Privacy Policy
Last updated: 15 September 2026
This Privacy Notice explains how IoT Community Ltd (“IoT Community”, “we”, “us” or “our”) collects and uses personal information when you use IoTCommunity.net and other IoT Community-operated websites, services, events, masterclasses, learning services and community programmes that link to this notice (together, the “Services”).
This notice is intended to meet our transparency obligations under applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended from time to time. Additional local rights may apply depending on where you are located.
1. Who we are
IoT Community Ltd is a private limited company registered in England and Wales under company number 10018951.
Registered office: Broadfields Lyne Down, Much Marcle, Ledbury, Herefordshire, England, HR8 2NT.
For the personal information covered by this notice, IoT Community Ltd is generally the data controller, meaning that we decide why and how that information is used.
Privacy enquiries may be sent to legal@iotcommunity.net.
2. Personal information we may collect
Depending on how you interact with us, we may collect:
- Identity and contact information, such as your name, email address, telephone number, country and postal address where relevant.
- Professional information, such as employer, job title, business interests, industry, professional profile and areas of expertise.
- Community and preference information, including membership details, Centres of Excellence interests, event preferences and communication choices.
- Event, masterclass and learning information, including registrations, attendance, participation, assessment or learning activity where applicable.
- Correspondence and submissions, including enquiries, survey responses, speaker or contributor materials, feedback and other information you choose to send us.
- Technical and usage information, such as IP address, browser and device information, referring pages, pages viewed, timestamps, security logs and cookie or consent choices.
- Transaction and administration information where a paid service is offered. Payment card information may be handled directly by the relevant payment provider rather than stored by us.
- Publicly available professional information where relevant to a legitimate business or community relationship, for example information published on a company website, business directory or professional network.
We do not ask users to provide special-category personal information through our general website forms unless it is genuinely necessary and an appropriate basis has been identified. Please do not send sensitive personal information unless we have specifically requested it for a legitimate purpose.
3. How we collect information
We may collect information directly from you when you complete a form, register, join the community, participate in an event or masterclass, contact us, subscribe to communications or otherwise interact with the Services.
We may also collect technical information automatically through website logs, cookies and similar technologies, and may receive business contact information from event partners, service providers, public professional sources or other organisations where there is a lawful basis for doing so.
4. Why we use personal information and our lawful bases
- To provide requested services, registrations and community participation. We may rely on performance of a contract, steps taken at your request before entering a contract, and/or our legitimate interests in operating the community and its programmes.
- To respond to enquiries and manage relationships. We generally rely on legitimate interests and, where relevant, contractual necessity.
- To administer events, masterclasses, learning programmes, Centres of Excellence and contributor activity. We may rely on contractual necessity and/or legitimate interests.
- To send news, invitations and marketing communications. We rely on consent where consent is required, or on legitimate interests where electronic-marketing and data-protection law permits this. We apply PECR rules to electronic marketing.
- To understand and improve our websites and services. Where non-essential cookies or similar technologies require consent, we seek that consent before using them. We may rely on legitimate interests for appropriate service-improvement analysis once information has been lawfully collected.
- To protect the Services and prevent spam, fraud, misuse and security incidents. We rely on legitimate interests and, where applicable, legal obligations.
- To maintain business, accounting, tax and compliance records. We rely on legal obligations and legitimate interests.
- To establish, exercise or defend legal rights and manage corporate transactions. We rely on legitimate interests and/or legal obligations as appropriate.
Where we rely on legitimate interests, we consider the purpose, necessity and impact on individuals and do not rely on that basis where your rights and interests override ours.
5. Marketing and communication choices
You can withdraw or change your marketing preferences at any time. You can use the unsubscribe link in a marketing email, submit our Communication Preferences & Opt Out form, or contact legal@iotcommunity.net. Requests submitted through the form are recorded so that we can apply and evidence your preference. We may retain a limited suppression record after an opt-out so that we can continue to respect it.
Different PECR rules can apply to corporate subscribers and individual subscribers. Where consent is required, it must be freely given, specific, informed and unambiguous. We do not treat silence, inactivity or simply continuing to use the website as consent to direct marketing.
Where an event, programme or form involves a sponsor or partner and information may be provided to that organisation for its own purposes, we will make this clear at or before the point of collection and apply an appropriate lawful basis.
6. Who we may share information with
We may share personal information only where reasonably necessary with:
- website hosting, infrastructure, security, email, communications and IT service providers;
- event, registration, streaming, video, learning and payment service providers where relevant;
- analytics, anti-spam and abuse-prevention providers;
- professional advisers, accountants, insurers and legal advisers;
- sponsors, co-hosts or programme partners where this has been disclosed and there is an appropriate lawful basis;
- regulators, courts, law-enforcement bodies or other authorities where required by law or necessary to protect legal rights; and
- a purchaser, investor or successor organisation in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection requirements.
Service providers that process personal information on our behalf are expected to use it only for authorised purposes and to protect it appropriately.
7. Cookies, analytics, embedded media and anti-spam technology
Our websites may use cookies and other storage or access technologies for functions such as security, remembering preferences, measuring site use and enabling embedded content. Where UK law requires prior consent for a non-essential technology, we seek that consent through the site’s consent controls.
Our current websites may use services including Google Analytics for measurement, Google reCAPTCHA or equivalent technology for spam and abuse prevention, and Vimeo or other media providers for embedded video. These providers may receive technical information such as IP address, browser or device information when their services are used. Their own privacy notices also apply to their independent processing.
You can manage available cookie choices through the consent controls presented on the website and can also use your browser settings to remove or block cookies. Blocking some strictly necessary technologies may affect site functionality.
8. International transfers
Some of our service providers, partners or participants operate outside the United Kingdom. This means personal information may be processed internationally.
Where a transfer is subject to UK international-transfer restrictions, the transfer must be covered by a lawful mechanism, such as applicable UK adequacy regulations, approved contractual safeguards or another permitted mechanism, together with any additional protections required by law.
9. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain appropriate records, meet legal or accounting obligations, resolve disputes and enforce agreements.
- Marketing contact information is generally kept while you remain subscribed or while we otherwise have a lawful basis to contact you. A limited suppression record may be kept after an opt-out.
- Enquiry, registration, membership and event records are retained according to the continuing relationship, operational need and applicable limitation periods.
- Financial and tax records are retained for the period required by applicable law.
- Security and technical logs are retained for an appropriate period based on their security and operational purpose.
- Backup copies may persist for a limited period after information is removed from active systems.
10. Security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure or access. No internet service can guarantee absolute security, so users should also take reasonable care when sharing information online.
11. Your data-protection rights
Depending on the circumstances and applicable law, you may have rights to:
- be informed about how your information is used;
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information in certain circumstances;
- ask us to restrict processing in certain circumstances;
- object to certain processing, including direct marketing;
- receive certain information in a portable format where the right applies;
- withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing; and
- complain to a data-protection regulator.
To exercise a right, contact legal@iotcommunity.net. We may need to verify your identity before acting on a request. We do not normally charge a fee for exercising data-protection rights, although the law permits a reasonable fee or refusal in limited circumstances such as manifestly unfounded or excessive requests.
If you are in the United Kingdom, you also have the right to complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first.
12. Children
Our general community and professional services are not directed at children under 18. We do not knowingly use the general website to solicit personal information from children. If you believe a child has provided personal information through a service not intended for them, contact us so that we can review and, where appropriate, remove it.
13. External websites and third-party services
Our Services may link to or embed third-party websites and services. Those organisations may act as separate controllers of information they collect. Their privacy practices are governed by their own notices, and we encourage you to review them.
14. Changes to this notice
We may update this Privacy Notice when our services, technology or legal obligations change. The current version will be published on this page with an updated date. If a change materially affects how we use information already collected, we will take any additional steps required by law.
15. Contact us
IoT Community Ltd
Company number 10018951
Broadfields Lyne Down
Much Marcle
Ledbury, Herefordshire
England, HR8 2NT
Email: legal@iotcommunity.net