Not the correct Privacy Notice? Look for the correct one on the Business Wales Privacy Notice Index.
This notice was last updated on 23 May 2025.
Your privacy is important to the Welsh Government Innovation Team and the Innovation Service providers. This privacy notice sets out how we will use your personal data and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
Please take a moment to familiarise yourself with our privacy practices.
Lawful basis for processing
The Welsh Government will be the Data Controller for any personal data you have provided when accessing innovation support and services. The information will be processed as part of our public task and the official authority vested in us to exercise our official authority to undertake the core role and functions of the Welsh Government.
Why we collect and process your personal data
We collect and process your personal data to enable us to manage and deliver the Welsh Government Innovation Support Services and associated programmes under the Welsh Government Innovation Strategy. The ways we use the data, include, but are not limited to:
- providing the most appropriate advice and information to you
- monitoring progress, outcomes, and impacts of the Innovation Strategy
- evaluating the Innovation Strategy to inform decisions on future policies
- producing anonymous statistical publications
- audit purposes
- promotional activity
- and as part of aggregate results for use in various reports
What data will be collected
We will collect and process the following personal data:
- name
- business address
- business email address
- business telephone number
Some of the data we collect is ‘special category data’, in this case:
- Gender
- Ethnicity
- Disability status
Under Article 9(2)(j) of the UK GDPR, the Welsh Government Innovation Team and Services will process special category data where it is necessary for statistical or research purposes in accordance with Article 89(1), provided the processing is proportionate to the aim pursued, respects the essence of the right to data protection and provides for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
Who will have access to your data?
The Welsh Government Innovation Team, Welsh Government third-party service contractors, and Welsh Government commissioned research contractors will collect and store your data.
Your data will be stored on a Welsh Government secure IT System, the secure IT systems of our third-party service contractors delivering the service to you, and the secure servers of research contractors commissioned by Welsh Government.
It is collected and shared with the following organisations for the purposes previously listed:
- Approved research contractors, commissioned by Welsh Government to monitor and evaluate the progress, outcomes, and impacts of the Innovation Strategy.
- Welsh Government support service teams and its system technical administrators who support the IT system. System technical administrators will not use your details in any way.
- Wales Audit Office or those acting on their behalf, or other appropriate auditors of the Innovation Services Providers.
- Other business support providers and public bodies, including the Intellectual Property Office, Local Authorities, Further and Higher Education Institutions who could provide you with further support, when appropriate.
How long is your personal data kept for?
Your personal data will be retained on Welsh Government IT systems for up to 10 years after the project ends for auditing purposes, after which time it will be securely destroyed.
Third-party service contractors and research contractors commissioned by Welsh Government will delete your personal data, including your contact details, within 3 months of the end of the contract.
Marketing and Research
We may contact you to request your permission to use your business details for Welsh Government marketing activities. The Welsh Government will not use your data without your consent for this particular purpose.
You may be contacted by research contractors commissioned by Welsh Government to monitor and evaluate Innovation Strategy activities. If you are contacted, the purpose of the research will be explained to you, and you will be given the option to say yes or no to taking part. The Welsh Government will be the data controller for the research.
What are your rights?
Under the data protection legislation, you have the right:
- to access the personal data the Welsh Government holds on you;
- to require us to rectify inaccuracies in that data;
- to (in certain circumstances) object to or restrict processing;
- for (in certain circumstances) your data to be ‘erased’;
- to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
For help with any of the above rights then please contact our Business Wales Helpline 03000 6 03000, rydym yn croesawu galwadau’n Gymraeg / we welcome calls in Welsh, or use the contact us form Contact us | Business Wales (gov.wales).
For further details about the information the Welsh Government holds and its use, or if you want to exercise your rights under the data protection legislation, please see contact details below:
Data Protection Officer
Welsh Government
Cathays Park
CARDIFF
CF10 3NQ
Email address: DataProtectionOfficer@gov.wales
The contact details for the Information Commissioner’s Office are:
Customer Contact
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: Information Commissioner's Office
Changes to this Privacy Notice
The Welsh Government may make changes to this privacy notice at any time. Changes will be posted here and are effective immediately. When changes occur we will contact you on the email address we have recorded on your account to enable you to review the new version.