April 2026
Introduction/background
The Welsh Government (Food Division) have appointed BIC Innovation and its technical partners, Greener Edge and Ecostudio, as the delivery partners for the Food and Drink Wales Climate Resilient Food Security Service and the Sustainability Service. The Welsh Government is the Data Controller for any personal data processed for the purposes of this programme, and BIC Innovation is the Data Processor.
For your business to benefit from the services, our delivery partners are required to collect direct information from you. This information will include personal information and relevant business information which will enable them to provide you with the appropriate advice and information. You are under no obligation to share this information, but failure to do so will mean it is unlikely that you and your business will be able to benefit fully from the Climate Resilient Food Security Service and/or the Sustainability Service.
What is the lawful basis for processing?
Data will be processed under Article 6(1)(e) of the UK GDPR legislation as part of Welsh Government’s public task in supporting and promoting the food industry in Wales. The public task is established in section 60 of the Government of Wales Act 2006.
Why we collect and process the data collected
To participate in the Climate Resilient Food Security Service and/or the Sustainability Service and receive support delivered via either or both services, our delivery partners are required to collect information from you. This information will include personal information and relevant business information which will enable our delivery partner to tailor the services and support you receive and collect feedback about the services delivery. No automated decision‑making or profiling is used as part of this programme. This information may also be used to support and manage applications for financial or grant support provided by the Welsh Government where this is linked to the services you receive or apply for
What data will be collected?
Personal information collected will include your name, address, and contact information (e.g. email, telephone number). We may also need relevant information about your business, such as information relating to your premises, products, supply chain, operations, processes, carbon emissions, business and financial data to help tailor the services to your specific needs. Your data will also be used to monitor and report on the number of individuals and businesses taking part in the Climate Resilient Food Security Service and/or the Sustainability Service. Where relevant, this may include information submitted as part of applications for Welsh Government financial or grant support, including information required to assess eligibility and outcomes associated with that support.
Who will have access to your data?
Appropriate technical and organisational measures are in place to keep your data secure, including secure storage (supported by Cyber Essentials accreditation), access controls (Two-Factor Authentication), and encrypted systems. We may use information and data gathered as part of the Climate Resilient Food Security Service and/or the Sustainability Service to develop case studies to highlight or promote the services and wider Welsh Government support. We will always contact you prior to creating case studies and outline what information will be shared.
Welsh Government may, in limited circumstances, share information with other appointed contractors delivering Food and Drink Wales programmes. We and/or BIC Innovation (appointed contractor) will always advise you prior to sharing your personal information Welsh Government may share relevant personal and business information internally, or with appointed delivery partners, where necessary to support the operation and financial or grant support oversight. An example is sharing the names of companies (and relevant contact details such as email addresses) which have a carbon reduction plan in place or have received climate resilience training with the contractor for the Trade Engagement Programme. This allows join-up so they can promote the sustainability and climate resilient credentials of food and drink manufacturers to trade customers and buyers.
How long will we keep your data?
Your data will be retained for the duration of the Climate Resilient Food Security Service and Sustainability Service contract periods. Data will be deleted from the contractor’s systems (and/or returned to Welsh Government if requested) at the end of the contract.
What we do with your data
Your data will be used to monitor and report on the business uptake of these services. You may also be contacted by an appointed contractor to take part in any research or evaluation about your experience about either or both services. The purpose of the interview or survey will be explained to you, and you will be given the option to say ‘yes’ or ‘no’ to taking part. Your contact details will only be used by the appointed contractor and will be deleted once the approved research is complete.
Your rights
Under the UK GDPR you have the following rights:
- Your data will be stored and processed within the UK and will not be transferred internationally.
- To access a copy of your own data and for us to rectify inaccuracies in that data.
- To object to or restrict processing or for your data to be ‘erased’ (in certain circumstances).
- To lodge a complaint with the Information Commissioner’s Office (ICO) who is the Welsh Government’s independent regulator for data protection.
Contact information
The contact details for the Information Commissioner’s Office are:
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Telephone: 01625 545745 or 0303 123 1113
Website: www.ico.gov.uk
For further clarification on the use of your data for the Climate Resilient Food Security Service or the Sustainability Service, you can contact Claudia.Guy@gov.wales , Edel.Moroney@gov.wales , or tracey.jones3@gov.wales
If you have any questions relating to this privacy notice or about how Welsh Government handle your personal information, please contact our Data Protection Officer:
Welsh Government, Cathays Park, Cardiff, CF10 3NQ