Privacy and Cookies

Oxford Brookes University (Oxford Brookes) will be the Data Controller of any Personal Data that you supply. This means that Oxford Brookes will make the decisions on how your data is used and for what reasons. Please find Oxford Brookes University’s policies here – Policies, Accessibility, Privacy, Cookies, and Modern Slavery.

Why do we need your data?

To register interest in the Enterprise Centre, allowing us to contact you about the space and provide information about events.

Brookes legal basis for collecting and/or using this Personal Data (information) which is your name or information which identifies you is:

  • Legitimate interests: the processing is necessary for your legitimate interests, those of Oxford Brookes or the legitimate interests of a third party
  • Contract: the processing is necessary for a contract, or because specific steps are being considered before entering into a contract.

What types of personal data will Oxford Brookes University use?

Name, Email Address, Phone number, Job Title and Company Name. If the University meets with potential occupants online then their image and voice will be processed.

Who will Oxford Brookes share your data with or transfer your data to?

The information will not be shared with anyone outside of Oxford Brookes University or the Enterprise Centre team.

Will your data be shared, transferred or stored outside the UK?

Yes, as it will be stored on Google Drive – please read Google Drive’s Terms of Service and  Google’s Privacy Policy.

If the engaged party has booked a ticket to any Enterprise Centre events, their data will also be held by Eventbrite (Eventbrite Terms of Service, Privacy Policy and Cookie Statement) and HopIn (Legal Policy Centre, Terms of Service, Privacy Policy and Data Processing Agreement).

What rights can you have regarding your personal data which Oxford Brookes holds?

  • You have the right to be informed
  • You have the right of access to your data
  • You have the right to correct data if it is wrong
  • You have the right to ask for your data to be deleted
  • You have the right to restrict use of the data we hold
  • You have the right to data portability
  • The right to object to OBU using your data
  • You have rights in relation to using your data automated decision making and profiling

Your rights will depend on the legal ground used to process your data

What was the source of your data?

Data is sourced directly from the potential occupant: the information provided on the forms submitted via  the Enterprise Centre website, booking a ticket through via Eventbrite (Eventbrite Terms of Service, Privacy Policy and Cookie Statement), registering for events on Hopin (Legal Policy Centre, Terms of Service, Privacy Policy and Data Processing Agreement) or emailing by engaged parties.

Are there any consequences if you refuse this processing?

You may be unable to register your interest in The Enterprise Centre.

Will there be any automated decision making using my data?


How long will Oxford Brookes keep your data?

The Oxford Brookes Retention Schedule sets out the guidelines for how long the institution keeps information. The legal requirement is to keep personal information only for as long as is necessary. Generally then, Oxford Brookes will keep your data for 1 year (from when the information was last used) where no booking is made. It is kept for 6 years from last use if a contract is entered into.

Who can you contact if you have concerns?

For any information about the Enterprise Centre please contact or navigate to the relevant pages of

You can contact: the Information Security Management Team via if you have a concern about Data Protection matters or if you want to exercise your rights under Data Protection or Freedom of Information law; Oxford Brookes’ Data Protection Officer via who ensures that Data Protection provisions are applied lawfully in Oxford Brookes; the information Commissioner via the website who is the national regulator for Data Protection or Freedom of Information matters.

Cookies Policy

Our site uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website. We might, from time to time, use both session and persistent cookies as well as Google Analytics and other third party cookies. The Google Analytics privacy policy can be read here:

For more information about cookies, please see Cookiepedia.

Cookies We Use

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Cookie Name Purpose Provider Expiry Type
cookie_notice_accepted This cookie is used to detect if the visitor has accepted the use of cookies on this website. This cookie is necessary for GDPR-compliance. scalebase 90 days HTTP
rc::a This cookie is used to distinguish between humans and bots. This is beneficial for the Website, to make valid reports on the use of the Website. Session HTML
rc::b This cookie is used to distinguish between humans and bots. Session HTML
rc::c This cookie is used to distinguish between humans and bots. Session HTML
PHPSESSID This cookie is generated by applications based on the PHP language. This is a general-purpose identifier used to maintain user session variables. scalebase Session HTTP
wordpress_test_cookie This cookie is used on sites built with WordPress. It tests whether the browser has cookies enabled. scalebase Session HTTP


Marketing and Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Cookie name Expiry Description Provider
_ga 2 years Used to distinguish users.
_gid 24 hours Used to distinguish users.
_ga_<container-id> 2 years Used to persist session state.