0131 202 3550

Privacy Policy

Effective Date: 17 April 2025

What is this document?

This privacy notice explains how and why we collect, use, and protect your personal information. At Enterprise Spaces Edinburgh, your privacy is a priority, and we are committed to processing your data lawfully, fairly, and transparently. This document outlines our approach in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws as of 2025.

Who are we?

Enterprise Spaces Edinburgh is operated by Edinburgh Training Centre Limited, a company registered in Scotland with Company Number SC266120.

Registered Address:

16 St Mary’s Street, Edinburgh, EH1 1SU

Edinburgh Training Centre Ltd is registered with the Information Commissioner’s Office (ICO), Registration Number: ZA055798

How and why do we process your personal information?

We only process personal data when we have a lawful basis to do so. Your information is:

• Processed fairly, lawfully, and transparently

• Collected for specific, legitimate purposes

• Accurate and relevant to its intended use

• Stored securely and kept only as long as necessary

Our legal bases for processing include

•Contractual necessity – to provide the services you request or agree to

•Legitimate interests – such as improving services, security, and communication, unless overridden by your rights

•Consent – when required, we will always seek your clear and informed consent

Our legal bases for processing include

•In conversations, emails or forms related to bookings or services

•Through our website (contact forms, cookies, analytics tools)

•Via event or meeting registrations

•When signing in as a visitor

•Through job applications (email/CV submissions or assessments)

What types of personal data do we process?

Depending on context, we may collect:

•Name, title, organisation

•Contact information (email, phone, address)

•IP address, device/browser details (via cookies)

•Dietary requirements (for event catering)

•Job application details (e.g., employment history)

We do not intentionally collect sensitive personal data or data from individuals under 16 years of age. Please do not provide this unless explicitly agreed.

Third Parties and Data Sharing

We only share your data with trusted providers that support our systems or services, including:

•Constant Contact (email communications)

•Survey Monkey (feedback/surveys)

•Software providers for internal systems (CRM, finance, analytics)

All third-party providers are vetted for GDPR compliance. We will not share your data with any third party without your consent unless legally required.

How long do we keep your data?

We retain personal data:

•For the duration of a contract or service, plus legal retention periods (e.g. tax regulations)

•For unresolved enquiries, until resolution

•For marketing communications, until consent is withdrawn or deemed expired

•In all cases, we review data periodically and delete it when no longer needed (typically within 6 months)

Data Security

We implement appropriate technical and organisational security measures to protect your data from loss, unauthorised access, or misuse.

Your Rights (2025)

Under UK GDPR, you have the right to:

•Be informed about how your data is used

•Access your personal data

•Request correction or deletion

•Withdraw consent at any time

•Object to processing

•Restrict processing

• Data portability (request data to move elsewhere)If you wish to exercise your rights, please contact us using the details below. You may also opt out of marketing by clicking "unsubscribe" in any of our emails.

Complaints

If you have concerns or a complaint, contact us first—we’ll do our best to resolve it. If you're not satisfied, you can escalate the matter to the UK Information Commissioner's Office (ICO).