Privacy Policy

At National Biofilms Innovation Centre (NBIC), we’re committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure. We may change this policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this policy.

NBIC is led by four Universities (Edinburgh, Liverpool, Southampton and Nottingham). The University of Southampton is the sole ‘data’ controller’ of the data on this website. This means that we are responsible for deciding how we collect and use personal information about you, and for explaining this clearly to you.

‘Data’ refers to the information that we hold about you from which, either on its own or in combination with other information, you can be identified. Examples of data are names, contact details, photographs, online identifiers, or expressions of opinion about you or indications as to our intentions about you.

If you have any questions regarding this policy and our privacy practices, you can email us on or write to us at our registered office address in Southampton: National Biofilms Innovation Centre, Building 85, Institute of Life Sciences, University Road, Southampton. Alternatively, you can telephone 02380 594729.

Data Protection Principles

We will comply with data protection law and principles, which means that your data will be:

  • Used lawfully, fairly and in a transparent way.
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • Relevant to the purposes we have told you about and limited only to those purposes.
  • Accurate and kept up to date.
  • Kept only as long as necessary for the purposes we have told you about.
  • Kept securely.

How do we collect data from you?

We obtain data about you when you use our website, for example, when you complete the contact form, when you complete the newsletter registration form, or engage with other forms within our site.

What data does NBIC collect?

In connection with our research and innovation activities, the data we collect and store about you might include:

  • The biographical data and contact details you have provided, including your first and last name, email address, telephone number, company name, areas of industry, and photographs
  • Event attendance
  • Details of interactions with between you, industry, and academics
  • Records of all contact we have with you
  • Any other data you provide to us to support the progression of your research or developments.

How does NBIC use your data?

We may use your data to:

  • Contact you regarding queries raised in the contact form;
  • Carry out our obligations arising from any contracts entered into by you and us;
  • Seek your views or comments on the services we provide;
  • Notify you of changes to our services;
  • Send you communications that you have requested and that may be of interest to you, which may include our monthly newsletter, information about campaigns, funding opportunities, events and workshops, partner searches, and other activities relevant to the NBIC mission.
  • Create a profile of your interests and preferences so that we can contact you with information relevant to you.

Processing for limited purposes

We will only process your Data for the specific purpose or purposes that we tell you about, in compliance with the UK Data Protection Act 2018, and will only process your data to the extent necessary for that specific purpose or purposes.


How will your personal data be secured?

Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We may pass your information to our third-party service providers working on our behalf, agents’ subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to process donations and send you mailings). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.

Please be reassured that we will not release your information to third parties beyond these purposes unless you have requested us to do so, or we are required to do so by law (for example, by a court order or for the purposes of prevention of fraud or other crime), or , or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

Third-party services

HubSpot: We store all personal data in HubSpot, which is our CRM (Customer Relationship Management system) and where we keep a record of all customer and partner interactions. We use this platform for our marketing communications, which include our NBIC External Newsletter and regular partner searches. HubSpot transfers all customer data to the USA. Customer data is processed and secured in the EU before being transmitted and stored in the US. The cloud infrastructure hosted on Google Cloud Platform (GCP) provides additional redundancy for all HubSpot customers. Various HubSpot services are routed through the GCP EU data centre before being securely transferred to the USA and securely stored in AWS. The HubSpot privacy policy can be found here.

Google Analytics: We use cookies from Google analytics to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site and the user experience. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. For more information on the Google Analytics privacy policy please visit the Google website. It is possible to switch off cookies by setting your browser preferences. Please not that turning cookies off may result in a loss of functionality when using our website. The Google privacy Policy can be found here.

Innoget: Innoget is the provider of our Open Innovation tool which, on registration to the platform, allows users to share opportunities and make direct connections with other partners. The Innoget Privacy Policy can be found here.

Your choices

The accuracy of your information is important to us. You have the right to request a copy of the information we hold about you so that you can ensure its accuracy and you can change your electronic communication preferences at any time.

You have a choice about whether or not you wish to receive information from us. If you do not want to receive electronic communications from us about our services, then you can select your choices by ticking the relevant boxes situated on the form on which we collect your information.

We will not contact you for direct marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for direct marketing purposes by post if you have indicated that you do not wish to be contacted in this manner. You can amend or withdraw your consent by contacting us via email on, by telephone on 02380 594729 or by writing to us at our registered office address in Southampton: National Biofilms Innovation Centre, Building 85, Institute of Life Sciences, University Road, Southampton.



We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations in connection with our research and innovation activities. We will hold data on our systems only for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us. Personal data will be stored on our HubSpot CRM for the duration of our business relationship with you, or until you request to remove your data from our CRM.


Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website. In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.


Review of this policy

We keep this policy under regular review. This policy was last updated in July 2021.