YSPL Privacy Notice

Effective Date: July 2025

York Science Park Limited ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or otherwise interact with us.

For the purposes of this privacy notice, York Science Park is the Data Controller as defined in the UK GDPR. We are registered with the Information Commissioner’s Office and our registration number is Z1491000.

1. What data do we have and where do we get your data from?

We may collect and process the following data:

  • Personal Information: Name, email address, phone number, postal address, etc. This is collected from enquiries you make with us and from website forms you complete.
  • Usage Data: IP address, browser type, operating system, access times, and pages viewed.
  • CCTV Footage: If you visit our premises, you may be recorded by CCTV for security purposes.
  • Cookies and Tracking Technologies: We use cookies to improve your experience on our website. For more information about use of cookies, please see our cookies notice.

2. How do we use your data?

We use your data to:

  • Provide and manage our services to tenants and prospective customers in responding to workspace enquiries, contracting out lease agreements and notifying you about changes to our services/offerings.
  • Communicate with you to arrange and administer the performance of the contract between us if you are a tenant, customer, supplier or contractor. Optional marketing communication is also used, where consent has been given, to inform you of events and services. 
  • Ensure the security of our premises and systems, for example issuing parking permits, issuing access fobs and keys, and providing online access to our tenants’ portal for booking meeting rooms.

3. What is our legal basis for processing your data?

We rely on the following legal bases:

  • Contract – when processing is necessary for a contract with you
  • Legal obligation – where we must comply with a law
  • Legitimate interests – for operational and administrative purposes
  • Consent – where you have given us permission, for example to receive marketing communications

4. Who do we share your data with

We may share your information with:

  • Third party service providers who process data on our behalf to support us in fulfilling our obligations and responsibilities to you: Software and system providers, including but not limited to Communicate Technology and Modern Networks so that they can provide internet services to you, and the University of York Marketing team who provide our marketing, website and design work.
  • Law enforcement agencies such as the police or relevant authorities dealing with emergency situations (only as required or appropriate and in line with Data Protection legislation).

5. How do we keep your data secure

York Science Park takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. We limit access to your personal information to those who have a genuine business need to know it.  Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

6. Your Rights

Under the UK GDPR, you have rights including:

  • The right to access the data we hold about you
  • The right to correct inaccurate data
  • The right to erase your data
  • The right to restrict processing
  • The right to object to processing
  • The right to data portability

To exercise these rights, please contact us at: [email protected].

7. How long will we keep your data?

We will hold your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements but in any event no longer than six years following your last contact with us (unless we are required to hold it for longer to comply with a legal requirement or for our legitimate business purposes).

8. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of any changes by posting the new notice on our website.

9. Contact Us

If you have any questions or concerns about this privacy notice, or how your data is being processed, please contact:

York Science Park, Innovation Centre, Innovation Way, Heslington, York, YO10 5DG
Email: [email protected]

10. Right to Complain

If you are unhappy with the way in which York Science Park has handled your personal data, please contact us in the first instance, to allow us to put things right.

If you are dissatisfied with our response, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, see www.ico.org.uk/concerns.