WHAT IS A BID?

Business Improvement District (BID) schemes are business led initiatives supported by government legislation which give local businesses the power to ‘raise funds locally to be spent locally’ on improving a defined commercial area and supporting the businesses located within that trading area through the delivery of projects and services.

A BID is created when the majority of business ratepayers within that area vote to invest collectively in local improvements. Under BID legislation, a BID can only continue for five years before a new business plan needs to be published and a ballot held where businesses vote ‘yes’ or ‘no’ to the BID. If the majority of businesses by number and rateable value, vote in favour of the proposal, the BID will go ahead and apply to all.  It is just like a referendum and the majority view will prevail. 

BID schemes are independent of local authorities and other statutory bodies although the local authority has a duty to collect the annual levy on the BID’s behalf.

There are now almost 300* BID schemes operating across the UK with eight in Cornwall. *at time of writing – May 2018.

More information on BIDs and their purpose can be found at https://britishbids.info/about/what-is-abid

WHAT LEGISLATION UNDERPINS BID SCHEMES?

Legislation enabling the formation of bids was passed in 2003 in England and Wales (with subsequent regulations published in 2004 and 2005 respectively) and in 2006 in Scotland.

Collection of the BID levy carries the same enforcement weight as collection of the non-domestic rates and is mandatory for all eligible businesses within the BID area regardless of how they voted. http://www.legislation.gov.uk/uksi/2004/2443/contents/made

ABOUT PENZANCE BID

Penzance BID has been operating since June 2015 and is a Private Company limited by guarantee (registered in England and Wales company number 9617264).

Penzance BID has positions on its Board for up to 12 elected Directors who voluntarily support

Penzance BID; there are currently 11 Directors drawn from organisations within Penzance and its voluntary members.

Penzance BID has its own articles which outline that all levy payers are members of the BID Company with voting rights at the annual AGMs.

OUR APPROACH TO DATA PROTECTION

  • We are a company that uses data to inform local businesses and organisations about issues and services that will support them or enhance their knowledge. We are not ‘selling’ a product or service but providing information that we deem is in their interest.
  • We are committed to protecting and respecting personal data and privacy and to complying with all applicable laws including the General Data Protection Regulation (GDPR) which came into force on 25th May 2018.
  • We will only use data where we have a legal or legitimate reason to do so; this includes sharing it outside Penzance BID if appropriate with third-party providers. We will never sell our data to companies for marketing purposes.
  • We regularly review the data we are storing and processing and on what basis it is being used for; each time we communicate, we will ensure that there are legitimate or legal reasons to do so and if additional consent should be obtained.
  • We store data on a specific Penzance BID laptop which is password protected and regularly backed up to Google Drive by the Penzance BID Manager who is the only person with the password to this device.
  • Information shared with third parties is encrypted and we seek assurances that third parties have data protection policies in place that adhere to the GDPR legislation.
  • Penzance BID has registered with the Information Commissioner (ICO) reference ZA38316

THE DATA WE HOLD

Penzance BID holds the following data and is the data controller and processor. The principles outlined in the above sections apply to all data held:

i) Members database – members of our BID Company under our BID articles. It is essential that we hold this data and keep it up to date in order to communicate with our levy payers who have contributed funds towards the BID.

Our database contains approximately 396 business entries* of organisations over £6,000 rateable value including their name, address, email address, phone numbers and rateable value of business premises and their owners or senior managers, plus a number of Voluntary Levy Payers who have joined the Penzance BID *as of May 2018

We will regularly update these lists for the purpose of communicating with members regarding the renewal of our BID (legal interest) and updating our levy payers on how we are spending their money in line with the business plan upon which the BID was voted in (legitimate interest).

We may share elements of this data with third parties such as our PR and Marketing Company or an appointed agency contracted to contact levy payers to support them with procuring services at a reduced rate e.g. energy, telecoms, insurance etc

(legitimate interest).

Occasionally, we will communicate with levy payers on issues which are not deemed to be in either legal or legitimate interest but require consent; in these instances, we will contact levy payers describing how we wish to use their data and asking for consent (see section 6).

ii) Board and Committee database – we hold data on the members of our Penzance BID Committee (name, email address) and our Penzance BID Board Directors (name, email address and home address also listed on Companies House) to enable us to communicate and hold meetings (legitimate interest)

iii) Staff – we hold data relating to our part time employee which includes a staff contract and appraisal document. Information is also held on people who have applied for vacancies such as CV’s and interview notes – this information is held electronically in an archived folder (legitimate interest)

iv) Tenders – we hold data relating to those companies who have tendered for work and the associated assessment notes – this information is held electronically in an archived folder (legitimate interest).

v) Website/Business Map & Directory – we list data relating to a business’ address, email and phone number on a public website at penzancebid.co.uk with a business listing which is approved by the businesses themselves. Equally, a leaflet listing every business on Newham is published and consent is sought from the businesses before publication. Both the website and map data is drawn from the levy payer’s database.

Our collection methods are:

  • Through being eligible to pay into the BID – this information originates from the ratings list held by Cornwall Council but Newham BID adds to this data by collecting the name of the person operating the business and their email address;
  • Through our websites – penzancebid.co.uk ; lovepenzance.co.uk, penzanceparking.info *;
  • By communications including email, telephone, post or social media;
  • Through networking and one to one visits – when a new business opens on Newham or there is a change in ownership of an existing business, we make contact with the new occupier to tell them about the BID and what we provide;
  • From third parties who engage with Newham BID and / or publicly available resources (for example from Companies House)

*When using our website, Newham BID gathers data from users using cookies and other internet tracking software, such as Google Analytics.  The purpose of this is to understand how digital visitors are using our services, and to provide them with better and enhanced services via the BID

HOW WE HAVE DETERMINED THE USE OF DATA AND HOW IT WILL BE USED

There are six conditions or ‘lawful basis’ for processing data (the first four of which we have determined apply to Penzance BID)

  • Legal obligation
  • Contract
  • Legitimate interest
  • Consent
  • Vital Interest
  • Public Interest/lawful authority

We have determined that the majority of our BID communications with BID levy payers are either our ‘legal duty’ or in the recipient’s ‘legitimate interest’ where there is a business or commercial reason to use the information.

In this document, we have outlined the types of communication we have determined falls within the various ‘lawful basis’:

Legal – As a BID we have a legal obligation in the run up to a BID renewal which takes place every five years, to provide relevant BID information i.e. ballot papers, business plan.  It is our legal duty to communicate with all the businesses in the BID area giving them an opportunity to shape the business plan via consultation, receiving the final business plan, a notice of ballot and the ballot paper.

Communications like the annual financial statement that goes out with the levy bills generated by Cornwall Council also fall under legal interest as per the BID regulations.

There is no opportunity for levy payers to unsubscribe to these communications or to activate their right for erasure given that there is a legal obligation to process their data.

i) Contract – We sometimes provide services under a contract, as set out in a formal document – this includes contracts of employment for BID staff or contracts with third party suppliers. With contracts, there is a lawful reason to hold the data and to be in communication.

ii) Legitimate Interest – We process data under what we have determined is a ‘legitimate interest’. We will communicate with levy payers regarding the delivery of projects and services to demonstrate how we are using their funds and to give levy payers the opportunity to shape our projects and service delivery. More specifically, we will communicate with levy payers via emails/newsletters for the following purposes:

  • Letting levy payers know about projects and their delivery as they have paid the levy and have an interest in finding out what the BID is doing with their money
  • Giving levy payers the opportunity to shape projects – asking for feedback/completing a BID survey or inviting them to be involved on a working group
  • Giving levy payers updates on thing that are in their interests to know e.g. road being resurfaced outside their premises
  • Asking levy payers if they wish to attend an event – providing that this is not an event with a cost attached
  • Ensuring that content from our website (lovepenzance.co.uk and penzancebid.co.uk) is kept up to date to promote their business
  • Providing them with information or services that they request from us or which we feel may interest them and have deemed is in their legitimate interest
  • Notifying them about changes to our BID

Levy payers will have an opportunity to unsubscribe to these communications if they wish.

iii) Consent – we will seek consent from levy payers or others where we feel our communications do not fall under either legal, contractual or legitimate interest as detailed above.

The circumstances where Penzance BID may seek consent are:

  • If launching a campaign to sign up members of the public to receive offers from Penzance businesses e.g. a loyalty card
  • If seeking additional contributions from levy payers or ‘selling’ them something
  • If Penzance BID run a B2B scheme whereby businesses generate offers for other levy payers and their employees in the area – we would either gain consent from each employee or invite the main levy payer to cascade this to staff or post the offers on our website asking people to sign up to receive them.

Consent can be withdrawn at any time and Newham BID respects this right.

HOW WE WILL SHARE YOUR DATA

We will share your information within Penzance BID (including our Penzance BID committee) for administration purposes to ensure we can deliver our business plan and maintain communications with you on how we are spending your money and provide you with the information required legally during the renewal of the BID.

We occasionally use third party service providers such as agents or mail services to help us support you and provide services to you and where we have a legitimate interest to do so. These would include:

  • Survey monkey for consultation exercises, mail chimp for mailing out information updates;
  • Email and secure document share filing systems including drop box and google drive utilising passwords to protect data
  • PR companies who are contracted to Penzance BID to deliver PR and marketing services to businesses in Penzance. Currently, this is The Massey Partnership.
  • Our accountancy firm who delivers our end of year accounts and our bookkeeper who delivers the payroll for our staff. Currently, these are Crane & Johnstone and The Accounting Equation.
  • Other agencies who may be able to provide support services to you e.g. with regard to procuring reduced costs on services such as energy, telecoms, merchant services, insurance etc

We will ensure that all our third-party service providers demonstrate that they are compliant with data protection practices and are taking reasonable and appropriate security measures to protect your personal data.  We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.  We seek to have a data sharing agreement with all our third-party service providers and an assurance that confidentiality is maintained.

We will never transfer or sell your data to a third party for marketing purposes.

DATA RETENTION

We will only retain business data for as long as is necessary to fulfil the purposes for which it is collected taking account of our legal obligations with respect to holding data relating to BID renewal.

DATA DELETION

GDPR allows the right to erasure under specific circumstances. A request for data to be deleted from our legitimate data lists will be carried out.

It is not possible to delete information relating to levy payers who Newham BID has a legal duty to communicate with during the run up to a BID ballot taking place every five years

CORRECTING DATA

If we are notified in writing, we will correct any inaccurate data as soon as we can.

SUBJECT ACCESS REQUEST

Penzance BID wishes to be open and transparent giving people access to the data we hold if they request this in writing; the person making the request would need to confirm their identity.

CHANGES TO THIS POLICY

Penzance BID may amend this policy from time to time. If we do so, we will post amendments on our website at www.penzancebid.co.uk

COMPLAINTS

There is the right to complain about the processing of personal data. Please contact us using the details provided below. Alternatively, there is the right to complain to the Information Commissioners Office. ( https://ico.org.uk/concerns )

FURTHER INFORMATION

For further information, please contact Jessica Colliver, Penzance BID Manager at jessicacolliver@penzancebid.co.uk Prepared 24/05/2018

jon greenPenzance BID Data Protection Policy