Introduction
This privacy policy explains how Aerospace Cornwall collects, uses, stores, and protects personal data when individuals interact with its website and services. It is designed to give visitors clear, transparent information about what happens to their data, the legal basis for processing it, and the rights they have under applicable data protection laws, including the UK GDPR and the Data Protection Act.
Scope of This Privacy Policy
This policy applies to anyone who visits the Aerospace Cornwall website, makes an enquiry, subscribes to updates, participates in events or programmes, or otherwise shares personal information in connection with Aerospace Cornwall's activities. It covers information gathered through online forms, cookies and analytics tools, and any other interaction where personal data is provided or generated.
Types of Personal Data Collected
Aerospace Cornwall collects different categories of personal data depending on how visitors use the website and services. Typical information collected may include:
- Identity details: name, job title, and company or organisation.
- Contact details: email address and other basic communication information you choose to share.
- Business information: sector, project details, or areas of interest related to aerospace, space, and related technologies.
- Technical data: IP address, browser type, device information, access times, and referring website URLs.
- Usage data: pages visited, interactions with content, downloads, and other on-site behaviour.
- Preference data: communication preferences and consents for marketing or updates.
How Personal Data Is Collected
Personal information may be collected directly or indirectly when individuals interact with the Aerospace Cornwall website or team. Common collection methods include:
- Submitting enquiries or forms on the website.
- Signing up to newsletters, updates, or events.
- Engaging with surveys, application processes, or programme registrations.
- Using the website, where cookies and analytics tools record technical and usage information.
Legal Basis for Processing Personal Data
Aerospace Cornwall processes personal data on lawful bases recognised by data protection legislation. These typically include:
- Consent: when individuals actively opt in to receive communications or provide information for a specific purpose.
- Legitimate interests: where processing is necessary for delivering services, improving the website, understanding audience needs, or managing programmes, balanced against individuals' privacy rights.
- Contractual necessity: when personal data is needed to respond to enquiries, support applications, or provide agreed services.
- Legal obligations: when information must be retained or shared to comply with laws, regulations, or reporting requirements.
How Personal Data Is Used
Information collected by Aerospace Cornwall is used to support its mission, deliver relevant services, and improve user experience. Typical uses include:
- Responding to enquiries and providing information about programmes, opportunities, and events.
- Managing registrations, applications, and participation in funded initiatives or support schemes.
- Sending updates, news, or marketing communications where consent has been given or where there is a lawful interest.
- Monitoring and improving the performance, security, and usability of the website.
- Gathering anonymised statistics about website traffic and engagement.
- Complying with audit, funding, and reporting obligations related to public or private support.
Cookies and Analytics
The Aerospace Cornwall website uses cookies and similar technologies to help deliver a better browsing experience and understand how visitors use the site. Cookies may be used to:
- Remember user preferences or basic settings.
- Collect anonymous statistical data about page views and user journeys.
- Support embedded content or third-party services that enhance the website.
Visitors can usually control cookie settings through their browser, choosing to accept, reject, or delete cookies, although some features of the site may function less effectively if certain cookies are disabled.
Data Sharing and Third Parties
Aerospace Cornwall may share personal data with carefully selected third parties where this is necessary for service delivery or programme administration. These may include:
- Project partners, funding bodies, or programme delivery organisations involved in aerospace and space initiatives.
- Service providers that support website hosting, analytics, email delivery, or IT infrastructure.
- Professional advisers such as auditors, where required by funding or regulatory frameworks.
Any third party that processes data on behalf of Aerospace Cornwall is expected to do so under appropriate contractual safeguards, with measures in place to protect confidentiality and security.
International Data Transfers
Where personal data is transferred outside the UK or European Economic Area, this is done in line with applicable data protection rules. Appropriate safeguards are used, such as standard contractual clauses or equivalent protections, to ensure that individuals' rights and freedoms are preserved.
Data Retention
Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, reporting, or funding requirements. Retention periods may vary depending on the nature of the data and the obligations linked to specific programmes or projects. Once data is no longer required, it is securely deleted or anonymised.
Data Security
Aerospace Cornwall takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures may include access controls, secure systems, regular monitoring, and restricted access to data based on role and necessity. While no system can be completely secure, reasonable steps are taken to reduce risks and safeguard the information held.
Your Data Protection Rights
Individuals whose personal data is processed have a range of rights under data protection laws. Depending on the circumstances, these rights may include:
- Right of access: to request a copy of personal data held and information about how it is used.
- Right to rectification: to correct inaccurate or incomplete information.
- Right to erasure: to request deletion of personal data in certain situations.
- Right to restriction: to ask for processing to be limited in specific circumstances.
- Right to data portability: to receive certain information in a structured, commonly used format.
- Right to object: to certain types of processing, including direct marketing or processing based on legitimate interests.
- Rights relating to automated decision-making: where decisions are made solely by automated means with legal or significant effects.
Requests to exercise these rights are assessed in line with the law, and some rights may be limited where there are overriding legal or regulatory obligations.
Marketing Preferences and Communications
Aerospace Cornwall may send relevant news, updates, and marketing communications about programmes, events, and services where there is consent or a legitimate interest to do so. Individuals can change their communication preferences or opt out of marketing at any time, and each marketing message will typically explain how to update these preferences.
Third-Party Websites
The Aerospace Cornwall website may reference or direct visitors to external websites or resources. These third-party sites have their own privacy policies and practices. When leaving the Aerospace Cornwall website, individuals are encouraged to review the privacy information on any external site they visit, as Aerospace Cornwall is not responsible for how those providers handle personal data.
Children's Privacy
The services and content provided by Aerospace Cornwall are generally aimed at businesses, professionals, and organisations in the aerospace and space sectors. The website is not primarily intended for children, and personal data relating to children is not knowingly collected without appropriate safeguards and lawful basis.
Policy Updates
This privacy policy may be updated from time to time to reflect changes in law, guidance, or how services are delivered. The most current version will be made available on the website, and continued use of the site or services after changes are posted will be taken as acceptance of the updated policy where relevant.
How to Raise Concerns
Anyone who has concerns about how their personal data is being handled can raise questions or request clarification. Individuals also have the right to lodge a complaint with the appropriate supervisory authority if they believe their data protection rights have been infringed. Using the available channels to raise concerns helps ensure that issues can be addressed and that high standards of data protection are maintained.