Privacy Notice

How Surrey Research Park handles your personal data

Surrey Research Park is part of the University of Surrey. We are registered as a data controller with the Information Commissioner’s Office (our notification number is Z6346945) and we are committed to ensuring that the personal data we process is handled in accordance with data protection legislation. We have a named Data Protection Officer, James Newby, who can be contacted via:

One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this statement, you may be given further information about the uses of your personal data when you use certain services offered by the Surrey Research Park / University of Surrey.

What information do we collect from you?

Surrey Research Park holds and processes personal data about:

The personal data we hold about you depends on which category above you fall in to but could potentially consist of individual names, telephone contacts, email addresses, out of office contact details for key holders, description of business and financial/banking information. We only collect the data we need and keep that data up to date.

We receive this data from you when you supply us with this information either when you contact us using online or paper forms, by telephone or when completing paperwork to process contracts.

We also receive data such as financial references from banks and building societies.

Why do we collect this information?

Surrey Research Park collects only the data we need and we keep the data up to date and only for as long as it is needed. We collect your personal data:

We take our obligations for data handling very seriously and it is therefore important for you to know the lawful basis for us processing your information.

What do we do with your information?

Surrey Research Park processes personal data and special category data in accordance with data protection legislation and its own Data Protection Policy.

We use information about the Research Park to provide reports at a local and national level on the contribution we make to the local economy. Individuals and individual companies are not identified or affected in this reporting.

We use information from our systems to analyse the effectiveness of our service and for our own local reporting. Individuals and individual companies are not identified or affected in this reporting.

We track activity on our website using cookies – see our cookie policy here. We do not collect personal information via our website.

How long do we keep your information?

We keep your personal data in accordance with the University’s retention schedules. This means that your data is kept for the duration of your tenancy and for the following seven years.

Who do we share your information with?

Internally we may share Contractors’ information with our tenants to arrange maintenance or minor works locally.

We will share your email address externally with our subscription management agency if you have subscribed to our newsletters.

What rights do you have in relation to the way we process your data?

As an individual whose data we process (a data subject), you have certain rights in relation to the processing. You can find detailed information about your rights as a data subject on the University’s web page.

You have the right to:

To exercise any of these rights please contact

You also have the right to complain independently to the Information Commissioner’s Office about the way in which we process your personal data, if you are not satisfied with our response to your concerns.