Node4 Privacy
What does this privacy notice cover?
The purpose of this privacy notice (“Notice”) is to give you information on how Node4 Ltd collects and processes your personal data. This Notice covers any data you may provide when using our website, when you make contact with us via the website when you sign up to receive our newsletter, take part in a survey or any other marketing initiatives. For more information on our DemandBase privacy policy, click here.
How do you protect my personal data?
Node4 are strongly committed to keeping your personal data safe and as such we design our services with security and your privacy in mind by ensuring that we have appropriate controls in place to protect your personal data.
What personal data do we collect?
Personal data means any information about an individual from which that person can be identified either directly or indirectly.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We may collect, use, store and transfer different kinds of personal data about you including:
- Contact Data includes email address and telephone numbers, postal address;
- Technical Data includes IP address and device type;
- Usage Data includes information about how you use our website, products and services;
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences. You can unsubscribe from marketing at any time via our emails or by contacting dpo@node4.co.uk;
- Subscriptions: your subscription preferences i.e. to receive our newsletter;
- Website enquiries: if you make an enquiry via our website, we will retain a record of this;
- Complaints: if you submit a complaint via our website, we will retain a record of this;
How do we collect your personal data?
We use different methods to collect personal data about you including through:
Direct interactions with you: you may give us your identity and contact data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- Enquire about our products or services;
- Subscribe to our service or newsletter publications;
- Request marketing to be sent to you;
- Give us some feedback.
Cookies: We may collect certain personal data in part through the use of a technology called a “cookie.” A cookie is a small text file that is saved to your device using your browser, which allows sites to recognize you and store preferences and other information if you return to the site using the same device and browser. Please refer to our cookie policy for more information.
Third parties which are publically available sources. We may receive personal data about you from various third parties and public sources as set out below:
- Identity and Contact Data from data brokers or aggregators based inside OR outside the EU.
- Identity and Contact Data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.
- Public forums such as LinkedIn
Third parties who are acting contractually on behalf of Node4 to process the data collected from the Website and online forms.
How will Node4 use your personal data and on what legal grounds?
What is our legal basis for processing your personal data?
Node4 processes your personal data lawfully. What this means is that we will only process your personal data where we have identified a legal basis to do so. The table below sets out the lawful basis Node4 relies upon to process your personal data.
| Purpose | Personal Data | Legal Basis |
| To respond to enquiries (online and otherwise). | Name, email | Legitimate Interest |
| To provide you with our direct marketing communications by email or text. | Name, email and telephone number | Consent or Legitimate Interest |
| To provide you with our direct marketing communications by telephone or post. | Name, telephone and address. | Legitimate Interest |
| Subscriptions to our newsletter and publications | Name, email and telephone number | Consent |
| Where you have entered into a contract with us and processing is necessary to fulfil our obligations to you. | Name, email and telephone number, contract details | Contract |
| Your survey responses | Name, email | Legitimate Interest |
| Collecting your feedback | Name, email and telephone number, services used and feedback | Legitimate Interest |
| Non-essential web cookies | Technical Data | Consent |
| Functional web cookies | Technical Data | Legitimate interest |
With whom will you share my personal data?
We do not sell your personal data to third parties. We may, however, share your information within our organisation or with third party suppliers who work with Node4. The third parties with whom we share your personal data include service providers, for example, those who support our website and online form functionality. We may also share personal data with our professional advisors, cloud storage suppliers, and marketing platform providers that assist us with our business operations. There may also be occasions where we are obliged to share your personal data because we have a legal or regulatory obligation to do so.
Will my personal data be transferred outside the UK?
We may transfer your personal data outside the UK to other members of the Node4 group and where our third-party suppliers are located outside the UK. Some of our offices and suppliers are based outside the EEA. Where we transfer your personal data outside the UK and the EEA, we ensure adequate safeguards are in place to protect your personal data.
How long will you keep my personal data for?
Whenever we process your personal data, we’ll only keep it for as long as is necessary and in accordance with our retention policy. Please contact dpo@node4.co.uk if you require additional information about our retention policy.
| Where you have a contract with us | 6 years following the end of the contract |
| Where you have a subscription with us | One year following the end of the subscription |
| Where you ask us to send you marketing material | Until such time as you notify us that you do not wish to receive marketing communications from us |
| Where you contact us to make a website enquiry | 6 months after your enquiry is resolved |
| Where you make a complaint | For 6 years after the complaint is received. |
| Survey responses | Your survey responses will be anonymised following the end of the survey period |
| Cookies | For up to 12 months |
How does Node4 protect personal data?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. These parties will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so
How can you contact Node4?
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.
Our Contact details are:
Node4 Limited
Millennium Way
Derby
DE24 8HZ
Tel: 0845 123 2222
Email: dpo@node4.co.uk
Your legal rights
You have a number of rights under data protection law in relation to your personal information and if you want to exercise any of these rights, please contact us at dpo@node4.co.uk and we’ll be happy to help. These rights are as follows:
- Right to request access to your personal information – you can request a copy of the personal information we hold on you;
- Right to request correction of your personal information – if any personal information we hold on you is incorrect, you can request to have it corrected;
- Right to request erasure of your personal information – you can ask us to delete your personal information in certain circumstances;
- Right to object to processing or restrict processing of your personal information – you may object to our processing of your personal data in certain circumstances;
- Right to request the transfer of your personal information – to provide you, or a third party you have chosen, with your personal information;
- Right not to be subject to automated decision-making and profiling;
- Right to withdraw consent – where we process your data on the basis of consent, you can notify us that you want to withdraw consent at any time.
If you have any data protection complaints, you may contact the Information Commissioner’s Office (ICO) by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Email: casework@ico.org.uk Telephone: 0303 123 1113
We’d like to try and help with any concerns you may have before you contact the ICO, so please get in touch with dpo@node4.co.uk in the first instance.
Your duty to inform us of any changes?
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.
Changes
We reserve the right to amend this privacy notice from time to time and will publish changes here. If we need to let you know about any changes we make, we will make reasonable attempts to contact you.
Addendum
Privacy Policy Update: Use of Demandbase – November 2024
Introduction
Node4 is committed to protecting your privacy. This update outlines our use of Demandbase, a third-party service provider, to enhance our marketing and sales efforts through advanced data analytics and artificial intelligence.
Data Collection and Use
Demandbase collects and processes various types of data to provide its services. This includes:
- Website Data: Demandbase collects visitor data on Node4’s website such as IP addresses, visitor information, third-party IDs, page URLs, referrers, timestamps, and user agents. This data is used to identify the company of the visitor and is processed to maintain account identification services and offer targeted advertising.
- Customer Data: Demandbase processes customer data from Node4’s CRM tool HubSpot such as leads, accounts, activities and opportunities. Demandbase enriches HubSpot CRM data with additional account intelligence, such as firmographics, technographics, and intent data. This helps Node4 gain a more comprehensive view of their accounts and target them more effectively.
Roles and Responsibilities
- Independent Controller: Demandbase acts as an independent controller for Website Data, Demandbase Data, and data shared through the Demandbase Data Co-Op.
- Processor: For Customer Data (such as HubSpot data), Demandbase acts as a processor.
- Controller: Node4 are the controller of Customer Data within HubSpot.
Consent Management
Node4 obtains necessary consents from visitors for the use of third-party tracking technology via the Privacy Preference Center. Visitors can withdraw their consent as per the Privacy Policy.
Data Security and Transfers
Demandbase processes data in data centres located in the US and Ireland for high availability and redundancy. Node4 and Demandbase have adequate safeguards in place to protect personal data transferred outside the EEA.
Contact Information
For any questions or concerns regarding this update, please contact our privacy team at dpo@node4.co.uk.