Cambridge University Logo

Privacy Policy

ideaSpace Privacy Policy

Please take a moment to read and understand this policy. This policy supplements our other privacy policies and notices and is not intended to override them.

Who we are

ideaSpace is part of Cambridge Enterprise Limited, a wholly-owned subsidiary of the University of Cambridge. Cambridge Enterprise is the data controller responsible for the personal information that you agree to share with ideaSpace and all data is managed and processed by Cambridge Enterprise Limited.

1. What is personal information?

 ‘Personal information’ means any information which relates to or identifies you as an individual.

Please see further information on our data protection pages to see how this web page relates to other information about data protection.

2. Who will process my information?

The information published here applies to the use, sharing and disclosure of your personal information by the ideaSpace team within Cambridge Enterprise.

3. What personal information will be processed?

When you sign up to be a member, register with us to receive email updates, pass us a business card, book on one of our events, or instruct us in connection with any matter or use any other service on you may be asked to provide certain information about yourself including your name and contact details. We may also collect information about your usage of our website as well as information about you from your e-mails or letters you send to us.  We do take photographs at our events and information on this will be provided separately as necessary on an event by event basis.

Here are some examples of data that we may collect from you:

– Email address

– Name

– Company

– Date of birth

– Telephone number

Sensitive data

In addition to the data listed above, the ideaSpace team within Cambridge Enterprise may process some information about you that is classified as ‘sensitive’ and which requires special protection. This includes information on your dietary requirements, which we may need if we are supplying catering for an event. We will hold this information until such a time that you tell us not to, unless you tell us differently at the time of providing the information. Access to, and the sharing of, your ‘sensitive’ personal data are controlled very carefully.

Third party data.

Cambridge Enterprise may also receive information from our partners, or others, that we use to improve our information. An example of this would be where further information is received to enable us to see which IP addresses go with which postcodes, or information about how well an online marketing or email campaign performed.

Your personal information is created, stored and transmitted securely in a variety of paper and electronic formats, including our database SugarCRM. Access to your personal information is limited to Cambridge Enterprise or University of Cambridge staff.


What are Cookies?

Cookies are small text files which are stored on your computer or device when you visit a website. Cookies enable the website to remember information about you and your preferences.

How do we use them?

We use cookies for our content management system that is used to manage our website.

These cookies are used to monitor the date of your last visit to our website and make sure you are shown the most up to date version of content. They also store form redirects and data useful to the system administrators who maintain our website.

We also use cookies to collect anonymous information that helps us understand ‘visitors’ browsing habits on our website and to produce statistical reports on our website activity. This information helps us to improve our services.

How to control Cookies

You can manage restrictions on cookies via your web browser. The ‘Help’ functionality in your web browser should provide information on how to change these preferences.

4. What is the purpose and legal basis for processing?

Cambridge Enterprise may process your personal information for a range of purposes, including the following:

–      To fulfil a contract which we have undertaken with you

–      To enable you to access the ideaSpace Portal

–      To communicate effectively with you by post, email and phone, including the distribution of relevant newsletters, circulars or invitations to workshops and events

–      To gather feedback on our services from you

–       To provide you with relevant communications where we think they will be of interest to you based on the information you have provided to us.

Cambridge Enterprise considers the processing of your personal information for these purposes to be either necessary for the performance of our contractual obligations with you, or necessary for the pursuit of the legitimate interests of Cambridge Enterprise. Where the processing of your data is necessary for the fulfilment of a contract we have with you, we may not be able to provide the service(s) you have agreed with us in the contract if you do not supply us with the personal data we ask for.

If we require your consent for any specific use of your personal information, we will collect it at the appropriate time and you can withdraw this at any time. We will not use your personal information to carry out any wholly automated decision-making that affects you.

5. Who will my personal information be shared with?

Cambridge Enterprise will not share your personal information with or sell it to third party marketers. We may use the following third-party service providers named below to process and store your data. Please see a list of these providers and the corresponding privacy policies, which detail how your data will be used and managed, here:

-MailChimp (The Rocket Science Group, LLC): to send marketing communications to users who subscribe to receive them. Mailchimp privacy policy

– Salesforce: our client management database. Salesforce privacy policy

– Eventbrite: to support the registration process for some of our events. Eventbrite privacy policy

– Zendesk: our ideaSpace portal for members. Zendesk privacy policy

– Google Groups: to provide our collider group to founders. Google Group privacy policy

– Slack: a communications tool for the ideaSpace team Slack privacy policy

– Dropbox: Document storage Dropbox privacy policy

– Reception staff at The Hauser Forum and The Clifford Allbutt Building are given a list of members, along with company name and contact details to enable them to make contact upon the arrival of visitors and parcels delivery.

On occasion, the above types of sharing may involve the transfer of your personal information outside the European Economic Area (e.g. in the case of working with one of our Third Party Associates based overseas). Such transfers usually are necessary in order to meet our contractual obligations with you, or where it is in our legitimate interest to do so and are carried out with appropriate safeguards in place to ensure the confidentiality and security of your personal information.

Other than as set out above, we will not publish or disclose any personal information about you to other external enquirers or organisations unless you have requested it or consented to it.

6. How can I access my personal information?

You have the right to access the personal information that is held about you by Cambridge Enterprise.

You have the right to access the personal information that is held about you by the Cambridge Enterprise. Further details can be found at Making a Subject Access Request.

You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or to receive an electronic copy of the personal information you provided to us. Please contact if you believe we have some inaccurate personal information held about you.

If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, SK9 5AF. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

You also have the right to ask us to correct any inaccurate personal information we hold about you by contacting

7. How long is my information kept?

We will continue to process your data until such a time that you tell us not to. An option to unsubscribe will be on every communication we send to you.

8. Who can I contact?

If you have any questions about how your personal information is used, or wish to exercise any of your rights, please contact

9. Are changed made to this webpage?

This webpage was last updated on 24 January 2023 It is reviewed when necessary and at least annually. Any changes will be published here.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.


Stay up to date with insights and events