Privacy Policy

Last updated: June 2026

Bury St Edmunds Business Exchange CIC (“we”, “our”, “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, register for events, purchase tickets, or otherwise engage with our activities. It also explains your rights and how you can raise concerns or complaints about the way we process your personal information.

 

Who We Are

Bury St Edmunds Business Exchange CIC is a Community Interest Company registered in England and Wales.

Company name: Bury St Edmunds Business Exchange CIC
Company number: 17238340
Registered office address: 5 Downing Drive, Great Barton, Bury St. Edmunds, England, IP31 2RP

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

Email: info@burybusinessexchange.co.uk

 

The Information We Collect

We may collect and process the following personal information:

  • Name

  • Business name

  • Email address

  • Telephone number

  • Billing address

  • Job title

  • Information you provide when contacting us

  • Information provided when registering for events or purchasing tickets

  • Payment and transaction information

  • Marketing preferences

  • Website usage information, including IP address, browser type and pages visited

We only collect information that is necessary for the purposes outlined in this policy.

 

How We Use Your Information

We may use your personal information to:

  • Respond to enquiries and requests for information

  • Process ticket purchases and event registrations

  • Send booking confirmations and event-related communications

  • Administer and manage events, meetings and activities

  • Communicate with attendees about relevant event updates

  • Improve our website, services and user experience

  • Monitor website performance using Google Analytics

  • Meet our legal and regulatory obligations

 

Lawful Basis for Processing

Under UK data protection law, we rely on the following lawful bases:

Contract

Where we need to process your information to provide tickets, event access, booking confirmations, or services you have requested.

Legitimate Interests

Where processing is necessary for the operation and development of Bury St Edmunds Business Exchange CIC, including responding to enquiries, managing events, improving our website, and communicating with our network.

Consent

Where you have actively agreed to optional cookies or future marketing communications.

Legal Obligation

Where we are required to process information to comply with applicable laws and regulations.

 

 

Ticket Purchases and Payments

Tickets for events may be purchased through our website using WooCommerce.

When you purchase a ticket, we collect the information needed to process your order, confirm your booking, and manage your attendance at the event.

Payments may be processed through third-party payment providers, depending on the payment option selected at checkout. We do not store full payment card details on our website.

Payment providers will process your information in accordance with their own privacy policies and security standards.

 

Marketing Communications

We do not currently use a newsletter platform.

If we introduce email marketing in the future, we will only send marketing communications where we have a lawful basis to do so. Where consent is required, you will be able to opt in and unsubscribe at any time.

 

Sharing Your Information

We do not sell your personal information.

We may share your information with trusted third-party service providers who support our operations, such as:

  • Website hosting providers

  • Website developers or technical support providers

  • WooCommerce and related website plugins

  • Payment processing providers

  • Google Analytics

  • Professional advisers where necessary

These organisations will only process your information where necessary and are expected to keep it secure.

 

Website Analytics and Cookies

Our website uses Google Analytics to understand how visitors use the website and to help us improve the user experience.

Google Analytics may collect information such as pages visited, time spent on the website, device type, browser type and general location information.

Our website may also use cookies and similar technologies to support website functionality, process ticket purchases, and analyse website performance.

You can manage or disable cookies through your browser settings. Where required, we will request your consent for non-essential cookies.

 

Event Photography and Promotion

We may take photographs or video at events for promotional purposes, including use on our website, social media, email updates, and printed materials.

Where possible, we will make attendees aware when photography or filming is taking place.

If you do not wish to be photographed or featured in promotional content, please let us know before or during the event.

International Transfers

Some of our third-party providers, including Google Analytics and payment providers, may store or process personal information outside the UK.

Where this occurs, we expect appropriate safeguards to be in place to protect your information in accordance with UK data protection legislation.

 

How Long We Keep Your Information

We will only retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements.

Order, ticket and transaction records may be kept for accounting and legal purposes.

General enquiry information will only be kept for as long as necessary to respond to the enquiry and manage any ongoing relationship.

 

Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request erasure of your personal information in certain circumstances

  • Request restriction of processing

  • Object to the processing of your personal information

  • Request the transfer of your personal information to another organisation

  • Withdraw consent where consent is the basis for processing

If you wish to exercise any of these rights, please contact us at:

Email: info@burybusinessexchange.co.uk

 

Data Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

 

Data Protection Complaints

If you have concerns about how we have collected, used or handled your personal information, you have the right to make a complaint to us.

You can submit a complaint by emailing info@burybusinessexchange.co.uk or by writing to:

Bury St Edmunds Business Exchange CIC
5 Downing Drive
Great Barton
Bury St. Edmunds
England
IP31 2RP

Please include:

  • Your name and contact details

  • Details of your concern or complaint

  • Any relevant dates or correspondence that may help us investigate the matter

  • Details of the outcome you are seeking

What happens next?

  1. We will acknowledge receipt of your complaint within 30 days.

  2. We will investigate your complaint without undue delay. This may involve reviewing our records, speaking with relevant individuals, and requesting additional information from you where necessary.

  3. We will keep you informed of progress, particularly if our investigation is likely to take longer than expected.

  4. We will provide you with a written response outlining the outcome of our investigation and any actions we intend to take.

If you remain dissatisfied with our response, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO).

You can contact the ICO using the details below:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, legal requirements, or the way we process personal information.

Any updates will be published on this page. We encourage you to review this policy periodically.

Last updated: June 2026