20:20 Innovation logo

Throughout this page ‘we’ and ‘us’ should be read as referring to 20:20 Innovation Training Limited.

1. Help us to give you the best service

1.1 We are committed to providing you with a high-quality service that is both efficient and effective. If, at any point you would like to discuss with us how our service to you could be improved, or if you are dissatisfied with the service you are receiving, please let us know by contacting CEO Michael Roberts at michael.roberts@2020innovation.com or by calling 0121 314 2020.

1.2 We will consider carefully any complaint you may make about our services as soon as we receive it and do all we can to explain the position to you. We will acknowledge your complaint within five business days of its receipt and endeavour to deal with your complaint within four weeks.

1.3 Our full Supplier Quality Statement can be viewed here.

2. Data Protection

2.1 In this clause [2], the following definitions shall apply:

  1. a) ‘client personal data’ means any personal data provided to us by you, or on your behalf, for the purpose of providing our services to you, pursuant to our engagement letter with you;
  2. b) ‘data protection legislation’ means all applicable privacy and data protection legislation and regulations including PECR, the UK GDPR and any other applicable national laws, regulations and secondary legislation in the UK relating to the processing of personal data and the privacy of electronic communications, as amended, replaced or updated from time to time;
  3. c) ‘controller’, ‘data subject’, ‘personal data’, and ‘process’ shall have the meanings given to them in the data protection legislation;
  4. d) ‘UK GDPR’ means the Data Protection Act 2018 as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 which merge the previous requirements of the Data Protection Act with the requirements of the General Data Protection Regulation ((EU) 2016/679); and
  5. e) ‘PECR’ means the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2426/2003).

2.2 We shall each be considered an independent data controller in relation to the client personal data. Each of us will comply with all requirements and obligations applicable to us under the data protection legislation in respect of the client personal data.

2.3 You shall only disclose client personal data to us where:

  1. a) you have provided the necessary information to the relevant data subjects regarding its use (and you may use or refer to our privacy policy available at https://www.the2020group.com/privacy-policy/ for this purpose);
  2. b) you have a lawful basis upon which to do so, which, in the absence of any other lawful basis, shall be with the relevant data subject’s consent; and
  3. c) you have complied with the necessary requirements under the data protection legislation to enable you to do so.

2.4 Should you require any further details regarding our treatment of personal data, please contact us at data.controller@2020Innovation.com and we’ll respond.

2.5 We shall only process the client personal data:

  1. a) in order to provide our services to you and perform any other obligations in accordance with our engagement with you;
  2. b) in order to comply with our legal or regulatory obligations; and
  3. c) where it is necessary for the purposes of our legitimate interests and those interests are not overridden by the data subjects’ own privacy rights. Our privacy policy (available at https://www.2020innovation.com/privacy-policy/) contains further details as to how we may process client personal data.]

2.6 For the purpose of providing our services to you, we may disclose the client personal data to our regulatory bodies or other third parties (for example, our professional advisors or service providers). The third parties to whom we disclose such personal data may be located outside of the United Kingdom. We will only disclose client personal data to a third party (including a third party outside of the UK) provided that the transfer is undertaken in compliance with the data protection legislation.

2.7 We may disclose the client personal data to other third parties in the context of a possible sale, merger, restructuring or financing of or investment in our business. In this event we will take appropriate measures to ensure that the security of the client personal data continues to be ensured in accordance with data protection legislation. If a change happens to our business, then the new owners may use our client personal data in the same way as set out in these terms.

2.8 We shall maintain commercially reasonable and appropriate security measures, including administrative, physical and technical safeguards, to protect against unauthorised or unlawful processing of the client personal data and against accidental loss or destruction of, or damage to, the client personal data.

2.9 In respect of the client personal data, provided that we are legally permitted to do so, we shall promptly notify you in the event that:

  1. a) we receive a request, from or on behalf of a relevant data subject, to exercise their data subject rights under the data protection legislation or a complaint or any adverse correspondence in respect of our processing of their personal data;
  2. b) we are served with an information, enforcement or assessment notice (or any similar notices), or receive any other material communication in respect of our processing of the client personal data from the Information Commissioner’s Office or any other supervisory authority ); or
  3. c) we reasonably believe that there has been any incident which resulted in the accidental or unauthorised access to, or destruction, loss, unauthorised disclosure or alteration of, the client personal data

Electronic and other communication

3.1 Unless you instruct us otherwise, we may, if appropriate, communicate with you and with third parties by email or other electronic means. The recipient is responsible for virus checking emails and any attachments.

3.2 With electronic communication, there is a risk of non-receipt, delayed receipt, inadvertent misdirection or interception by third parties. We use virus-scanning software to reduce the risk of viruses and similar damaging items being transmitted in emails or by electronic storage devices. Nevertheless, electronic communication is not totally secure and we cannot be held responsible for damage or loss caused by viruses or for communications which are corrupted or altered after despatch. Nor can we accept any liability for problems or accidental errors relating to this means of communication, especially in relation to commercially sensitive material. These are risks you must bear in return for greater efficiency and lower costs. If you do not wish to accept these risks, please let us know and we will seek to agree alternative processes.

3.3 Any communication by us with you sent through the postal system is deemed to arrive at your postal address two working days after the day the document was sent.