Privacy and cookie policy

For the purposes of the Data Protection Act 2018, the ‘controller’ of the personal data which you provide in the attached form is the West Yorkshire Combined Authority (“The Combined Authority”, “we”, “us”) of Wellington House, 40-50 Wellington St, Leeds LS1 2DE (tel: 0113 251 7272) who are the responsible statutory body for the Leeds City Region Enterprise Partnership (“LEP”) and WY Metro. The Combined Authority is registered with the Information Commissioner’s Office with registration number ZA051694. Digital Remit, 129 Kennington Park Road, London, SE11 4JJ ICO registration number: ZA051855 is a data controller for the data it processes for this programme.

The Combined Authority is collecting this data and will process it for the purpose of facilitating enrolment onto the Explore Enterprise programme and monitoring the programme.  

The Combined Authority will share this data with Digital Remit, for the purpose of delivering the Explore Enterprise programme. Digital Remit will share your data with the Combined Authority to report on key deliverable outcomes for auditing and monitoring purposes. The Combined Authority will share your data with the West Yorkshire Local Authorities who provide start-up support through the wider Enterprise West Yorkshire Programme.

We will not share your information with any other organisation or third party, other than those names above. There may be other circumstances in which we may share or use certain information about you, which are:

  1. if we have a legal obligation to do so or if we are required or requested to do so by a competent authority such as the police or a court;
  2. if we need to use or disclose your information to obtain legal advice or in connection with legal proceedings;
  3. if we need to share your information to protect your vital interests if you are unable to give us consent or it is unreasonable for us to ask for your consent in the circumstances (e.g. if you are injured).

We will retain your information for 36 months from registration for monitoring and tracking the programme’s performance and evaluation.

This is in accordance with our information retention policy and on the expiration of such period we will safely delete it.

Information provided to the Combined Authority will be processed under:

Article 6(1)(e) of the UK GDPR which states that processing is necessary for the purposes of a task carried out in the public interest or in the exercise of official authority vested in the controller

Special category’ data (such as information pertaining to an individual’s ethnicity or health) will be processed under

Article 9(2)(g) of the UK GDPR which states that processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.

As a data subject you have a number of rights under the DPA. These include the right to access the information which we hold about you. In some cases you may have a right to have your personal data rectified, erased or restricted, and to object to certain use of your data.

This would not affect the legality of what we do with your personal data before you make such a request and would not stop us from continuing to use your data to the extent that we do not require your consent. It would stop us from further using data for purposes which require your consent (e.g. marketing).

If you are unsatisfied with the manner in which we collect or handle your personal data you have a right to make a complaint to the Information Commissioner’s Office. Information about how to make complaints can be found on the ICO’s website at

For further information, or to contact us to make a request, please visit

The Combined Authority’s Data Protection Officer can be contacted at