Our website will not store or capture personal data (e.g. name, email address) without the prior knowledge and consent of our users.
In the event that you are asked to provide personal information to the website, you may be asked whether you wish to receive any further communication from Y Lab, the public services innovation lab for Wales. Y Lab will make sure all personal data that is supplied is held as securely as possible, in accordance with the Data Protection Act.
Y Lab does not sell or otherwise transfer any personal data to commercial companies or other organisations, with the exception of 1) web statistics (see below) which is hosted and managed by a third party company (Google, Inc), 2) our off-site hosted server environment (Hoffi), and 3) Mailchimp, who collate and manage our mailing list.
2. Cookies and web statistics
Y Lab maintains continuous logs of its web server activity. These log files include the details of web site users’ IP address, browser type and page last visited etc. The log files are used to analyse how the web site is being used by visitors and may be kept in an anonymised form for historical records.
The Y Lab website uses hosted web analytics software. These are hosted services provided and managed by third party companies. Y Lab’s main supplier of hosted web analytics is Google, Inc. ‘Google Analytics’ use ‘cookies’ (a text file sent to user’s computers as they browse our websites) to help analyse how users navigate our websites. The information generated by the cookie regarding our websites (including IP addresses) will be transmitted to and stored by Google, Inc. on servers that may be hosted in the United States. Google, Inc. will use this information for the purpose of evaluating use of our website, compiling reports on website activity for website operators and providing other related services to Y Lab.
We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information. If you have a password for an account on this site, please keep this safe and do not share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.
4. Contacting us, exercising your rights and complaints
You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:
- know what information we hold about you
- ask us to correct any mistakes in your information which we hold
- ask us to delete your personal information
- ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by Nesta
- to object to us using of your personal information
- to object to any automated decision making that we may do using your personal information
If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email us using [email protected] and provide enough information to identify yourself (e.g. name and address or any registration details).
If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you are asking this. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter.
You can also write to the same address if you have a complaint about this policy.
If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF or the following link. https://ico.org.uk/concerns or helpline: 0303 123 1113.