding); Contact information such as email addresses and telephone number(s).	Oxford Innovation Services Limited (known as ‘Oxford Innovation Advice’, sister company of Oxford Innovation Finance)
Personal identification such as name (in connection with your Company who are seeking funding); Contact information such as email addresses and telephone number(s).	Oxford Innovation Limited (known as ‘Oxford Innovation Space’, parent company of Oxford Innovation Finance)

For us to perform the normal functions of our company and in providing you with services and information, some of your personal data will be transferred overseas. We have the following safeguards in place to protect your data:

International organisation	Safeguards in place to protect your personal data	How you can obtain a copy of the safeguards
Eventbrite, USA	Standard Contractual Clauses	Eventbrite data protection
Mailchimp, USA	Standard Contractual Clauses	Mailchimp data protection details