This privacy notice explains how The AFN Network+ (AFN) collects, manages, and uses your personal data for the purpose of managing the network.

‘Personal data’ means any information relating to an identified or identifiable natural person (the data subject).

This privacy notice adheres to the General Data Protection Regulation (GDPR) principle of transparency. This means it gives information about:

• How and why your data will be used;
• What your rights are under GDPR; and
• How to contact the AFN in relation to questions, concerns or exercising your rights regarding the use of your personal data.

Why are we processing your personal data?

Your data is being processed for the purpose of:

• Managing your membership of the network;
• Keeping you up to date with news, and organising events;
• Analysing membership information to ensure we develop a network with a strong and diverse representation, with equality and inclusion built in; and
• Improving the website experience and ensuring its stability.

As a data controller we are committed to protecting the privacy and security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (or any successor legislation) and any other legislation directly relating to privacy laws that apply (together “the Data Protection Legislation”). General Information on Data Protection law is available from the Information Commissioner’s Office (https://ico.org.uk/).

How do we use your personal data?

We will only process your personal data when the law allows us to. 

Our lawful basis for using your personal data for the purpose of the network is ‘public task’, and necessary for the reasons of substantial public interest.

Where you confirm that you would like to be added to our membership directory and mailing list (for opportunities, events and newsletters), electronic communications will be sent to you on the legal basis of consent. You can withdraw this consent at any time by contacting contact@agrifood4netzero.net.

You can find out more information about lawful bases at the following webpage: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/

We will always tell you about the information we wish to collect from you and how we will use it. We will not use your personal data for automated decision making about you or for profiling purposes.

What data do we collect?

We collect data you provide directly to us, such as:

• Name, address, email, postcode, age, location data, and career information.
• We do not routinely collect special category data such as race and ethnicity, religious beliefs, disability status, gender, and sexual orientation. If we were to collect this, additional measures would be put in place to ensure security and anonymity.
• We may also collect anonymised statements should you partake in any focus groups about the network.

Information we collect automatically when you use our website, which may include your IP address, browser type and version, operating system, device type, referrer URL, and how you use our website (e.g., pages visited, time spent on pages). This is typically collected through cookies and similar technologies, for which our lawful basis is consent (via your cookie preferences).

Who do we share your data with?

We may share anonymised website usage data with analytics providers, such as Google Analytics, to help us monitor performance and improve the website.

Any personal data shared with collaborators will be pseudonymous/anonymised where possible, and supported with legally binding contracts.

We are also required to share outcomes of this project (excluding your personal data) with UK Research and Innovation (UKRI), who funded the network up to 31st December 2025, along with the Engineering and Physical Sciences research Council (EPSRC), Biotechnology and Biological Sciences Research Council (BBSRC), Natural Environment Research Council (NERC), and the Economic and Social Research Council (ESRC).

How do we keep your data secure?

We take a robust approach to protecting your information with secure electronic and physical storage areas for data with controlled access. Access to your personal data is strictly controlled on a need-to-know basis and data is stored and transmitted securely using methods such as encryption and access controls for physical records where appropriate.

Alongside these technical measures there are comprehensive and effective policies and processes in place to ensure that those who process your personal information are aware of their obligations and responsibilities for the data they have access to.

By default, people are only granted access to the information they require to perform their duties. Mandatory data protection and information security training is provided to staff and expert advice available if needed.

How long do we keep your data for?

We will only retain your personal data for as long as we need it to carry out the purposes in this notice.

Your rights and how to exercise them

Under the Data Protection legislation, you have the following qualified rights:

• The right to access your personal data held by or on behalf of the AFN;
• The right to rectification if the information is inaccurate or incomplete;
• The right to restrict processing and/or erasure of your personal data;
• The right to data portability;
• The right to object to processing;
• The right to object to automated decision making and profiling;
• The right to complain to the Information Commissioner’s Office (ICO).

To protect your privacy and the privacy of others, we will verify your identity before giving effect to your rights. To exercise any of your rights please contact contact@agrifood4netzero.net

How to contact us

We will always respond to concerns or queries you may have.

If you wish to exercise your rights or have any other general data protection queries, please contact (contact@agrifood4netzero.net).

If you have any concerns about our use of your personal data, you can make a formal complaint at the email above. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ICO website: https://ico.org.uk/).

Changes to This Privacy Notice

This policy was updated at the beginning of January 2026 to reflect the fact that the Network is no longer hosted by the University of the West of England. As of the 1st January 2026 the Network has been set up as a Community Interest Company.

We may continue to update this privacy notice from time to time by posting a new version on our website. We encourage you to review this page periodically to stay informed about how we are protecting your information.

Last updated: January 2026