Not the correct Privacy Notice? Look for the correct one on the Business Wales Privacy Notice Index.
Your privacy is important to Business Wales and Idox and in line with General Data Protection Regulations (GDPR) we have developed a Privacy Notice that covers why we collect and use your information. This privacy notice ensures that your personal data will be processed fairly and lawfully and in a transparent manner.
Please take a moment to familiarise yourself with our privacy practices.
Why we collect and process the data collected
The Welsh Government is the Data Controller for the personal data you have provided on the My Business Wales registration form. The information will be processed as part of our public task and the official authority vested in us to undertake the core role and functions of the Welsh Government.
A limited portion of the data is passed on to Idox our third party provider; this enables your saved searches to be retrieved for your future use. Where you have requested notifications of funds that match your saved searches then these will be emailed to you. Please see their privacy notice for how they handle your data.
Personal information that will be collected and held includes:
- email address
- first name
- last name
Who will have access to your data:
Welsh Government will collect and store your data.
Your data will be stored on a Welsh Government secure IT System and the secure IT systems of our contractors (including third parties) delivering the service to you.
The Welsh Government has procedures to deal with any suspected data security breaches. If a suspected breach occurs, the Welsh Government will notify you and any applicable regulator where we are legally required to do so.
How long are your details kept
Your personal data will be retained on secure Welsh Government IT systems in line with the Welsh Government retention policy after which time it will be securely destroyed. We may delete the information sooner if it is no longer being used.
If you do not wish for us to hold your details, please contact us at businesssupport@gov.wales and they will be securely destroyed.
Your rights
Under the data protection legislation, you have the right:
- to be informed of the personal data Welsh Government holds about you and to access it
- require us to rectify inaccuracies in that data
- to (in certain circumstances) object to or restrict processing
- for (in certain circumstances) your data to be ‘erased’
- to (in certain circumstances) data portability
- to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
For help with any of the above rights then please contact our Business Wales Helpline 03000 6 03000, rydym yn croesawu galwadau’n Gymraeg / we welcome calls in Welsh, or use the contact us form.
For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights using the UK General Data Protection Regulation, please contact:
Data Protection Officer
Welsh Government
Cathays Park
Cardiff
CF10 3NQ
Email: dataprotectionofficer@gov.wales
The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 01625 545 745 or 0303 123 1113
Website: www.ico.org.uk
The Freedom of Information Act and your Information
The Freedom of Information Act 2000 and the Environmental Information Regulations 2004 allow the public to ask to see information held by public bodies, including the Welsh Government. The information you provide us may be the subject of a freedom of information request by another member of the public. We would consult with you to seek your views before responding to such a request.
Changes to this policy
The Welsh Government may make changes to this privacy policy at any time. If changes occur they will be posted here and are effective immediately.
This notice was last updated December 2025.