Newcastle NE1 Limited of Milburn House, Dean Street, Newcastle Upon Tyne, NE1 1LE with registration number 06500486 (we, our or us) is committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this policy carefully to understand how we handle your personal data. Some of our websites and services may have separate terms or cookie policies explaining how we use your personal data.
Newcastle NE1 is a Business Improvement District company, which means our purpose is to provide support and services to local businesses, and manage projects and campaigns to benefit Newcastle. You can find out about how we operate in About NE1.
In order to provide these services to Newcastle, it’s visitors and residents, and to manage this website, we on occasion process personal data about our customers, stakeholders, partners, website visitors, members of the Newcastle community and any other individuals who show interest or are involved in our projects or campaigns. When we process this data, we are the data controller and are responsible for what we do with that data and how it is processed.
1. Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.
2. Information we may collect from you
Personal data, or personal information, means any information about an individual from which that person can be identified.
In some circumstances we may anonymise your personal data so that it can no longer be associated with you for research or statistical purposes.
We may collect, use, store, and transfer different types of personal data, depending on how you engage with us. These are listed below.
- Identity Data includes first name, last name or similar identifier, marital status, title, date of birth and gender.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data includes your purchases or orders, interests, preferences, feedback, and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Each category of data collected is justified by a specific purpose, with strict data minimisation and retention limits documented against that purpose.
3. If you don’t give us your personal data
Where we need to collect personal data to provide the offer or service you are interested in, we may not be able to provide that offer or service if you don’t provide that data when requested. For example, we can’t send your tickets or vouchers for events if you don’t provide a valid email address. If we don’t have enough information to process your request, our website will prompt you to provide the missing details, or we will notify you.
4. How is your personal data collected?
We use different methods to collect data from and about you.
You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you, for example:
- Sign up for offers or services
- Subscribe to our newsletters or publications
- Request information or marketing from NE1 or one of our campaigns
- Enter a competition, promotion or survey
- Give us some feedback
- Information from other organisations: For business-facing activities, we may receive contact details from trusted sources such as Newcastle City Council, Companies House or professional platforms, where this is lawful. This is provided here as part of our transparency obligations under UK GDPR
As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies. Please see our section on Cookies for further details.
We may also receive technical data from analytics providers such as Google, or other search engines and social media platforms when they are reporting on the interaction of our advertising or publicity campaigns and engagement.
If you are a business partner, or an employee or representative of one of our levy-paying businesses, we may receive personal data about you from various third parties and public sources, including, but not limited to, Newcastle City Council, Companies House, LinkedIn, oogle and our Street Ranger team.
5. Purposes for which we will use your personal data
We have set out below a description of the ways in which we may use your personal data, and what our legal basis under the General Data Protection regulation (GDPR) for that processing is. We have also identified what our legitimate interests are where appropriate and retention periods.
Please note, however, that we may be obligated to retain your personal data for legislative compliance purposes which will override these retention periods. A Legitimate Interest is an interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by emailing advice@newcastlene1ltd.com or call us on 0191 211 3951.
Where we rely on legitimate interests, we assess and document our reasoning to ensure our interests do not override your rights and freedoms. Our legitimate interests include:
| Purpose/Activity | Lawful basis for processing | Retention period |
| To add you to our Get into Newcastle database and keep you updated with goings on across the city, such as [Newcastle Restaurant Week, Screen on the Green, Quayside Carnival, for example].
| We will add you to our database if you sign up for newsletters or marketing communications, request to be added, or provide your contact details at a business or networking event. | For as long as we continue to operate our Get into Newcastle website and associated events. If you ask us to remove your details, we will do so within 1 month. |
| To add you to our business events database [for example, our Business Breakfast networking events or to receive our Monthly Comms email.
| We will add you to our database if you provide your contact details at an event or request to receive updates. | For as long as we continue to operate business events. If you ask us to remove your details, we will do so within 1 month. |
| To send you correspondence relating to your Newcastle City Marina booking, if you are a current or former marina user.
| This is on the performance of our contract with you as we are administrators of the Marina. | For as long as we continue to operate the Newcastle City Marina. We will retain data for 7 years from the point of last visit. |
| To send you information about events and offers you may be interested in relating to the Newcastle City Marina. | We will send this information to you if you sign up for these communications and will be contacting you on the basis of your consent. | For as long as we continue to operate the Newcastle City Marina. If you ask us to remove your details, we will do so within 1 month.
|
| To inform you of our programme of events, if you have signed up to our NE1 Can programme. | We will send this information to you if you sign up for these communications and will be contacting you on the basis of your consent.
For NE1 CAN, we engage with young people through education providers. We do not collect personal data directly from under-18s. Any contact information we hold relates to teachers, coordinators or education provider representatives | For 5 years after the programme ceases to exist. If you request to be removed from the contact list, we will remove your details within 1 month. |
| To contact both levy-paying an non-levy paying local businesses with service message updates, such as details of road closures or other potentially disruptive events happening across the city; or about upcoming events and campaigns.
| We have a legitimate interest to keep local Newcastle businesses up to date with what is happening across the city, as part of our role as a Business Improvement District. | For as long as we continue to operate as a Company. If you request to be removed from the contact list, we will remove your details within 1 month. |
| To contact the Business Improvement D istrict levy paying businesses about our BID function. | We have a legal obligation to manage NE1 as a Business Improvement District with Newcastle City Council under the Local Government Act 2003.
| For as long as we continue to operate as a Company. |
| To manage payments in relation to any of our services. | We need to do this in performance of our contract with you.
| 6 years from the point of payment/entering into contract. |
| Asking you to leave a review or take a survey in relation to any of our campaigns. | We do this for the legitimate interest of improving the service we provide to businesses and the community.
When completing a survey we will process your information on the basis of your consent. | For as long as we continue to operate as a Company. If you request to be removed from the contact list we will remove your details within 1 month. |
| To enable you to partake in offers, prize draws, competitions. | We will contact you if we have your consent, or we have a legitimate interest to contact you in relation to any of our campaigns.
We will manage any competitions you enter in performance of a contractual relationship. | For as long as we continue to operate our Get into Newcastle website and associated events. If you ask us to remove your details we will do so within 1 month. |
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data); to deliver relevant website content and understand the effectiveness of our publicity and advertising communications.
| We may need to use some technical data with is capable of identifying you. We do this on the legitimate interest of developing NE1, our processes and strategy to create campaigns and events that are of maximum benefit to the community. | For as long as we continue to operate as a Company. If you request to be removed from the contact list we will remove your details within 1 month. |
| We may monitor and record communications with you (such as telephone conversations and emails). | This is for our legitimate interests of quality assurance, training, fraud prevention and compliance. | For as long as we continue to operate our Get into Newcastle website and associated events. If you ask us to remove your details we will do so within 1 month.
|
|
| ||
Images
We rely on legitimate interests to capture event imagery used to promote NE1 activities. Images could be used in print and digital media formats including print publications, websites, e marketing, posters, banners, advertising, film and social media. Images on websites can be viewed throughout the world and not just in the United Kingdom and that some overseas countries may not provide the same level of protection to the rights of individuals as EU/UK legislation provides. Some images or recordings may be kept permanently once they are published and be kept for the duration of NE1’s existence.
Clear signage is displayed at events and you may request not to be photographed by speaking to a member of our team, or not to enter this area. Where children may be present, we take extra care to avoid identifiable imagery unless appropriate consent is in place. If you see an image online that identifies you and wish it to be removed, please contact us at advice@newcastlene1ltd.com. We keep images on file indefinitely as a historic record of our activities and Newcastle.
6. Disclosure of your personal data
We may share your information with selected third parties including:
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, which includes payment providers such; our NE1 Street Rangers and Clean team, CitySafe partnership, newsletter service providers such as MailChimp, and Monitor Mail, and Vicinity (our customer relationship management system).
- Analytics and search engine providers that assist us in the improvement and optimisation of our Site; and,
- Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering a contract with you.
We may disclose your personal information to third parties:
- If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If all, or substantially all, of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; and
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or to protect the rights, property, or safety of our customers, or others.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We primarily process personal data within the UK. Where our service providers are located outside the UK, or access UK personal data from abroad, we ensure a lawful transfer mechanism under UK GDPR. This may include:
- A UK adequacy regulation,
- The ICO’s International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs, and
- A Transfer Risk Assessment (TRA) and additional safeguards where required. Copies of relevant safeguards are available on request.
7. Cookies
We use cookies and similar technologies on our websites. Under the UK Privacy and Electronic Communications Regulations (PECR), we request your consent before setting non-essential cookies such as analytics or advertising cookies. We only set strictly necessary cookies without consent.
Updates following the Data (Use and Access) Act 2025 (DUAA):
Changes to PECR introduced by DUAA may allow some low-risk, non-essential cookies to be set without consent in limited circumstances. As ICO guidance is still being finalised, we will continue to obtain consent for analytics and similar cookies and will update this policy when the ICO completes its revised guidance.
Third-party cookies:
Some third-party platforms (e.g., social media) may set cookies when you engage with embedded content. Please refer to their privacy policies for further details.
Enforcement and penalties:
Breaches of PECR can attract penalties up to £17.5 million or 4% of global annual turnover, following DUAA reforms aligning PECR fines with UK GDPR levels.
8. Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. However, the transmission of information via the internet is not completely secure. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Third Party Links
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
10. Your rights
You have the right to:
- Request access to your personal data, known as a "data subject access request". We will respond within one month and carry out reasonable searches to fulfil your request. Where the request is complex, we will notify you accordingly.
- Request correction of any inaccurate personal data that we hold about you.
- Request erasure of your personal data where there is no good reason for us continuing to process it. We may not always be able to comply with your request of erasure for legal reasons.
- Object to processing of your personal data where we are relying on a legitimate interest. In some cases, we may demonstrate that we have compelling grounds to continue processing your information which override your request.
- Object to direct marketing at any time.
- Request restriction of processing while we establish accuracy or lawfulness, or to hold data for legal claims.
- Request the transfer of your automated personal data in a structured, machine-readable format where we used the information to perform a contract with you, or you gave us your consent to process it.
- Withdraw consent at any time where we are relying on consent to process your personal data.
- Not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. You are entitled to:
- Be informed when such processing is in use;
- Make representations challenging the decision;
- Request human intervention in the decision-making process.
- Complain to the Information Commissioner’s Office (ICO) at any time (www.ico.org.uk).
We do not carry out any solely automated decisions that produce legal or similarly significant effects. If this changes, we will update this policy and explain your rights to obtain human review and contest decisions.
11. Data Protection Contact
We are not required to appoint a statutory Data Protection Officer. For any questions about this privacy policy or how we handle your personal data, please contact our Data Protection Lead at advice@newcastlene1ltd.com or 0191 211 3951. If we appoint a formal DPO in future, this section will be updated.
You may lodge a complaint using our online form, email or post. We will acknowledge receipt within 30 days and act on it without undue delay.