Privacy Policy

Barclays Chief Technology Office (CTO) Group Innovation Privacy Policy

We are committed to protecting the information we hold about you. This privacy notice describes how, when and why we, Barclays CTO Group Innovation (Group Innovation), a part of Barclays Execution Services Limited, may use your information to deliver the Group Innovation team’s suite of programmes and services, as well as your rights relating to that information. This privacy policy includes (but is not restricted to) the Rise, created by Barclays, programme, and our Barclays female founder and alumni programmes.

Information we hold about you

Barclays Execution Services Limited is the ‘data controller’ for your personal data. This means they are responsible for deciding how we can use your personal data. The information we hold about you will often come from you directly.

That information may include the following.

Your personal details (for example, your name, title and date of birth)
Your contact details (for example, your postal address, phone number, email address or mobile number)
In certain circumstances, details about your health:
- if necessary, to meet our legal and / or regulatory obligations (for example, to support personal evacuation plans); or
- to meet any special dietary requirements (for example, if you are attending an event we are organising).
Your interactions with us (for example, through social media)
Your gender if you choose to provide it or in some cases ethnicity in order to help us to promote equality
Information about you should you contribute to or appear within the content of blogs, articles and videos

We may also collect information from publicly available sources, such as media stories and online registers or directories.

We will always keep your data safe

We are committed to respecting your privacy and safeguarding your personal data. If we are required by law or by a regulatory body to share your data with other organisations, such as the government, we always do so securely and we will not share more than what is required. When we ask other companies to process your data on our behalf, we will always make sure they follow similarly high standards to those followed by Barclays. Any reports that we publish will always be anonymous; therefore, your personal data will not revealed or identified.

We use your data to support you and to help your business and its network to grow. This will include organising events, enabling the use of our or our facilities or providing you with information regarding our products and services as requested. We do this by using your data to personalise your experience and develop new services that we think you’ll like or introducing you to other business contacts who we think might benefit your business.

Whether it’s to deliver products and services to you and others, or to comply with legal requirements, we’ll always be clear and open with you about how and why we’re using your personal data. And if you need more detail, we’ll always keep our privacy notices where you can find them easily.

We will only provide marketing material to you with your consent, or if you have requested that we keep you updated regarding the products or services we offer. If at any time you no longer wish to receive such material, please contact the Barclays Group Innovation team.

What we use your information for	The legal basis for doing so
Registering you as an attendee at one of our events	Where necessary to carry out our agreement or to take steps to enter into an agreement with you
Suggesting other Barclays and partner events that you may be interested in	Where it is in our legitimate interests to provide information relevant to you; or Where you have specifically requested that we keep you informed of such events
Enabling the use of our or our Partner services and facilities securely and for us to deliver the services you have requested	Where necessary to carry out our agreement or to take steps to enter into an agreement with you; or to comply with our legal and regulatory requirements
Providing you with information regarding our products and services	Where you have requested such information
To develop new services that we think you may be interested in	It is in our legitimate interests to develop and improve our programmes for your benefit
Personalising your experience following any feedback we receive from you or the broader community associated with the relevant programme or service	It is in our legitimate interests to improve the service we provide to you
Obtaining your feedback and using research to help us to understand how your business and the Group Innovation team is performing Producing insight reports in an aggregated and anonymised form from which you will not be identifiable	It is in our legitimate interest to improve services and to develop new ways to support your business If we would like to publish your information from your feedback from which you are identifiable, we will only publish it with your explicit consent
Introducing you to other business contacts who we think might benefit your business by supporting your business at the stage it is at, for example, by providing mentoring or wider services provided by the Group Innovation team	Where necessary to carry out our agreement or to take steps to enter into an agreement with you; or Where you have requested that we make such introductions
Addressing an issue or concern you have raised	Where you have raised an issue or concern, it is in our legitimate interests to address such concerns and respond to you
Increasing equality of opportunity and assessing who would benefit the most from our support	It is in our legitimate interest to promote equality by creating opportunity for underrepresented groups If we are using special category personal data it is in the substantial public interest
Generating aggregated data on how the Group Innovation team can promote diversity and inclusion	It is in our legitimate interests to monitor the effectiveness of the Group Innovation programmes and services to positively improve equality in the workplace
Carrying out due diligence checks, which may reveal political opinions or information about criminal convictions or offences	It is in our legitimate interest to prevent and investigate fraud, money laundering and other crimes as well as to protect our business and to keep to laws that apply to us If we are using special category personal data it is in the substantial public interest
The content of blogs, articles and videos	Where you have provided your permission to appear or to take part in published content

Who we share your personal data with

Sharing some personal data with us is essential for you to participate in our programmes and use our services and facilities securely. It is also used by us to deliver the services you have requested, to comply with our legal and regulatory requirements or where it is in our legitimate interests to do so. For example, we may need to share your data with event organisers or hosts, payment providers, our facility partners (including incubators) and with third party platform and hosting service providers, including for the purposes of managing complaints or obtaining feedback.

We are owned by Barclays Execution Services Limited, so we work closely with other businesses and companies in the Barclays Group of companies. We may share certain information with other Barclays Group companies (for example, to provide you with products or services, for marketing purposes, for internal reporting and where those companies provide services to us).

We never forget it’s your personal data

You’ve trusted us with your data, and in return we’ll give you the control you need. You can decide how we contact you with offers of products and services or other information we think you may be interested in. If at any time you need to update your personal details, please contact your Barclays programme contact, or contact the Barclays Group Innovation team.

Keeping your information

We will only keep your personal data:

For as long as we need it to deliver the services requested by you (including provision of information you have requested); or
To track Group Innovation events and enable us to suggest others that you may be interested in where it is in our legitimate interests or where you have requested we keep you informed of such events; or
To comply with our legal or regulatory requirements

For further details of our retention periods, please contact the Barclays Group Innovation team.

GDPR for UK and EU residents

If you are resident in the UK or the EU, the General Data Protection Regulation (GDPR) gives you more control of your personal data, providing new and strengthened rights:

Right to access – you can ask us whether we’re processing your personal data, including where and for what purpose
Right to restrict processing – in certain circumstances, you can ask us to restrict our use of your personal data
Right to rectification – you can contact us at any time to correct inaccurate personal data we hold about you
Right to erasure (right to be forgotten) – in certain circumstances, you can ask us to erase your personal data
Right to data portability – you can ask us to provide you with a copy of your personal data in a commonly used electronic format so that you can transfer it to other businesses
Right to object to automated decision-making – in certain circumstances, you can ask us not to make automated decisions about you based on your personal data that produce significant legal effects
Right to lodge a complaint – if you have any concerns about the way we process your personal data you can contact us at DPO@Barclays.com in the first instance. If you are not satisfied with our response you have a right to lodge a complaint with your local data protection authority. In the United Kingdom, you can complain to the data protection authority of the United Kingdom, using their website at https://ico.org.uk.

To read more about the GDPR, please visit the Information Commissioner’s Office website, an independent authority that upholds information rights in the public interest.

Do I need to do anything?
If you have a specific product or service with us, or participate in a certain programme or service controlled by the Group Innovation team, your product or service specific documents will include additional information about the purposes for which we use your personal data. Please ensure you have read such documents.

How to contact us

If you would like more information on your rights, or want to exercise them, please send an email to DPO@Barclays.com.

For Residents of the State of California, United States:

If you are a California (CA) resident, please note the following about how we have collected, used, disclosed and otherwise processed your personal information over the past 12 months, as well as additional rights you may have with respect to your personal information.

CA Personal Information. Consistent with this Barclays CTO Group Innovation Privacy Policy, we may collect certain categories of information about you, such as:

Identifiers, such as name, address and email address;
In certain circumstances, date of birth;
Business contact information;
Internet or network activity information, such as browsing history and interactions with our website;
Professional information about you, should you contribute to or appear within the content of blogs, articles and videos;
In certain circumstances, details about your health, for example, to meet our legal and/or regulatory requirements (for example, to support evacuation plans), or to meet any special dietary requirements (for example, if you are attending an event we are organizing);
Your interactions with us (for example, through social media);
Your gender if you choose to provide it or in some cases ethnicity (in order to help us promote diversity);
Inferences drawn from any of the personal information listed above, for example, to create a profile about your preferences and characteristics.

Sources of CA Personal Information. The personal information we collect will often come from you directly. We may also collect information from publicly available sources, such as media sources and online registers or directories. We also may collect certain information about your use of our website, as set out in our Cookie Policy.

Uses and Disclosures of CA Personal Information. The purposes for which we use the personal information that we collect depend on our relationship or interaction with a specific California resident. For example, we may use personal information:

to operate, manage and maintain our business;
to provide our products and services;
to conduct “know your customer” activities; and
as directed by you or with your consent.

See above for additional ways in which we may use your personal information, under “What we use your information for.” For how we may disclose your personal information, see above under “Who we share your personal data with.”

No Sale or Sharing of Personal Information. We do not disclose your personal information in a manner that constitutes a “sale” or “share” under the CPRA. We do not sell your personal information.

Data Retention. We keep your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include (i) the duration of our relationship with you or your institution; and (ii) our legal obligations, including in the context of any applicable statutes of limitations, litigation or regulatory investigations. We may remove personal information for inactive accounts from our database, subject to any applicable legal or regulatory obligations. We may delete personal information from our database at any time and without providing any reason, as permitted by applicable law.

California Privacy Rights. As a California resident and subject to certain exceptions, you may have the following rights:

The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you;
The right to delete personal information that we have collected from you;
The right to correct inaccurate personal information that we maintain about you.

To exercise any of these rights, please email us at riseldnteam@barclays.com, or call us toll-free at 1 800 368 4021.

We will undertake to verify that the individual making the request is the individual about whom we have collected personal information, or an authorized agent, by matching the identifying information that the individual has provided with the personal information maintained by us or through the use of a third party service provider.

You may designate an authorized agent to make a request on your behalf in certain circumstances. If you use an authorized agent for this purpose, we may ask you to verify that you provided the authorized agent signed permission to submit a request on your behalf. If you provide an authorized agent with power of attorney pursuant to CA Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

You will not be penalized for exercising your rights to your personal information. If we deny your request, we will explain why.

About our privacy notices

From time to time we will update our privacy notices and add new privacy notices in the future, so we recommend that you check this page occasionally to ensure that you’re happy with any changes. If changes to this privacy notice will have a major effect on what we do with your personal data or on you personally, we will give you enough notice to allow you to exercise your rights (for example, to object to the processing).