All About Gymnastics “AAG”, “we”, “us” or “our”) is a trading name of Bethany G. Rowe. Our office is All About Gymnastics, Balstyle, Zelah, Truro, Cornwall TR4 9JJ.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, or that we obtain from other sources will be processed by us when you:
- use our website[s] www.allabout-gymnastics.com;
- email or telephone us;
- use our services; and
- purchase products from us.
For the purpose of data protection laws, we are a data controller and we are registered as a data controller with the Information Commissioner’s Office under number ZA376278.
1 BASIS FOR PROCESSING PERSONAL DATA
1.1 Sections 1.2 – below explains how and why we process your personal data, as well as the legal basis on which we carry out this processing.
1.2 To enter contracts with you: Where you order goods and/or services from us, we will process your personal data to process your order so that we can deliver these goods and/or provide services to you. Our use of personal data in this way includes sharing your personal data with our payment system provider, with delivery companies and other potential subcontractors. The legal basis on which we process your personal data in this way is the necessity to be able to enter into and perform the contract for the sale of goods and/or services you have requested from us. If you do not wish to provide us with your personal data in this way, you will be unable to purchase goods and/or services from us.
1.3 To provide products to others: Where you have provided personal data about another person (for example, where you order goods as a gift to be delivered to someone else or purchase Gift Cards), we need to process such personal data in order to provide these products to the other person or people. This will include sharing their personal data with delivery companies and other potential subcontractors. We need to process their personal data in this way to be able to provide them with the goods you have ordered for them from us. The legal basis on which we process their personal data in these circumstances is our legitimate interest to provide the person you have identified and requested with the products you have ordered.
1.4 To make our website better: We may process your personal data in order to provide you with a more tailored user experience – eg. displaying goods we believe you will be interested in, based on your purchase history and browsing habits, or allowing our shopping basket to remember what you have ordered from us). We may also use your personal data to make sure our website is displayed in the most effective way for the device you are using. This processing means that your experience of our site will be more tailored to you, and that the products you see on our site may differ from someone accessing the same site with a different purchase history or browsing habits. We also use various cookies to help us improve our website (more details are set out in section 4), and share your personal data with the third party analytics and search engine providers that assist us in the improvement and optimisation of our website.
We will also process personal data for the purposes of making our website more secure, and to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
The legal basis on which we process personal data in these circumstances is our legitimate interest to provide you with the best customer experience we can, and to ensure that our website is kept secure.
1.5 To provide customer services to you: We may process your personal data in order to provide various supporting customer services to you (such as where you contact us with a question in connection with a product or service and/or request certain information from us). The legal basis on which we process your personal data in these circumstances is our respective legitimate interests in dealing with customer service requests and responding to communications. If you do not provide us with the personal data we request from you for customer services purposes, we may not be able to fully answer your queries.
1.6 For marketing purposes: Where:
1.6.1 you have expressly opted in to receive marketing communications from us, we will process your personal data to provide you with marketing communications in line with the preferences you have provided;
1.6.2 you have expressly opted in via our site to receive marketing communications from a third party, we will process your personal data by transferring it to the relevant third party,
in each case, the legal basis on which we process your personal data is your consent. You are not under any obligation to provide us with your personal data for marketing purposes, and you can withdraw your consent to your personal data being processed in this way at any time by contacting us (please see section 14) or, where relevant, by following the unsubscribe link in every marketing communication you receive from us. If you do choose to withdraw your consent, this will not mean that our processing of your personal data before you withdrew your consent was unlawful.
1.7 If our business is sold: We will transfer your personal data to a third party:
1.7.1 in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets (at all times in accordance with all applicable data protection laws); or
1.7.2 if All About Gymnastics or substantially all of its assets are acquired by a third party, in which case personal data held by All About Gymnastics about its customers will be one of the assets transferred to the purchaser,
in each case, the legal basis on which we process your data in these circumstances is our legitimate interest to ensure our business can be continued by a purchaser. If you object to our use of personal data in this way, the relevant seller or buyer of our business may not be able to provide goods and/or services to you.
1.8 In certain circumstances we may also need to share your personal data if we are under a duty to disclose or share personal data in order to comply with any legal obligation.
2 CATEGORIES OF INFORMATION WE COLLECT FROM YOU
2.1 We will collect and process the following personal data about you.
2.2 Information you give us: This is information about you that you give us when filling in forms on our website, making a purchase from our website or by corresponding with us by phone, e-mail or otherwise. It includes information provided when you register to use our website, register for our newsletter, open an account with us, use our services, participate in social media functions on our website, enter a competition, promotion or survey and when you report a problem with our website. The information you give us may include names, birth date, size(s), addresses, company details, email addresses and phone numbers.
2.3 Information we collect about you: With regard to each of your visits to our website we will automatically collect the following information:
2.3.1 technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
2.3.2 information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.
2.4 Information we receive from other sources: We may receive information about you when you use our site. We are also working closely with third parties (including, for example, Google Analytics, WooCommerce as well as other business partners, sub-contractors, advertising networks, analytics providers, hosting providers and search information providers) from whom we may also receive information about you.
2.5 We do not process any special categories of personal data, meaning personal data revealing:
2.5.1 racial or ethnic origin;
2.5.2 political opinions; religious or philosophical beliefs or trade union membership;
2.5.3 genetic or biometric data that uniquely identifies you; or
2.5.4 data concerning your health, sex life or sexual orientation.
2.6 We do not collect data relating to criminal convictions or offences or related security measures.
3 CATEGORIES OF RECIPIENTS OF PERSONAL DATA
3.2 Your personal data may be shared by us with categories of recipients that include Google Analytics, WooCommerce, PayPal as well as other business partners, sub-contractors, advertising networks, analytics providers, hosting providers and search information providers.
4.2 A cookie is a small file of letters and numbers that we store on your browser or the hard drive of their computer. We only use (and store) non-essential cookies on your computer’s browser or hard drive if you provide your consent.
|woocommerce_cart_hash||This cookie contains information about the cart as a whole and helps WooCommerce know when the cart data changes. No personal information is stored within these cookies.||expires after 1 day|
|woocommerce_current_currency||Used to convert currency and generate caching files depending on its value||expires after 1 day|
|woocommerce_items_in_cart||This cookie contains information about the cart as a whole and helps WooCommerce know when the cart data changes. No personal information is stored within these cookies.||expires after session|
|Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer. No personal information is stored within these cookies.||expires after 1 day|
|This cookie helps track visitor usage, events, target marketing, and can also measure application performance and stability.||expires after 12 months|
|__utma||Used to track the number of times a visitor has been to the site, first visit and last visit||expires 2 years from set / update|
|__utmz||Used to track where the vistor came from, what search engine was used, and what link was clicked on||expires after 6 months|
|_ga||Used to identify unique users||expires after 2 years|
|_gat||Used to throttle the request rate||expires after 1 minute|
|_gid||Used to distinguish users||expires after 24hrs|
|gadwp_wg_default_dimension||Used to collect visitor statistics for Google Analytics. Data collected is not personal, but only for used browsers.||session end|
|act||Used for Facebook social plugin. This website also uses Facebook’s pixel tracking code which tracks your visits to this website and other websites for advertising purposes.||expires end of session|
|c_user||Facebook ID||expires in 30 days|
|datr||This cookie is set by Facebook to see if you put Like this page.||expires 2 years|
|fr||Used to encrypte Facebook ID and browser ID||expires in 30 days|
|presence||Used to determine users chat state||expires end of session|
|wd||Used for Facebook social plugin to determine browser window dimensions.|
|xs||Session number||expires in 30 days|
|NID||Contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wish to have Google’s SafeSearch filter turned on.||expires after 6 months|
|muxData||Tracking user behaviour in videos||Expiry: 240 months||https://wistia.com/privacy/|
|__distillery||It is a video player cookie recording the position where the video has been stopped to allow playback continuation||expires after 12 months|
4.4 You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) they may not be able to access all or parts of our website.
4.5 Except for essential cookies, all cookies will expire as outlined under the expiration column in the table included in paragraph 4.2 and 4.3.
5 USES MADE OF THE INFORMATION
5.1 We will combine the information you provide to us with information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).
5.2 The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
6 SOCIAL MEDIA PLATFORMS
6.1 Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
6.2 Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website and its owners encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
6.3 This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
7 SHORTENED LINKS IN SOCIAL MEDIA
7.1 This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls [web addresses] (this is an example: https://sip.ly/zyVUCo). Users are advised to take caution and good judgement before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
8 WHERE WE STORE PERSONAL DATA
International Data Transfers
8.2 All information you provide to us is stored on secure servers. Information you provide us with will be encrypted using SSL technology. Payment transactions are managed off-site using Sage Pay, PayPal or Stripe. Please note that we do not collect or process your credit or debit card details. These are however collected and processed by our payment processing service provider Sage Pay, Stripe Payments Europe, Ltd (“Stripe”) and PayPal. The collection and processing by these providers of your credit or debit card details and other personal data are governed by their respective terms and conditions. See https://www.sagepay.co.uk/policies/privacy-policy; https://stripe.com/gb/privacy or https://www.paypal.com/webapps/mpp/ua/privacy-full for more information. Offsite payment processors have their own security standards, certificates, and methods of securely passing data from and to our store. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. You must not share this password with anyone.
9 PERIOD OF STORAGE
9.1 Where you order goods and/or services from us, we will retain your data for a period of 6 (six) years after the goods were delivered and/or the services performed, to ensure that we are able to assist you should you have any questions or feedback in relation to our goods and/or services or to protect, or defend our legal rights.
9.2 Where we have processed your personal data to provide you with marketing communications with consent, we may contact you at least every twelve (12) months to ensure you are happy to continue receiving such communications. If you tell us that you no longer wish to receive such communications, your personal data will be removed from our lists.
9.3 Where we have processed your data for any other reason (such as where you have contacted us with a question in connection with our goods and/or services), subject to section 9.1, we will retain your data for twelve (12) months.
10 YOUR RIGHT TO OBJECT UNDER DATA PROTECTION LAWS
10.1 You have the right to object to us processing your personal data where we are processing personal data:
10.1.1 based on our legitimate interests (as set out at section(s) 1, 2, 3, 4, 5, 6, and 7 above). If you ask us to stop processing your personal data on this basis, we will stop processing your personal data unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws; and
10.1.2 for direct marking purposes. If you ask us to stop processing your personal data on this basis, we will stop.
In each case please do so by making contact with us directly (please see section 14).
11 YOUR OTHER RIGHTS UNDER DATA PROTECTION LAWS
Right of access
11.1 You have the right to receive confirmation as to whether your personal data is being processed by us, as well as various other information relating to our use of your personal data. You also have the right to access your personal data which we are processing. You can exercise this right by making contact with us directly (please see section 14).
Right to rectification
11.2 You have the right to require us to rectify any inaccurate personal data we hold about you. You also have the right to have incomplete personal data we hold about you completed, by providing a supplementary statement to us.
Right to restriction
11.3 You have the right to restrict our processing of your personal data where:
11.3.1 the accuracy of the personal data is being contested by you;
11.3.2 the processing by us of your personal data is unlawful, but you do not want the relevant personal data erased;
11.3.3 we no longer need to process your personal data for the agreed purposes, but you want to preserve your personal data for the establishment, exercise or defence of legal claims; or
11.3.4 we are processing your data on the basis of our legitimate interest (as set out at section[s] 1, 2, 3, 4, 5, 6, and 7 above) and you:
22.214.171.124 object to our processing on the basis of our legitimate interest under section 10.1.1 above; and
126.96.36.199 want processing of the relevant personal data to be restricted until it can be determined whether our legitimate interest overrides their legitimate interest.
11.4 Where any exercise by you of your right to restriction determines that our processing of particular personal data are to be restricted, we will then only process the relevant personal data in accordance with your consent and, in addition, for storage purposes and for the purpose of legal claims.
Right to data portability
11.5 You have the right to receive your personal data in structured, standard machine readable format and the right to transmit such personal data to another controller.
Right to erasure
11.6 You have the right to require we erase your personal data which we are processing where one of the following grounds applies:
11.6.1 the processing is no longer necessary in relation to the purposes for which your personal data was collected or otherwise processed;
11.6.2 our processing of your personal data is based on your consent, you have subsequently withdrawn your consent and there is no other legal ground we can use to process your personal data;
11.6.3 you object to the processing in your personal data as set out in section 10.1.1 above and we have no overriding legitimate interest for our processing;
11.6.4 the personal data have been unlawfully processed; and
11.6.5 the erasure is required for compliance with a law to which we are subject.
11.7 You have the right to lodge a complaint with the Information Commissioner’s Office, the supervisory authority for data protection issues in England and Wales.
11.8 Exercising your rights: You can exercise your rights by making contact with us directly (please see section 14).
12 LINKS ON OUR WEBSITE
Our website may, from time to time, contain links to and from the websites of our partner networks and affiliates. Our service connects you to different websites. If you follow a link to any of these websites or use our service, please note that you have left our website and these websites have their own privacy policies. We do not accept any responsibility or liability for these policies or websites. Please check these policies before submitting any personal data to these websites.
You can contact us by telephoning +44 7927 010 236 or by writing to us at All About Gymnastics, Balstyle, Zelah, Truro, Cornwall, United Kingdom TR4 9JJ or email us at [email protected].