Version: 1.0
Last Updated: July 2026
The Western Regional Defence & Security Cluster (WRDSC) is committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently.
This Privacy Notice explains:
What personal information we collect
How we use it
The lawful basis for processing
Who we share it with
How long we keep it
Your rights under UK data protection legislation
WRDSC operates in support of collaboration across the defence, security, aerospace, cyber, innovation, academic and public-sector communities.
We process personal information in accordance with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations (PECR) where applicable
Data Controller
Western Regional Defence & Security Cluster (WRDSC)
Email: admin@wrdsc.co.uk
We may collect the following information:
Contact Information
Name
Job title
Organisation
Email address
Telephone number
Membership Information
Membership category
Areas of expertise
Sector information
Security-related capabilities and interests
Event Information
Event registrations
Attendance records
Dietary and accessibility requirements
Event feedback
Communications Information
Survey responses
Correspondence with WRDSC
Website Information
IP address
Browser type
Device information
Website usage statistics
Cookie preferences
We collect information when you:
Join or register with WRDSC
Attend WRDSC events
Complete surveys
Contact us
Participate in networking or business support activities
Visit our website
We use personal information to:
Deliver Cluster Services
Manage membership records
Organise events
Facilitate networking opportunities
Support collaboration across the defence and security sector
Provide high level reports to MOD/UKDI as part of current agreement
Communications
Notify you about opportunities, events and funding
Respond to enquiries
Business Development and Economic Growth
Understand sector needs
Develop regional programmes
Measure cluster impact
Improve Our Services
We may analyse and, where appropriate, anonymise information to identify trends and improve services and engagement activities. Once anonymised, information is no longer considered personal data.
Legal and Regulatory Requirements
We may process information to:
Meet legal obligations
Respond to lawful requests from public bodies
Protect the integrity and security of our services
Under UK GDPR, we rely on one or more of the following lawful bases:
Article 6(1)(a) – Consent
For:
Marketing communications
Optional surveys
Article 6(1)(b) – Contract
For:
Membership administration
Event registration
Service delivery
Article 6(1)(e) – Public Task
Where WRDSC activities support public-sector economic development, innovation, defence growth or regional prosperity programmes.
Article 6(1)(f) – Legitimate Interests
For:
Maintaining professional networks
Managing stakeholder relationships
Improving cluster services
We undertake balancing assessments where legitimate interests are relied upon.
Occasionally we may collect limited special category information such as:
Accessibility requirements
Dietary requirements
Health-related information necessary for event participation
This information is collected only where necessary and with an appropriate legal basis.
We will only share information where necessary and lawful.
Recipients may include:
Event partners
Government departments
Local authorities
Defence and security organisations
Universities and research institutions
Professional advisers
IT and system providers
We will never sell your personal information.
Information may be shared where required to comply with legal obligations or where necessary for the prevention or detection of crime.
Our website may use cookies and analytics tools to help us understand:
Visitor numbers
Page usage
User journeys
Website performance
Analytics data is used to improve website functionality and user experience.
Further information is provided within our Cookie Policy.
We retain information only for as long as necessary.
Typical retention periods may be:
Record Type
Retention Period
Membership records
Duration of membership plus 3 years
Event records
Up to 3 years
Financial records
6 years after financial year end
Newsletter subscriptions
Until unsubscribe
General enquiries
Up to 2 years
Information will be securely deleted or anonymised when no longer required.
We employ appropriate technical and organisational measures to protect personal information, including:
Access controls
Secure cloud storage
Encryption where appropriate
Staff training
Regular security reviews
We normally store and process information within the United Kingdom.
If information is transferred outside the UK, appropriate safeguards will be implemented in accordance with UK GDPR requirements.
Under data protection law, you have the right to:
Be informed
Access your personal information
Rectify inaccurate information
Erase information in certain circumstances
Restrict processing
Object to processing
Data portability (where applicable)
Withdraw consent at any time
Requests can be submitted using the contact details below.
If you are unhappy with how we handle your information, please contact WRDSC first.
You also have the right to complain to:
Information Commissioner's Office (ICO)
Website: https://www.ico.org.uk
Telephone: 0303 123 1113
Western Regional Defence & Security Cluster (WRDSC)
Email: admin@wrdsc.co.uk
We may update this notice periodically to reflect organisational, legal or operational changes. The latest version will always be available on the WRDSC website.