Notice

Research Ventures Catalyst privacy notice (pilot)

Updated 17 July 2025

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).

For the purposes of data protection, the Department for Science, Innovation and Technology (DSIT) is the data controller.

The data

We will process the following personal data:

  • contact details (name and email address) of the lead applicant(s)
  • job title of the lead applicant(s)
  • current organisation/employer of the lead applicant(s)

Purpose

The purpose(s) for which we are processing your personal data is:

  • your email address will be used to enable us to contact you with updates regarding your application to the Research Ventures Catalyst (RVC) programme. We will also contact you via email with events related to the programme and your application.
  • your name and email address will be shared with a third-party organisation contracted to carry an evaluation of the Research Ventures Catalyst (RVC) programme where they may contact you via email to invite you to participate in surveys or interviews that will help inform the evaluation.
  • your job title and current employer will be used to understand the profile of applications received and inform our programme evaluations.
  • if applicable, your organisational details will be used to undertake financial viability checks.
  • if successful at stage 1, your personal data will be processed to distribute your seedcorn funding.

The legal basis for processing your personal data is:

a) Consent: You have given consent to the processing of your data for one of more specified purposes.

Recipients

Your personal data will be shared by us with UK Research and Innovation (UKRI), and the assessment panel.

If you provide consent, in your application, we will also share your personal data with potential co-investors and other interested parties.

If you provide consent, your name and email address will be shared with Technopolis Ltd, a third-party research organisation contracted to undertake a programme evaluation of the RVC programme. .

As your personal data will be stored on our IT infrastructure it may also be shared with our data processors Microsoft and Amazon Web Services.

Retention

Your personal data will be kept until September 2026 Ā This time period will cover stage 1 of this programme, including the assessment phase, and monitoring and evaluation of the programme which is being conducted by a third-party research organisation, Technopolis Ltd, in 2026.

At the end of stage 1, we will update the privacy notice with information on how your personal data will be managed should you be successful and proceed to stage 2 of the programme.

Your rights

The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right to request:

  • information about how your personal data is processed
  • a copy of the personal data you submitted
  • that anything inaccurate in your personal data is corrected immediately
  • that any incomplete personal data are completed, including by means of a supplementary statement
  • that your personal data are erased if there is no longer a justification for them to be processed
  • in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted
  • to object to the processing of your personal data where it is processed for direct marketing purposes
  • to withdraw consent to the processing of your personal data at any time by contacting researchventures@dsit.gov.uk.

International transfers (if applicable)

Your personal data will not be processed in the European Economic Area (EEA), or by an international organisation.

Your personal data will not be processed in the European Economic Area (EEA), or by an international organisation.Ā 

As your personal data is stored on our IT infrastructure, and shared with our data processors Microsoft and Amazon Web Services it may be transferred and stored securely outside the European Economic Area. Where your personal data is processed outside UK but within the EEA, the following safeguards will be in place: UK Adequacy Regulations.

You have the right to:

  • object to the processing of your personal data
  • object to the processing of your personal data where it is processed for direct marketing purposes
  • lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law

Contact us

Data Controller

The data controller for your personal data is the Department for Science, Innovation and Technology (DSIT). You can contact the DSIT Data Protection Officer at:

DSIT Data Protection OfficerĀ 
Department for Science, Innovation and TechnologyĀ 
22-26 WhitehallĀ 
³¢“DzԻå“DzŌĢż
SW1A 2EG

Email: dataprotection@dsit.gov.uk

Make a complaint

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office

Email icocasework@ico.org.uk

Telephone 0303 123 1113

Textphone 01625 545 860

Changes to this privacy notice

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ā€˜last updated’ date at the bottom of this page will also change and the revision to the Privacy Notice will be recorded alongside the date of change. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Date: July 2025

Amendment to ā€œPurposeā€ – Your name and email address will be used to contact you for the purpose of monitoring and evaluating the RVC programme. You will be contacted to ask whether you would like to take part in surveys or interviews about your experience applying to the RVC programme.

Amendment to ā€œRecipientsā€ – If you consent your name and email address will be shared with a third-party research organisation, Technopolis Ltd. This is so they can contact you directly to ask whether you would like to take part in surveys and/or interviews about your experience applying to the RVC programme.

Amendments to ā€œRetentionā€ – We would like to extend the retention period for holding your personal data until September 2026 so that you can be contacted to ask whether you would like to participate in surveys and/or interviews in relation to your experience of applying to the RVC programme.

Amendments to contact details for DSIT Data Protection DPO and office.

Date: 26 July 2023

Amendment to ā€˜The data’ – in addition to email address, job title and current organisation/employer, we will also process the name(s) of all lead applicant(s).

Amendment to ā€˜Purpose’ – Email address will be used to contact you with updates regarding your application. Job title and organisation/employer will be used to profile applications and inform our programme evaluations. Organisational details may also be used to conduct financial viability checks, if applicable. If successful at stage 1, your personal data will be processed to distribute your seedcorn funding.

Amendment to ā€˜Recipients’ – Personal data will be shared with UK Research and Innovation (UKRI), and the assessment panel. Personal data will also be shared with potential co-investors and interested parties, providing you consent to this in your application form.