PRIVACY POLICY
Wild Goose SUP are committed to protecting your privacy whilst providing you with a personalised service. This privacy policy outlines the ways we may collect, store and use your data and why.
When you make a purchase from us, we will use your data in order to fulfil our service to you. We collect and process your personal data for purposes that are in our legitimate organisational interests.
When you contact us to book an activity, we will ask for your name, phone number, email address and the groups approximate wetsuit sizes. We will then hold this information in a spreadsheet.
We will keep this data in order to make your future purchases with us easier. Where your data is required in order for us to be able to perform our service obligations we will make this clear – e.g. by making fields on a web form mandatory.
Customers who take part in a session must read our terms and conditions and general protocols then agree to them by ticking the relevant boxes on the waiver form before payment is taken for booking on the session. The terms and conditions explain that by writing down your email address it will be added to our mailing list to receive newsletters and special offers occasionally as well as notifications of any photographs which may have been taken on the session being added to our social media pages. If you would not like to be in any photographs please tell your instructor on the day of your session. We then store the booking forms or insurance purposes.
We write down the phone number of the customer who booked on a session form so instructors can contact them before a session, for example: to change the venue due to parking issues. In the instance that you book an activity with us which is provided by a third party company, such as rafting, we pass on your name and phone number to the company for the same reason.
If you would like us to delete your information please contact us using the contact details at the top of the webpage. If you ask us to stop processing or delete your information while we still have an open service obligation to you, such as a booking for a paddleboarding session you have not yet attended, we will only do so after the service has been completed or cancelled.
If you would no longer like to receive marketing emails from us, you can unsubscribe at any time by clicking the unsubscribe button on the bottom of the marketing email.
Wild Goose SUP export our mailing list from a spreadsheet to Hubspot ??? to send out marketing emails easily.
We process your data in order to: inform you of events, products and services we believe you will be interested in. We will always consider your right to privacy and ensure that our use of data is proportionate.
You may request a copy of the information held about you by us.
You may request that we amend the data we hold about you.
We take appropriate steps to maintain your contact information in a secure environment to prevent unauthorised use.
If you use your credit or debit card to purchase from us, we will ensure that this is carried out securely. Our card payments are processed by third parties who are accredited with the Payment Card Industry Data Security Standard (PCI-DSS).
We process data at our office. We also process data through our email delivery system, Hubspot??, and our online analytics software.
We will store and process any personal data you provide us with along with a history of inbound and outbound communications and your purchases for the purposes set out in this policy.
Your Data Rights – Our customers have the right to:
- The right to be informed – all organisations must be completely transparent in how they are using personal data
- The right of access – individuals will have the right to know exactly what information is held about them and how it is processed
- The right of rectification – individuals will be entitled to have personal data rectified if it is inaccurate or incomplete
- The right to erasure – also known as ‘the right to be forgotten’, this refers to an individual’s right to having their personal data deleted or removed without the need for a specific reason as to why they wish to discontinue
- The right to restrict processing – an individual’s right to block or suppress processing of their personal data.
- The right to data portability – this allows individuals to retain and reuse their personal data for their own purpose
- The right to object – in certain circumstances, individuals are entitled to object to their personal data being used. This includes, if a company uses personal data for the purpose of direct marketing, scientific and historical research, or for the performance of a task in the public interest
- Rights of automated decision making and profiling – the GDPR has put in place safeguards to protect individuals against the risk that a potentially damaging decision is made without human intervention. For example, individuals can choose not to be the subject of a decision where the consequence has a legal bearing on them, or is based on automated processing
For any request you have about our privacy policy or the data we store about you, please contact us at info@wildgoosesup.co.uk
