Privacy Policy (including Cookie Statement)
Last Updated: November 2025
Ards Business Centre Ltd, trading as Ards Business Hub (“we,” “us,” or “our”), respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, take part in our programmes or events, book meeting rooms or training spaces, or otherwise interact with us.
It also outlines your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1. Who We Are and Our Approach to Personal Data
Ards Business Centre Ltd (trading as Ards Business Hub) is registered in Northern Ireland with company number NI021680. Ards Business Centre Ltd is a registered charity with The Charity Commissioner NI number NIC101822.
Our registered address is:
Sketrick House, Jubilee Road, Newtownards, Northern Ireland, BT23 4YH.
Ards Business Hub supports entrepreneurs and businesses through workspace rental, training programmes, business support, networking events, and other enterprise development activities.
We are the data controller for your personal data and are responsible for how it is collected and used. If you have any questions or requests regarding your data, please contact: info@ardsbusiness.com
Ards Business Centre Ltd is registered with the Information Commissioner’s Office (ICO) [registration number ZB330982] and complies with all UK data protection obligations.
2. The Personal Data We Collect
We may collect and process the following types of information about you:
- Identity Data – name, title, and business name.
- Contact Data – address, email address, and telephone number.
- Business Information – nature of your business, role, and support needs.
- Property Space Tenants – we retain ID as part of the Property Space Application Process.
- Booking Information – details provided when booking events, meeting rooms, or training sessions.
- Technical Data – IP address, browser type, operating system, referral source, and browsing behaviour on our website.
- Marketing and Communications Data – preferences in receiving marketing materials from us and your communication preferences.
- Image and Media Data – photographs or video footage taken at events, which may include your image.
- CCTV Data – video recordings from CCTV cameras in and around our premises for safety and security purposes.
Children's Data
Our services are intended for adults and business users. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. Parents or guardians who believe their child’s data may have been collected can contact us via email info@ardsbusiness.com for assistance.
We do not collect or process any special category data (such as race, religion, or health information) unless it is volunteered and directly relevant to the delivery of a specific programme.
3. How We Collect Your Personal Data
We collect personal data in the following ways:
- Directly from you – when you contact us, make a booking, subscribe to our mailing list, complete a feedback form, or attend one of our events.
- Through our website – when you use our contact forms, register for updates, or engage with our digital platforms.
ABH Privacy Policy and Data Protection Statement – Edited Nov 2025 3 - Through third-party platforms
- Eventbrite (for event bookings)
- MailerLite (for email marketing and newsletters)
- Google Analytics and Meta Pixel (for website analytics and performance insights).
- From CCTV and photography – images and recordings captured at our premises or events.
4. How We Use Your Personal Data
We will only use your data where the law allows us to. The main lawful bases we rely on are:
| Purpose of Processing | Lawful Basis |
|---|---|
| To respond to enquiries and provide business support services | Legitimate Interests / Contract |
| To process bookings for meeting rooms, training, or events | Contract |
| To manage tenant and client relationships | Contract / Legitimate Interests |
| To send marketing communications and newsletters | Consent |
| To analyse website use and improve our services | Legitimate Interests |
| To ensure site safety and prevent crime via CCTV | Legitimate Interests / Legal Obligation |
| To record and share event photos or videos for marketing | Legitimate Interests (with opt-out available) |
| To comply with legal and regulatory obligations | Legal Obligation |
5. Marketing Communications
We may send you information about upcoming events, training, workspace availability, or business support programmes by email through MailerLite.
You will only receive marketing if you have:
● Opted in via our website or an event registration form, or
● Previously engaged with us and have not opted out of communications.
You can unsubscribe at any time using the link in our emails or by contacting info@ardsbusiness.com
6. Disclosures of Your Data
We only share your data with trusted third parties where necessary for our operations, such as:
● Eventbrite – for processing event bookings.
● MailerLite – for managing email subscriptions.
● Google Analytics – for anonymised website traffic analysis.
● Meta Platforms (Facebook/Instagram) – for marketing and analytics.
● IT and web hosting providers – who maintain our systems under strict data protection contracts.
● Professional advisors – such as auditors, legal, or financial consultants.
All third parties are required to process your data securely and in accordance with UK GDPR.
We do not sell or trade your personal data.
7. CCTV and Event Photography
CCTV cameras operate in and around our car park and premises for the purposes of security, crime prevention, and safety.
Footage is stored securely and retained for up to 30 days, unless required for an ongoing investigation. We may take photographs and video footage at our events for use in marketing materials, including on our website and social media channels. We rely on our legitimate interests to promote our services as our lawful basis for this processing.
If you prefer not to be included in photographs or video, please inform a member of staff at the event or contact us at info@ardsbusiness.com following the event. We will make every effort to respect your wishes.
8. International Transfers
Where we use third-party service providers to process personal data on our behalf (for example, Google, Meta, Eventbrite, or MailerLite), we ensure appropriate Data Processing Agreements are in place in accordance with Article 28 of the UK GDPR. These agreements require our processors to act only on our instructions, to keep data secure, and to support us in meeting our data protection obligations. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (SCCs) to ensure your information remains protected.
9. Data Security
We have implemented appropriate physical, electronic, and managerial procedures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.
Access to personal data is limited to authorised employees, contractors, or service providers who need to know that information to perform their duties.
CCTV footage is securely stored and retained for no longer than 30 days unless required for investigation.
10. Data Retention
We retain your data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Typical retention periods:
- Booking and contact records: 6 years after last interaction.
- Marketing data: until you unsubscribe or request deletion.
- CCTV footage: 30 days (unless needed for investigation).
- Event photos/videos: as long as relevant for marketing or historical documentation (you may request removal at any time).
11. Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data (“subject access request”).
- Request correction of inaccurate or incomplete data.
- Request erasure (“right to be forgotten”).
- Object to processing or request restriction of processing.
- Request data portability.
- Withdraw consent at any time (for marketing communications).
- Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. To exercise your rights, contact
info@ardsbusiness.com.
12. Third-Party Websites
Our website may contain links to third-party sites such as Eventbrite, Mailerlite, and social media platforms. We are not responsible for the privacy practices of these websites. Please review their privacy statements before providing any personal data.
13. Cookie Statement
Ards Business Hub uses cookies to enhance user experience, analyse traffic, and support marketing. Cookies may be:
- Strictly necessary – required for site operation.
- Functional – improve usability and remember preferences.
- Analytical – used via Google Analytics to measure performance.
- Marketing/Advertising – used via Meta Pixel and Google AdWords to deliver relevant advertising and measure campaign effectiveness.
You can manage or disable non-essential cookies in your browser settings at any time. You can learn more about managing cookies at: https://ico.org.uk/forthe-public/online/cookies/
14. Accessible Formats
We are committed to making our information accessible to everyone. If you require this Privacy Policy in an alternative format (for example, large print, audio, or Braille), please contact us at info@ardsbusiness.com and we will make reasonable efforts to provide it in your preferred format.
15. Changes to this Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. The latest version will always be available on our website and dated accordingly.
