Privacy Policy

This website is being operated for the purpose of the Y Lab the Public Services Innovation Lab for Wales, led by Cardiff University. You can find our full details below. This privacy policy explains how Y Lab uses personal information we collect via this site. We are committed to protecting your privacy and we take all reasonable precautions to safeguard personal information.  This privacy notice does not cover the links within this site linking to other websites.  We encourage you to read the privacy statements on the other websites you visit.

Privacy Policy

Our website will not store or capture personal data (e.g. name, email address) without the prior knowledge and consent of our users.

In the event that you are asked to provide personal information to the website, you may be asked whether you wish to receive any further communication from Y Lab, the public services innovation lab for Wales. Y Lab will make sure all personal data that is supplied is held as securely as possible, in accordance with the Data Protection Act.

1. Data

Y Lab does not sell or otherwise transfer any personal data to commercial companies or other organisations, with the exception of 1) web statistics (see below) which is hosted and managed by a third party company (Google, Inc), 2) our off-site hosted server environment (Hoffi), and 3) Mailchimp, who collate and manage our mailing list.

2. Cookies and web statistics

Some areas of Y Lab’s website use cookies to aid the user experience. Cookies are also used to compile general (not personal) site usage statistics. Cookies are not used to capture or store personal information for any other purpose.

Y Lab maintains continuous logs of its web server activity. These log files include the details of web site users’ IP address, browser type and page last visited etc. The log files are used to analyse how the web site is being used by visitors and may be kept in an anonymised form for historical records.

The Y Lab website uses hosted web analytics software. These are hosted services provided and managed by third party companies. Y Lab’s main supplier of hosted web analytics is Google, Inc. ‘Google Analytics’ use ‘cookies’ (a text file sent to user’s computers as they browse our websites) to help analyse how users navigate our websites. The information generated by the cookie regarding our websites (including IP addresses) will be transmitted to and stored by Google, Inc. on servers that may be hosted in the United States. Google, Inc. will use this information for the purpose of evaluating use of our website, compiling reports on website activity for website operators and providing other related services to Y Lab.

Google, Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google, Inc.’s behalf. Google, Inc. will not associate your IP address with any other data held by Google, Inc. You may decline the use of cookies by configuring your web browser to do so. By using this website, you consent to the processing of data about you by Google, Inc. in the manner and for the purposes set out above. You can find more information at our Cookie Policy.

3. Security 

We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information. If you have a password for an account on this site, please keep this safe and do not share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.

4. Contacting us, exercising your rights and complaints

You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:

  • know what information we hold about you
  • ask us to correct any mistakes in your information which we hold
  • ask us to delete your personal information
  • ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by Nesta
  • to object to us using of your personal information
  • to object to any automated decision making that we may do using your personal information  

If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email us using [email protected] and provide enough information to identify yourself (e.g. name and address or any registration details). 

If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you are asking this. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter. 

You can also write to the same address if you have a complaint about this policy. 

If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF or the following link. https://ico.org.uk/concerns or helpline: 0303 123 1113.  

5. Changes to the privacy policy

We may change this privacy policy from time to time.  We will notify you of any changes that relate to information we already hold about you, where practicable. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website.