This privacy notice will help you understand how 7C3 uses and protects your personal data. We are Seven Publishing Group Limited T/A 7C3 registered in England and Wales at 4th Floor 95 Chancery Lane, London, England, WC2A 1DT with company number 04809240. You can contact our voluntarily appointed Data Protection Officer at simon.ghent@c3.co if you have any concerns or wish to exercise your rights.

Our Promises:

We’re committed to your data privacy and security. As such we give you these promises:

• We will only collect data about you that is relevant and necessary;
• Your data will only be held on systems that meet compliance standards;
• We will only collect data about you that is relevant and necessary;
• Your data will only be held on systems that meet compliance standards;
• Your data will only be accessed by those who need it and we will minimise the amount of data that is processed, wherever possible;
• We won’t share or sell your data to any third party, except for the marketing of our own services to you, unless either you have agreed, we are required to share it by law or we need to fulfil our service commitments to you through a third party that meets our own privacy standards;
• We will always remember that it is your personal data, not ours. As such we will ensure complete transparency and openness with you wherever possible.
• We respect your rights as outlined in the next section and will respond to all requests promptly

Your Rights:

You have the following rights over any data we hold about you:

• Right to object to processing at any time
• Right to opt out of marketing at any time
• Right to have inaccurate data corrected
• Right to erasure of personal data from our database
• Right to export of personal data

You can read more about your rights here. If you would like to uphold your rights then please contact our Data Protection Officer at simon.ghent@c3.co If you are in dissatisfied with our response you also have the right to lodge a complaint with the Data Protection Authority. This can be done at https://ico.org.uk/concerns/

How we Collect your Data

We mainly only process the data you have provided to us either directly or on behalf of the clients we represent. This may be from:

• Filling in a form on our website,
• Sending us your details
• Providing your details to us at events

If you belong to an organisation, we may also source your information from public databases and other sources.

What Data we Collect

We try and minimise the data held and the exact data elements we hold will be dependent on your journey with us. Typically, data elements we collect include: Typically, data elements we collect will depend on the relationship we have with you. Typically, data elements used are restricted to:

• Your personal contact details – email address, IP Address, phone numbers, business related social media page such as LinkedIn and source of your data;
• Your company details – as above but also address, website and other public held information including credit rating and invoicing details if relevant;
• Transmitted information – such as emails, texts, messaging, phone call information and recordings, voice mails, email, meeting notes, CVs and document tracking information.

Calls may also be recorded for information holding, quality and training purposes.

How we Process your Data:

Data is processed/stored mainly on encrypted cloud services such Microsoft 365, Azure, BOX.com and our marketing platforms. As a multinational service provider, we operate in a number of jurisdictions. We use the following safeguards with respect to data transferred outside the UK and European Union where an “adequacy decision” is not in place:

• The processing is within the same corporate group as our business or organisation and is obligated to uphold the same standards of Data Protection and Security as our UK entity. For example, our offices in Canada.
• Further to Section 119A of the Data Protection Act 2018 and noting Case C-311/18 in the European Court of Justice, if your data is transferred or processed outside of the UK or EEA we ensure the safeguards of International Data Transfer Agreements (IDTAs) or Addendums are enforced. Where this is not possible, we ensure that European Standard Contractual Clauses are entered.

We regularly review suppliers for data security compliance to ensure your data is safe and track where your data is held. All our processes are subject to various internal policies to ensure that your data privacy and security is upheld.

What we use your Data for:

We process your data for several reasons:

• To fulfil a contractual obligation or service to you or on behalf of our clients
• To better understand your needs.
• To improve our services and products.
• To send invitations to events and follow these up if you have signed up to them.
• To send you promotional emails containing the information we think you will find interesting.

We ensure we have a “legal basis” to use your data for the purpose we have collected it for. Any legitimate interests pursued by us, or third parties we use, are as follows:

• It is necessary for us to process the data to fulfil a request by yourself even if made to a third party.
• We feel it would be beneficial to you and that you would expect to hear about certain services we offer.
• You would reasonably expect such processing to take place.

Who we share your data with:

We share information where others are involved in the delivery of your service. These include:

• Digital Marketing Service Providers and Agents to conduct marketing activity on our behalf
• Print Fulfilment and Subscription Delivery Partners
• Where we have a legal obligation to

Our website and other materials sent to you may contain links to other third party websites. We may also offer buttons to social media that link to third party services. We’re not responsible for the content or your data privacy these sites provide through their tools or sites. Our current Digital Marketing Service Providers include: Prospect Global Ltd (trading as Sopro) whose company number is 09648733 and registered with the ICO with registered number ZA346877. You can contact Sopro and view their privacy policy here. Their Data Protection Officer can be emailed at: dpo@sopro.io

Data Retention

Dependant on the data you provide us and for what purpose it is provided we may need to retain your data based on your journey with us. Typically, we will retain your data for 3 years following our last engagement with you. If you wish to find out more about your specific data retention, please contact us.

Data Permissions:

Every marketing email sent from Us allows you to opt out of receiving emails from us, except for the purposes of fulfilling any contractual arrangements. You can also contact us at the email address above and request to opt out, view, export or delete your data. If you request for your data to be deleted, your name and email address will be added to an exceptions list and all other data removed to the extent possible.

Legal Compliance:

We seek to uphold our legal obligations as covered by the Data Protection Act 2018 and the General Data Protection Regulation 2016. Our Data Protection Authority is designated as the ICO and where we’re registered as a Controller. This Notice was last revised on 11th May 2023. We will post the most current version on our website.