Surrey Business School B-Clinic privacy notice
The Surrey Business School Business Clinic, the B-Clinic, is a portal for applied projects where students collaborate as part of their academic studies with partner organisations including local businesses, startups, and social enterprises.
One of our responsibilities is to tell you about the different ways we collect and use your personal data. This statement provides details about these uses. In addition to this statement, you may be given further information about the uses of your personal data when you use certain services offered by the University of Surrey.
The B-Clinic holds and processes personal data while delivering valuable services to partner organisations.
We only collect the data we need and keep that data up to date as follows:
- First name
- Last name
- Contact position
- Representation (e.g. gender, disability, etc)
- Business email
- Company size (number of employees)
- Business type i.e. private, public.
We collect your personal data in order to:
- Offer students practical experience in solving business problems by engaging them in real-world experiential learning projects
- Provide local businesses with cost-effective, research-driven solutions and strategic insights
- Foster a collaborative environment where students, academics, and industry partners can engage in meaningful knowledge exchange
- Enhance the employability of students by developing their skills in business analysis.
We take our obligations for data handling very seriously and it is therefore important for you to know the lawful basis for us processing your information:
- We process data because you give us your consent, specifically to share communications related to business engagement activity at Surrey Business School
- We do not use the data we collect to make decisions about individuals or to analyse information on an individual level.
The B-Clinic processes personal data in accordance with data protection legislation and the University of Surrey’s own Data Protection Policy (PDF).
We keep your personal data in accordance with the University’s retention schedules. This means that your data is kept for 10 years and then destroyed/passed to the University’s historical archive for permanent preservation.
All relevant safeguards are met in relation to this historical research archive collections privacy notice.
Internally, we share your personal data with:
- Members of the Business engagement team
- Academic staff including module leaders, project supervisors, and seminar tutors.
We do this in order to ensure the quality of outputs and to tailor support for applied business projects.
We also may use the information for communication of further collaboration opportunities including other student projects, executive education programmes, and other initiatives.
You can withdraw your consent or update your communication preferences at any time by contacting sbsbusiness@surrey.ac.uk or by using the unsubscribe link in our newsletters.
As an individual whose data we process (a data subject), you have certain rights in relation to the processing. Find detailed information about your rights as a data subject.
You have the right to:
- Withdraw your consent for us to process your personal data where we have relied on that consent as our basis for processing your data.
- Ask us to confirm that your personal data is being processed and to access (i.e. have a copy) that data, as well as to be provided with supplemental information about the processing.
- Request that we rectify any inaccuracies where the data we hold on you is inaccurate or incomplete.
- Have your data erased by us, although in certain circumstances we may not be able to do this. The circumstances where this applies can be found in the guide to data subject rights information.
- Restrict the processing of your personal data in certain ways.
- Obtain your personal data for reuse.
- Object to certain processing of your personal data.
If you would like to exercise any of your rights please visit our make a privacy request section.
Make a complaint
If you have any concerns about the way that we have handled your personal data please email the Data Protection team as we would like to have the opportunity to resolve your concerns.
If you’re still unhappy, you have the right to complain to the Information Commissioner’s Office (an independent body set up to advise on information rights for the UK) about the way in which we process your personal data.