Privacy Policy

This is the privacy notice of Business Community Network Ltd, company number 13056952, registered in England.

Registered office: Unit B Oakwood, Oakfield Industrial Estate, Eynsham, OX29 4TH, GB

Contact (data rights): info@oxfordbusinesscommunitynetwork.co.uk

Last updated: 25 May 2026

1. Who we are

“We”, “our” and “us” refer to Business Community Network Ltd as the controller of your personal data. We are committed to processing personal data lawfully, fairly and transparently under the UK GDPR and the Data Protection Act 2018.

2. What we collect

We collect personal data when you: contact us; buy services, memberships or event tickets; attend our events; use our website; complete surveys or feedback; or apply for a role.

We may receive attendee details from ticket purchasers who register on behalf of others. In those cases, the purchaser confirms they have permission to provide the attendee’s details and sharing preference.

Typical data: name, job title, business contact details, correspondence records (including call recordings and messages), booking and attendance data (including attendee sharing preferences), payment details, website/app usage data (IP address, device, cookies—see Cookies placeholder), and any information needed to deliver our services.

2.1 Data we obtain from other sources

We may receive business contact details from public sources (e.g., company websites, business directories), referrals/partners, or event platforms where you register to attend. We process this data in accordance with this notice.

This may include identifying a publicly available professional profile (for example, a LinkedIn profile) to improve the accuracy of attendee records.

3. Purposes and lawful bases

• Provide services, memberships and events (identify you, take payment, deliver and support): Contract.
• Event attendee networking (optional) (share attendee details so people can connect after an event): Consent.
• Customer service and operations (record keeping, security, fraud prevention, legal/regulatory compliance): Legal obligation / Legitimate interests.
• Improving our services (analytics, service development): Legitimate interests.
• Direct marketing to businesses (email, SMS, WhatsApp, post, phone): Legitimate interests and compliance with PECR for electronic marketing.
• Online advertising, audience matching and campaign measurement (using first-party business contact details to create, manage, suppress, match and measure advertising audiences on platforms such as Google Ads, Meta Ads, LinkedIn Ads and comparable platforms): Legitimate interests, except where consent is required by law, platform policy or your advertising choices.
• Optional marketing to individuals (where applicable): Consent or soft opt‑in (similar products/services) as permitted by PECR.
• Recruitment: Contract / Legitimate interests / Legal obligation.

4. AI and automated communications

We use AI‑assisted systems and automation tools to communicate by email, SMS, WhatsApp, voice calls (including automated or pre‑recorded messages), and other electronic means. Uses include responding to enquiries, reminders and updates, campaign delivery, support and personalisation.

Opt‑out: Emails—use the unsubscribe link. SMS/WhatsApp—reply STOP. You can also email info@oxfordbusinesscommunitynetwork.co.uk.

5. Electronic marketing & PECR

• Corporate subscribers (B2B): We may send electronic marketing to corporate business contacts, with a clear opt‑out in every message.
• Individuals/sole traders: We obtain consent or rely on the soft opt‑in where permitted (similar products/services and opt‑out offered at collection).
• Automated marketing calls: We will only make automated calls where we have your specific prior consent. Live B2B calls respect TPS/CTPS preferences and your right to opt out.

5.1 Online advertising, audience matching and campaign measurement

We may use first-party business contact information to help us manage, measure and improve our advertising. This may include using details provided to us through enquiries, event bookings, membership, event attendance, mailing list sign-ups, customer relationships or other direct business interactions.

We may use this information to create, manage and measure advertising audiences on platforms such as Google Ads, Meta Ads, LinkedIn Ads and other comparable advertising platforms. This may include customer matching, custom audience, matched audience, lookalike audience, similar audience, suppression audience, retargeting and campaign measurement services.

These services may allow advertising platforms to match limited business contact details, such as email addresses, phone numbers, names, company names, job titles or postal details, with accounts held on their platforms. We may use this to show relevant business advertising, reach similar business audiences, measure campaign performance, avoid showing irrelevant adverts, and improve the effectiveness of our marketing.

Where we use customer matching or similar advertising services, we only use first-party data collected through our own business relationships or direct interactions. We do not sell personal data, and we do not intentionally use special-category data, children’s data, bought-in lists, scraped lists, or data from people who have objected to this type of marketing use.

Contact details may be hashed, pseudonymised or otherwise protected before or during transfer, depending on the platform and upload method used. However, this information may still be treated as personal data.

Our lawful basis for this processing is our legitimate interests in promoting and growing our business-to-business products, services, events and communications, except where consent is required by law, platform policy or your advertising choices.

6. Sharing and international transfers

We share data with trusted providers (e.g., hosting, CRM, email/SMS/WhatsApp/voice platforms, analytics, payment processors, event platforms) under contracts requiring UK GDPR‑level protections. Where data is transferred outside the UK/EEA, we use appropriate safeguards (e.g., UK IDTA/Standard Contractual Clauses or adequacy decisions).

This may include sharing limited business contact information with advertising, analytics and measurement platforms, including Google Ads, Meta Ads, LinkedIn Ads and other comparable platforms, where they provide advertising delivery, audience matching, audience management, campaign measurement, analytics, fraud prevention or related services on our behalf. Where applicable, contact details may be hashed, pseudonymised or otherwise protected before or during transfer, but they may still be treated as personal data.

Event attendee networking: If you choose to share your details, we will share your name, company, email, phone, and LinkedIn profile (if identified by us from public sources) with other attendees of the same event to help with post‑event networking. Member details are shared with members and guests; guest details are shared with members only. We do not sell attendee details or use them for unrelated marketing.

7. Retention

We keep personal data only as long as necessary for the purposes above, to comply with legal/accounting requirements, and to establish or defend legal claims. We apply documented retention criteria, and delete or anonymise data when no longer needed.

We retain attendee records for operational and historical purposes. Guest sharing is limited to the event day plus 14 days and is not continued after that period, while member details remain shared with members and guests for ongoing networking. Once shared, other attendees may retain their own copies, so we cannot guarantee deletion of copies held by recipients.

8. Security

• Encryption in transit and at rest
• Multi‑factor authentication and access controls
• System monitoring, logging and patching
• Confidentiality obligations and role‑based access for staff/contractors

9. Your rights

You have rights to access, rectification, erasure, restriction, portability, and to object (including to direct marketing and related profiling). You also have rights in relation to automated decision‑making where applicable.

You can also object to us using your business contact details for online advertising audiences, customer matching, custom audiences, matched audiences, lookalike or similar audiences, suppression audiences, retargeting or marketing-related profiling by contacting us using the details provided in this privacy policy.

You can ask us to update your attendee sharing preference at any time by contacting info@oxfordbusinesscommunitynetwork.co.uk.

To exercise your rights, contact info@oxfordbusinesscommunitynetwork.co.uk. We will respond in line with UK GDPR timescales.

10. Complaints

Please contact us first so we can resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

11. Special‑category data & children

We do not intentionally collect special‑category data (e.g., health, beliefs) or data about children. Please do not provide such data. If it is necessary for a specific purpose, we will seek an appropriate Article 9 condition (e.g., explicit consent) and provide additional information.

Our services are intended for business users aged 18+.

12. Cookies

For details about the cookies we use and how you can manage your preferences, please see our Cookies Policy. You can also manage your choices via the cookie banner on our site, or by using the Cookies Policy link at the bottom of the page to open settings at any time.

13. Necessity of providing data

Where data is needed to enter into or perform a contract (e.g., to process a booking), failure to provide it may mean we cannot supply the relevant service.

14. Changes to this notice

We may update this notice from time to time. Where a change is material, we will take appropriate steps to bring it to your attention, which may include highlighting the change on our website, including a notice in our normal communications, or notifying you directly where appropriate.