Privacy policy

OSEP CIC is a Community Interest Company, established by the Social Enterprise community in Oxfordshire, with the support of Oxford Brookes University and The University of Oxford to support social enterprises, social entrepreneurs and socially responsible businesses operating across the county.

OSEP CIC will be the Data Controller of any personal data that you supply. This means that OSEP will make the decisions on how your data is used and for what reasons, but they will be informed by the partners.

You can contact OSEP at

Why do we need your data?

Your name and email address will be used to send email communication with details of OSEP projects, programmes, events and funding opportunities. You will be able to unsubscribe at any time.

We will need further details, including a postal address and phone number to process any sub-contracting or funding applications.

OSEP’s legal basis for collecting this data is:  You consent to providing your data to us for communications.

You consent to providing additional data in order to enter into an agreement to sub-contract, or for funding.

If OSEP asks you for sensitive data such as; racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, data concerning health or sexual life, genetic/biometric data or criminal records OSEP will use this data because it needs it for statistical purposes and you will be asked for explicit consent to process this.

What types of personal data will OSEP use?

We will use your name and email address to communicate with you about the work of the OSEP, giving you details of events, news or opportunities, including funding and sub-contracting opportunities.

We will use further details, including a postal address and phone number to process any sub-contracting  or funding applications.

We will use sensitive data such as racial or ethnic origin, or criminal records, anonymously only for statistical and equal opportunities purposes.

Who will OSEP share your data with? MailChimp is engaged as a data processor to send out broadcast emails.  The Mailchimp privacy policy can be found here:

The data you provide to us for the purposes of processing applications may be shared between partners in order to contact you about the application or to process that application. However, we will seek your explicit consent to do this and we will inform you at the time of application how we treat your data and who it will be shared with. This is for the purpose of applying only.

Will OSEP transfer my data outside of the EEA?

OSEP use MailChimp to facilitate email communications and the company’s data storage is based in the USA.  Mailchimp is signed up to the EU-U.S. Privacy Shield Framework more details can be found here: All funding and sub-contracting application details will be stored in the UK.

What rights do I have regarding my personal data that OSEP holds?

•    You have the right to be informed

•    You have the right of access to your data

•    You have the right to correct data if it is wrong

•    You have the right to ask for your data to be deleted

•    You have the right to restrict use of the data we hold

•    You have the right to data portability

•    the right to object to OSEP using your data

•    You have rights in relation to using your data automated decision making and profiling.

Are there any consequences of not providing the requested data?

If you do not provide us with your name and email address, we will not be able to communicate with you about OSEP’s projects, programs, events, sub-contracting and funding opportunities.

If you do not provide us with the data relevant to funding or sub-contracting applications, your application may be declined.

Will there be any automated decision making using my data?


How long will OSEP keep your data?

OSEP will keep your name and email address for email communications about the work of OSEP unless you unsubscribe from the emails by using the link at the end of every email.

We will keep your data from funding and sub-contracting applications for six years since last contact and then it will be deleted.

Who can I contact if I have concerns?

You can contact OSEP using the contact details below. Postal Address: GDPR Queries, OSEP CIC, 1 Aristotle Lane, Oxford, Oxfordshire, OX2 6TP Email: