Overview
The person with responsibility for our data protection compliance is Max Webb, a Director (“the Data Protection Manager”), and he can be emailed via data@rugbytots.co.uk.
We are the data controller of the personal data that we keep and use, and we are therefore responsible for making sure that our systems, processes and people comply with the relevant data protection laws in respect of that personal data.
We will act in respect of personal data to comply with the six principles of the GDPR, which are:
- lawfulness, fairness and transparency;
- purpose limitation;
- data minimisation;
- accuracy;
- storage limitation;
- integrity and confidentiality.
You have rights in respect of how your personal data can be processed; these include the right to:
- request of a copy of your personal data;
- request that inaccurate data is rectified; and
- request that your personal data is in certain circumstances erased or restricted.
You have the right to complain to the Information Commissioner, which you can do by contacting the Information Commissioner’s Office (ICO) directly. Full contact details, including a helpline number, can be found on the ICO website. This website has useful information on your rights and our obligations.
Collection, use and disclosure of personal data
We collect and process personal data in relation to: meeting your requests for information about becoming a Rugbytots franchisee, in relation to any subsequent application to become a franchisee
- meeting your requests for information about becoming a Rugbytots franchisee
- processing any application from you to become a Rugbytots franchisee
- working with you as a Rugbytots franchisee
Disclosure
We may share personal data with third party providers who deliver services to support the operation of our business, and in respect of our franchisees with advisors or firms that we refer franchisees to for specialist services. We may also need to share your personal data to comply with the law.
In respect of all disclosures of personal data, we will only share the personal information which is necessary for the particular purpose for which it is provided, or where we have another legitimate interest in doing so, and we will ensure that the personal data is appropriately protected.
Retention period
We will keep personal data only for as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. Normally, our retention period for personal data collected for this purpose is a minimum of 3 years after the end of a business relationship with you,.
All of our people are required to abide by our Privacy Policy when handling personal data, and will be provided with appropriate data protection training. Any breach of data protection will be taken seriously, and may result in disciplinary action. Our Data Protection Manager will provide the advice and guidance to our people on data protection issues, as is required.
Changes to your personal data
It is very important that the personal information that we hold about you is accurate and current. Please tell us if your personal information changes during your relationship with us.
Data Security
We have put in place measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those of our people and other third parties who have a business need to know. They will only process your personal data on our instructions and where they have agreed to treat the information confidentially and to keep it secure. We have put in place procedures to deal with any suspected data security breach and will notify you and the ICO of a suspected breach where we are legally required to do so.
Where we store your personal data
We will not transfer personal data outside of the EEA unless personal data is adequately protected, as required by the GDPR.
Your rights
Under certain circumstances, you have the right by law to:
- request access to your personal data. This enables you to ask to receive a copy of the personal data that we hold about you and to check that we are lawfully processing it.
- request correction of the personal data that we hold about you.
- request erasure of your personal data.
- object to processing of your personal data where we are relying on our legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- request the restriction of processing of your personal data.
- request the transfer of your personal data to another party.
You may request details of personal information which we hold about you. A small fee will be payable. If you would like a copy of the information held on you please write to us at Rugbytots Limited, 1st Floor, Wolvers Home Farm, Ironsbottom, Sidlow, Reigate, Surrey RH2 8PZ or email data@rugbytots.co.uk.
Links from our website
Our website may contain links to other Rugbytots website and the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. We recommend that you check these policies before you submit any personal data to these websites.
Cookies
Why use cookies?
Most major web sites use cookies. Cookies cannot be used by themselves to identify you. If a website doesn’t use cookies, it will think you are a new visitor every time you move to a new page on the site – for example, when you enter your login details and move to another page it won’t recognise you and it won’t be able to keep you logged in.
Cookies may be set by the website you are visiting (‘first party cookies’) or they may be set by other websites who run content on the page you are viewing (‘third party cookies’).
We use cookies to help improve your user experience by enabling the website to ‘remember you’, either for the duration of your visit (using a ‘session cookie’) or for repeat visits (using a ‘persistent cookie’).
What is in a cookie?
A cookie is a simple text file that is stored on your computer or mobile device by a website’s server (so that the website can remember who you are) and only that server will be able to retrieve or read the contents of that cookie. Each cookie is unique to your web browser. It will contain some anonymous information such as a unique identifier and the site name and some digits and numbers. It allows a website to remember things like your preferences or what’s in your shopping basket.
How we use cookies
We use performance cookies for internal purposes to help us to provide you with a better user experience. Information supplied by cookies helps us to understand how our visitors use our website so that we can improve how we present our content to you. They also allow us to test different design ideas for particular pages.
We try to make sure our advertising is as relevant as possible for users and sometimes use online behavioural advertising cookies to tailor advertising to you based on the areas you look at on our site and your IP address geo-location.
Changes to this privacy policy
Any changes we may make to our privacy policy in the future will be posted on our website, so please ensure that you are viewing the correct version.
Please email data@rugbytots.co.uk if you have any questions, comments or requests regarding this Privacy Policy.
