Legal notice

This policy has been prepared with due regard to the data protection laws applicable to the data processing activities performed by us in the countries in which we operate (“applicable laws”), including the General Data Protection Regulation (“GDPR”) and any subsequent amendment or legislation passed to enact GDPR into UK law.  Although the GDPR applies to EU subjects and processing in the EU, we have chosen to apply the GDPR standard of data protection to all data subjects whose personal information we collect and process irrespective of the place of collection and processing.  This notwithstanding, it may still be necessary to apply different standards in response to the laws in different countries and it is possible that we may issue addendums for specific countries in which we operate, and where appropriate.

How to contact us about this privacy policy

If you need to contact us regarding our Privacy Policy or have questions about your personal data, please refer to the contact section within our website. You can contact us in writing, email or telephone.

Information we collect and what we use it for

To access certain areas of the website, we may need you to register with us. During the registration process you will be asked to submit personal information about yourself (e.g. name and email address). By entering your details in the fields requested, you enable us and/or our official partners to provide you with the services you select. When you provide such personal information, you accept that we may retain your personal information and that it may be held by us or any third party that processes it on our behalf for the purposes of providing the information, goods or services which you have requested. Any third parties who process personal information on our behalf are required to maintain the confidentiality and privacy of the personal information that they process for us. When we provide you with products or services we may collect and store any personal information that you provide to us. We may, for example, keep a record of your name, address, delivery address, email address, telephone number and payment card details.

When you submit your CV and/or application for a particular role to us, this will be used solely in connection with your application and will not be shared with third parties other than those engaged by us in connection with the recruitment process, such as recruitment consultants or agencies.

We may use your data for the following purposes:

• Providing products and services you request or have expressed an interest in
• Marketing to you via email, phone, mobile messaging, direct mail, or social media
• Administering any competitions, voting, quizzes, and or other offers/promotions which you enter
• Creating an individual profile for you so that we can understand and respect your preferences
• Communicating with you if any products or services you have requested are unavailable
• Fraud screening and prevention purposes
• Record keeping purposes
• Market research so that we can improve the products and services we offer
• Activity logging on our digital platforms
• Personalise and improve your experience on our digital platforms
• Personalise any communications that we may send you
• Responding to your enquiries and requests in an efficient and effective manner

When you sign up with us for an online account, register to receive marketing communications from us (and/or our official partners), enter one of our competitions, fill in one of our forms (whether online or offline) or otherwise expressly provide us with your personal information, we may collect and store any personal information that you provide to us and may use it to personalise and improve your experience on our digital platforms, provide products and services you request from us, and carry out market research.

When you interact with our digital platforms, we may also automatically collect the following information about your visit. This is primarily to help us better understand how our fans use our digital platforms to enable us to create better content and more relevant communications:

• How you have reached our digital platform, the internet protocol (IP) address you have used, and the MAC address of your device
• Your operating system, browser type, versions and plug-ins
• Your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
• Content you have viewed and the duration
• Offers you have redeemed
• Which adverts you saw and responded to
• Which pop up or push messages you might have seen and responded to
• Your current subscription status
• Information collected in any forms you complete
• Location based services

We may also infer your country of location from the IP address you have used to access our digital platforms.
We may also generate, use and disclose aggregated and/or anonymised information and statistics about our website and digital platform visitors for marketing and strategic purposes. However, no visitor will be individually identifiable from these aggregated and/or anonymised information and statistics.

If you are under 16

If you are under 16 and register for restricted areas of our digital platforms, we will collect your date of birth and retain that with your name and other details you may provide. This is so we can ensure we treat you in an age appropriate way in line with this policy.

If you have signed up to receive a product or service, we may contact you about this.

Ages 13-15

If you are aged 13-15, you must first tell your parent or legal guardian that you wish to register on our digital platforms and get their consent. You must make sure that your parent or legal guardian knows and agrees each time before you:

• email us or ask us to email anything to you
• send any information to us
• enter any competition or game that requires information about you or offers a prize
• offer or agree to buy anything online

If you are the parent or legal guardian of a user of our digital platforms who is aged 13 to 15 we do not seek your direct consent to their registration, but we expect them to inform you and get your agreement in advance before they register and before each time they do any of the activities listed above.

Aged under 13

If you are under 13, you may only use the restricted areas of our digital platforms if your parent or legal guardian has first told us that you are allowed to do so.

If you are under 13 and wish to register, you must truthfully tell us your name, email address, country and date of birth. We will then ask you for the name and email address of your parent or legal guardian. We will send them an email, so they are aware of your request and will ask them for their consent and to confirm they have authority to give that consent. We need their consent or refusal within 7 days, or else we will assume consent is not granted. Their consent can be withdrawn at any stage.

Even if your parent or legal guardian gives their consent to your registration, if you are under 13 we still expect you to tell them and get their agreement in advance each time before you:

• email us or ask us to email anything to you;
• send any information to us;
• enter any competition or game that requires information about you or offers a prize;
• offer or agree to buy anything online.

If you are the parent or legal guardian of a user of our digital platforms who is under 13, they can access and use unrestricted areas, but we will need your direct consent if they wish to gain access to restricted areas.

Cookies

Our websites use cookies to collect certain information about our website visitors automatically. Cookies are small text files that store basic information that a website can use to track on-line traffic flows, recognise repeat site visits and record information about your on-line preferences. They often include an anonymous unique identifier that is sent to your browser from our websites, which is then stored on your computer's hard drive. Cookies do not attach to your system and damage your files but observe user behaviour and compile aggregate data that we then use to improve web services. We also use cookies to measure the effectiveness of advertising.

There are two broad categories of cookies – ‘first party cookies’ and ‘third party cookies’. First party cookies are cookies that are served directly by the website operator to your computer and are used only by the website operator to recognise your computer when it revisits that site. Third party cookies are served by a service provider on behalf of the website operator and can be used by the service provider to recognise your computer when it visits other websites. Third party cookies are most commonly used for website analytics or advertising purposes.

The cookies that are set by visiting this website include:

• _ga: Google Analytics cookie, which is used to distinguish users.
• __utm*: Google Analytics non-personally identifiable information used for website analytics.
• _atuvc: associated with the AddThis social sharing widget
• _atuvs: associated with the AddThis social sharing widget

Disclosure of your information

In order to provide our products and services to you or to otherwise fulfil contractual arrangements that we have with you, we may need to appoint other organisations to carry out some of the data processing activities on our behalf. These may include, for example, payment processing organisations, delivery organisations, fraud prevention and screening and credit risk management companies, and mailing houses.

We may share your data with advertising networks and/or social media platforms for the purposes of selecting and serving relevant adverts to you via those networks/platforms, and to search engine and analytics providers.

We may share your data with third parties:

• if we are under a legal or regulatory duty to do so
• if it is necessary to do so to enforce our terms and conditions of sale or other contractual rights
• to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity
• where such disclosure is necessary to protect the safety or security of any persons
• and/or (e) otherwise as permitted under applicable law.

Updates and your rights

If you would like to update your records, you can do so by changing your profile on our website. We encourage you to promptly update your personal information if it changes.

You have the right to ask for a copy of any personal information that we hold about you in our records, to correct any inaccuracies and to update any out-of-date information. Please write to us at the address published on our contact section should you wish to do so.

We will provide a copy of your information free of charge. However, if the request is deemed manifestly unfounded or excessive then we will charge a ‘reasonable fee’ covering our administration costs.

Changes to this Policy

We reserve the right, at any time, to modify, alter, or update this Privacy Policy. When we do so we will publish the changes on the website. If you do not agree to these changes, please do not continue to use the website. If material changes are made to this Privacy Policy, we will notify you by placing a prominent notice on the website. Any queries or comments about this Privacy Policy should be sent to us using the contact details listed above.

Security

Security is very important to us. Secure Socket Layer ("SSL") encryption technology is used for protection of information in transit for any sensitive transactions such as payments. Additional security procedures are in place to protect the confidentiality, integrity and availability of your personal information.

In addition, we have security procedures in place to protect our physical records and computerised databases from loss and misuse, and only allow access to them when it is absolutely necessary to do so, and then under strict guidelines as to what use may be made of the personal information contained within them.

Internet-based transfers

Given that the Internet is a global environment, using the Internet to collect and process personal information may involve the transmission of personal information on an international basis. Therefore, by using our websites and digital platforms and communicating electronically with us, you acknowledge our processing of personal information in this way. However, we will endeavour to protect all personal information collected through our websites and in accordance with strict data protection standards.

Other websites

Our websites and digital platforms may contain links to other websites which are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.