firsttime

WIH Privacy Policy

ORE Catapult Privacy Policy – Wind Innovation Hub Accelerating Innovations Programme

1. Introduction

ORE Catapult is committed to protecting the privacy of individuals who use the Skipso application platform for the Wind Innovation Hub Accelerating Innovations Programme. This Privacy Policy explains how personal data submitted through the platform will be collected, used and shared for the purposes of administering and assessing applications to the programme.

For the purposes of UK data protection law, ORE Catapult is the data controller for personal data collected through the application process and used to administer, manage and assess applications on behalf of the Wind Innovation Hub. Skipso Ltd. (company no. 06515896) ("Skipso") provides the application platform and acts as ORE Catapult's data processor. Innovate UK will become an independent data controller for any personal data shared with it for governance, approval, monitoring, assurance and evaluation purposes.

2. Data we collect

We may collect the following personal data and application information through the platform:

  • Lead applicant name, role, email address and phone number
  • Company name, Companies House registration number, registered address and company information
  • Information about the business, innovation, market opportunity, funding history and limited financial information
  • Information required for eligibility, due diligence and subsidy control checks
  • Limited information about Persons with Significant Control, including whether any PSC has Russian and/or Belarusian citizenship or may be considered a Politically Exposed Person

No special category personal data is requested or intended to be processed as part of the application process.

3. Lawful basis for processing

The primary lawful basis for processing your personal data is our legitimate interest in administering, assessing and delivering the Accelerating Innovations Programme and ensuring appropriate governance, accountability, eligibility checking, due diligence and programme evaluation. Where we rely on consent for any optional activity, such as optional communications or non-essential cookies, you may withdraw that consent at any time.

4. How we use your data

We use personal data and application information to:

  • Administer the application process
  • Check eligibility
  • Assess the merit of applications
  • Conduct due diligence
  • Support award decisions
  • Manage programme delivery
  • Meet funder governance, approval, monitoring, assurance and evaluation requirements
  • Communicate with applicants about their application and programme-related updates

Personal data will not be used for automated decision-making, profiling or direct marketing without consent.

5. Data sharing

Application data, including personal data, may be accessed, analysed and handled by authorised staff from ORE Catapult, NCC Operations Limited (Company No. 07304890) ("NCC") and National Manufacturing Institute for Scotland ("NMIS") and independent technical assessors for the purposes of assessing applications and delivering the Wind Innovation Hub Accelerating Innovations Programme, subject to legally binding confidentiality restrictions. To the extent that any third-party processes personal data, such processing shall be carried out in accordance with all data protection law and ORE Catapult shall continue to act as data controller.

6. Confidentiality and intellectual property

Business information and intellectual property submitted through the platform will be treated in confidence and used only for administering, assessing, evaluating and delivering the programme, including funder governance, approval, monitoring, assurance and evaluation. Intellectual property included in submissions to the Innovation Call, and any intellectual property developed during any subsequent phase, will remain the property of the provider unless otherwise agreed in writing.

7. Data retention

We will retain personal data and application information only for as long as necessary for the purposes described in this Privacy Policy, including programme administration, governance, audit, assurance, legal and funder reporting requirements. ORE Catapult will set the retention period for platform data and backup data. Skipso retains database backups for up to 35 days unless otherwise instructed by ORE Catapult.

8. Your rights

You have rights under UK data protection law, including the right to access your personal data, rectify inaccurate data, request erasure, restrict processing, object to processing, request data portability where applicable, and withdraw consent (where processing is based on consent). To exercise these rights, please contact ORE Catapult using the contact details provided for the programme or privacy enquiries.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be notified by posting the updated policy on the platform and, where appropriate, notifying applicants by email.

10. Supervisory authority

You have the right to lodge a complaint with the UK Information Commissioner's Office if you are unhappy with how your personal data has been handled.