You have the right to object to us processing your personal data on the basis of our
legitimate
interests or for direct marketing purposes (including any related profiling we do to help ensure
that
our marketing is relevant to your interests). For more information about your right to object
and how
you can exercise it, see the section Your privacy rights.
1. About us
We are H. Young (Operations) Limited, a private limited company incorporated in (and subject to the
laws of)
England and Wales with registration number 00706712 (referred to in this Privacy Policy as
"we", "us" or "our").
Our
registered address is Buckingham House, West Street, Newbury, Berkshire RG14 1BD, UK.
We are the “data controller” of your personal data, which means that we determine the
purposes
and the means of use of the personal data we collect about you for the purposes of applicable data
protection law (which includes the General Data Protection Regulation 2016 or
“GDPR”).
2. What personal data we collect
Personal data is any information which identifies you personally whether directly (for example, your
name) or
indirectly (for example, information about your use of our website).
We collect the following personal data about you:
- Basic contact details: We ask you to provide us with your name, title, email
address
and telephone number if you sign up to receive our marketing communications. We may also collect
some or
all of these contact details as well as your postal address if you register your products with
us for
warranty and recall purposes, enter any of our competitions, complete a survey or send us
feedback, or
contact or correspond with us;
- Gender and product interests: If you sign up to receive our marketing
communications,
we ask you to confirm whether you are male or female. We might also ask you to indicate whether
you have
an interest in any particular types of products;
- Product registration details: If you create an account on our website to
register your
products with us for warranty and recall purposes, we ask you to provide the serial number of
the
products you wish to register in addition to your contact details;
- Information you provide through correspondence, feedback and competitions: We
collect
any additional personal data that you may provide to us from time to time if you contact us by
email,
letter or telephone, through our website or a social media platform or by any other means. In
addition,
we collect any additional personal data that you may provide to us if you send us feedback or
enter any
of our competitions; and
- Information about how you use our website and services: Each time you visit our
website, where you have consented to cookies, we or our service providers automatically collect
technical information about the device you have used to access our website (including the make,
model
and operating system, IP address, browser type and mobile device identifiers) and information
about your
user preferences and browsing habits (such as items or links clicked on, web pages viewed and
any web
page download errors). In addition, if you receive emails from us, we or our service providers
may
automatically collect technical information about how you have interacted with those emails,
including
whether you have opened them or clicked through any links within them. Please see our Cookie
Policy to find out more about what cookies and other similar technologies we use, and
how to
decline or disable them.
We use the data described above for the purposes set out in the How we use your personal data
section below.
3. How we use your personal data
We use your personal data for the following purposes:
To register your products and communicate with you about them for warranty and recall
purposes
If you create an account on our website to register your products with us, we keep a record of your
contact
details and the serial number of the products you wish to register with us. We use this information
to
manager and administer your account and communicate with you about warranty and recall
notifications.
To inform you of any changes to our services
We use the contact details you have provided to us to notify you of changes to any of our services or
to the
terms of any contracts between us or to any related information (such as changes to this Privacy
Policy).
To deliver direct marketing (involving profiling to tailor our communications to your
interests)
Our marketing communications
If you have provided your consent to do so, we will use your contact details to send you marketing
communications by email and SMS text message about www.adventureoutdoor.co products,
services, special offers, promotions, giveaways and competitions that we think may be of interest to
you.
You can unsubscribe or opt out of receiving our marketing communications at any time by:
- getting in touch using the contact details set out in the section How you can contact us
in our Privacy Policy;
- using the “Unsubscribe” link in our emails or “STOP” number in our SMS
text
messages; or
- using the “Manage my preferences” feature.
Our use of profiling to send tailored marketing communications
We want to ensure that the marketing communications we send to you are relevant to your interests.
Consequently, we undertake analysis and profiling of the information you provide to us, such as your
gender
and product interests, and other information we collect about how you interact with our
communications (see
the next section on email interaction technology below). This information helps us build a profile
of you,
meaning that if you sign up to receive marketing communications from us, you are more likely to
receive
information about products, services, special offers, promotions, giveaways and competitions that we
think
are more relevant to you and your interests. It also means that we don’t send the same
marketing
communications to all of our customers, so you may not be made the same offers as another
customer.
The legal ground for us using profiling to tailor our marketing communications to your interests is
that it
is in our legitimate interests to do so, having taken into account whether your interests and
fundamental
rights and freedoms are overridden by this type of processing. See Legal grounds for using your
personal datafor more information about our legitimate interests. If you don’t agree
with us
using profiling for this purpose, you can let us know (see How you
can contact us). If you do
object, we won't be able to continue to send you tailored marketing communications, which means the
information you receive from us may not be as relevant to you.
Email interaction technology
If you receive emails from us, we or our marketing service provider may automatically collect
technical
information about how you have interacted with those emails, including whether you have opened them
or
clicked through any links within them. This helps us understand how an email campaign performed,
what types
of emails and content our customers find interesting, and what actions our customers took, so we can
improve
our email campaigns in the future and make our emails more relevant to you. Please see our Cookie
Policy to find out more about this, including how to turn this functionality off.
Freewheel marketing communications
H. Young (Operations) Limited, the “data controller” of your personal data, operates
another
website called Freewheel (www.freewheel.co.uk), where you
can
purchase various products. We would like to use your name and email address to inform you also of
products,
services, special offers and promotions that we think may be of interest to you on the Freewheel
site. We
will only do this where you have provided your consent to do so. You can unsubscribe or opt out of
receiving
Freewheel email marketing at any time by using the “Unsubscribe” link in Freewheel
emails or by
contacting us. See the Freewheel Privacy
Policy to find out more about our privacy practices
in relation to the Freewheel site.
To manage, administer and improve our website
We also use the information we collect about you based on your use of our website and services
to:
- manage and administer our website and for internal operations, including for troubleshooting,
data
analysis, testing and statistical purposes;
- improve the services we offer you through our website;
- help ensure that you get the best from our website by making it as easy and intuitive as
possible for
you to use;
- help keep our website safe and secure; and
- make suggestions and recommendations to you and other users of our website about products or
services
that may interest you or them.
Please see our Cookie Policy to find out more about how we use cookies
and other similar
technologies in this context, and how to decline or disable them.
To provide and improve customer support
We use your personal data to be able to provide and improve the customer support we provide to you
(for
example, where you have questions about our products and services).
To run our competitions
If you choose to enter a competition that we run, we need to use your contact details and any other
personal
data that you provide at the time of entry so that we can manage the competition and let you know if
you've
won! If we ask for any other personal data as part of the competition, we will let you know at the
time of
entry exactly how we will use it.
To respond to communications or enquiries from you, and address complaints and
disputes
We use the personal data we hold about you to help us respond to any enquiries or complaints you have
made,
or address any dispute which may arise in the course of us providing our services to you.
Please note that if you contact us through a social media platform, we will only use the publicly
available
information about you (determined by your social media platform privacy settings) for the purposes
of
responding to you. Please see the privacy statements of the social media platforms you use for
details of
how they use your personal data, who they share it with and how you can manage your privacy settings
with
them.
To conduct market research
We may invite you to be involved in market research. If you accept our invitation, we will use your
feedback
to improve our website and the services available through it. If you tell us that you don't want to
be
contacted for this purpose, or you don't accept our invitation, we will respect this choice and it
won't
affect your ability to access and use our website or interact with us in other ways.
To provide other services requested by you from time to time
We process your personal data to provide any other services requested by you from time to time, as
described
at the time we collect the data.
To maintain our records and improve data accuracy
We process personal data in the course of maintaining and administering our internal records. This
includes
processing your personal data to ensure that the information we hold about you is kept up to date
and
accurate.
To conduct business analytics and reporting
We may aggregate the data we hold about you on an anonymous basis with other data for analytical and
reporting purposes.
To comply with our legal obligations and to detect, prevent and investigate other actual or
suspected
violations of law or misuse of our website
In certain circumstances, we use your personal data only to the extent required in order to enable us
to
comply with our legal obligations, including to detect, prevent and investigate fraud or to
facilitate the
exercise of your consumer rights. In addition, we may need to use your personal data to detect,
prevent and
investigate any other actual or suspected violations of law or misuse of our website.
4. Legal grounds for using your personal data
Applicable data protection law requires us to only process your personal data if we satisfy one or
more legal
grounds. These are set out in law and we rely on a number of different grounds for the processing we
carry
out, depending on the purposes of the processing. These are as follows:
Necessary for the purposes of our legitimate business interests
Much of the personal data we collect about you is necessary for the purposes of our legitimate
interests as a
business, which are to:
- provide our customers with services that are as useful and beneficial as possible, including by
personalising our contact with customers;
- develop and improve our website to enhance the customer experience;
- safeguard the security and effective operation of our website;
- better understand our customer base by engaging with customers and conducting research into, and
analysis of, how customers interact with us and use our website and the services available
through it so
that we can improve those services, marketing activities and communications (all of which could
also
benefit you); and
- ensure effective operational management and internal administration of our business, including
in
relation to document retention, compliance with regulatory guidance and exercise or defence of
legal
claims.
To help us achieve these outcomes, we profile your personal data, including by combining the data we
collect
about how you use our website and services with other information we hold about you.
Please note that where we wish to rely on this legal ground, we are required by law to conduct
balancing
tests to determine whether our legitimate interests are overridden by your interests or your
fundamental
rights and freedoms. We may continue to process your personal data on the basis of our legitimate
interests
only if we determine that your interests, rights and freedoms are not overridden by our legitimate
interests.
We have considered these matters and where we think there is a risk that your interests or
fundamental rights
and freedoms may be affected we will not process your personal data unless there is another legal
ground for
us to do so (either that we have obtained your consent to the processing or it is necessary for us
to
perform our contract with you or to comply with our legal obligations).
Please contact us if you would like further information regarding our balancing tests (see How you
can contact us).
Consent
In certain limited circumstances, we also process your personal data after obtaining your consent to
do so
for the purposes of:
- sending you marketing communications about www.adventureoutdoor.co products,
services,
special offers, promotions, giveaways and competitions;
- sending you email marketing in connection with our Freewheel site (www.freewheel.co.uk);
and
- collecting market research data.
You don’t have to provide your consent, and can withdraw it at any time.
Necessary for the performance of a contract and to comply with our legal obligations
In some cases, it is necessary for us to process a limited amount of personal data we collect about
you for
the performance of certain contracts between us. This includes your contact details and any other
information you provide to us if you enter any competitions that we run from time to time or if we
provide
you with any other services that you have requested and for which terms and conditions apply. We
will let
you know if this is the case at the relevant time.
In certain circumstances, we also use your personal data only to the extent required in order to
enable us to
comply with our legal obligations, including to detect, prevent and investigate fraud or to
facilitate the
exercise of your consumer rights.
5. Who we disclose your personal data to
H. Young (Operations) Limited, the “data controller” of your personal data, has a number
of
different business divisions. Personnel within those different divisions assist with the management
and
operation of www.adventureoutdoor.co and as a result, have access to your personal
data in
connection with the purposes described in this Privacy Policy.
Where you have provided your consent to do so, your name and email address will be used by other
personnel
within H. Young (Operations) Limited who operate the Freewheel website (www.freewheel.co.uk) for the purposes of sending you
emails
about products, services, special offers and promotions that we think may be of interest to you on
the
Freewheel site. See the Freewheel Privacy
Policy to find out more about our privacy practices
in relation to the Freewheel site.
In addition, we may from time to time need to disclose your personal data to third parties in order
to
provide you with our services and ensure the effective operation of our website. The providers of
such
services are granted access to certain personal data to the extent necessary for them to perform the
services that we request. Any personal data that is processed by third parties must be processed in
accordance with applicable data protection law and subject to contractual obligations, including
regarding
security and confidentiality. The third parties are:
- UK Fast, which provides us with a platform from which we can host and operate
our
website;
- MailChimp, our marketing service provider, which assists us with our marketing
activities and sends you email marketing on our behalf. In addition, in certain circumstances,
this
third party may use your personal data for their own legitimate business purposes as a "data
controller" in their own right. Please see MailChimp’s privacy statement available here for details of how they use your
personal
data as a “subscriber” of our marketing communications and how you can manage your
privacy
settings with them; and
- Falcon, which provides us with a social media and customer engagement tool to
enable us
to better manage and operate our social media presence and interact with our customers.
We may also disclose your personal data:
- if we buy or sell any businesses or assets, to the buyer or seller (or prospective buyer or
seller)
and/or their advisers; and
- if we are under a duty to disclose or share your personal data in order to comply with (and/or
where we
believe we are under a duty to comply with) any legal obligation, or in order to protect the
rights,
property or safety of our business, our customers or others. This includes, in specific cases,
sharing
information with law enforcement or regulatory agencies, or authorised third parties, in
response to a
verified request relating to a criminal investigation or actual or suspected violation of law,
misuse of
our website or breach of contract that may expose us and/or any customer or third party to legal
risks
or liability.
Additionally, where you have consented to cookies, we allow third parties such as
Google to
set Google Analytics cookies on your device to assist us with the improvement and optimisation of
our
website. Google Analytics cookies collect information such as items clicked on, web pages viewed and
any web
pages where users are encountering download error messages from time to time. Please see our Cookie
Policy to find out more about how we use cookies and other similar technologies (including
links to
further information provided by Google about their practices), and how to decline or disable them.
6. International transfers of personal data
The personal data we collect about you is stored by us on secure servers located within the European
Economic
Area (“EEA”) and processed by us in the UK.
In some limited cases, your personal data may, for the purposes set out in this Privacy Policy, be
accessed,
transferred or processed outside the EEA by or to our third party service providers. The countries
concerned may
not have laws which protect your personal data to the same extent as in the EEA. We are required by
applicable
data protection law to ensure that where we or our third party service providers access, transfer or
process
your personal data outside the EEA, it is treated securely and is protected.
We do this by ensuring that at least one of the following safeguards is implemented:
- EU-US Privacy Shield: We use MailChimp, which is based in the
United
States and processes your personal data in the United States. Pursuant to GDPR Article 45, your
personal
data is transferred by MailChimp to the United States on the basis of their self-certification
under the
Privacy Shield framework, which requires them to provide similar protection to personal data
shared
between the European Union and United States. For further details, see European
Commission: EU-US Privacy Shield.
- Standard data protection clauses adopted by the EU Commission: Pursuant to GDPR
Article
46(2), where required we use specific contracts approved by the European Commission, which give
personal
data the same protection it has within the EEA. For further details, see European
Commission: Model contracts for the transfer of personal data to third
countries.
Please contact us if you would like more information about the countries to which your personal data
is
transferred and the specific safeguards that are used to protect your personal data when it is
transferred
outside the EEA (see How you can contact us).
7. How long we keep your personal data for
We retain your personal data for no longer than is necessary for the purpose(s) for which it was
collected.
What this means in practice will vary between different types of data. When determining the relevant
retention periods, we take into account factors including:
- legal obligation(s) under applicable law to retain data for a certain period of time;
- statute of limitations under applicable law;
- the warranty period for any products you register with us;
- potential or actual disputes; and
- guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your personal data from our systems when it is no longer needed.
8. Your privacy rights
The table in this section below explains what rights you have with regard to your personal data.
These rights
are not absolute and are subject to certain exceptions and qualifications.
For more information about your rights or if you would like to exercise any of your rights, you are
welcome
to contact us using the contact details set out below under How
you can contact us.
Please note that if you ask us to stop using your personal data in a certain way or erase your
personal data,
and this type of use or personal data is required by us in order to facilitate your use of our
website or
services in any way, you may not be able to use our website or services as you did before. This does
not
include your right to withdraw your consent to receiving marketing communications from us, which you
can do
so at any time without restriction.
Privacy rights |
What does this mean? |
|
You have the right to be provided with clear, transparent and
easily
understandable information about how we use your personal data and your rights. This is
why we
provide you with the information in this Privacy Policy. |
|
You have the right to receive confirmation from us that your
personal
data is being processed, and where that is the case, obtain access to the personal data
that we
hold about you and certain other information (similar to that provided in this Privacy
Policy). |
|
You have the right to require us to rectify any personal data
that we
hold about you if it is inaccurate or incomplete. Please contact us if you believe that
any
personal data we hold about you is inaccurate or incomplete. |
|
This is also known as ‘the right to be forgotten’
and, in
simple terms, enables you to request the erasure of the personal data that we hold about
you
where:
- the personal data is no longer necessary for the purpose it was originally
collected/processed;
- you withdraw your consent (where consent was previously provided and required for us
to
process the data);
- you object to the processing, as long as there are no overriding legitimate grounds
for us
to continue the processing;
- we’ve been processing your personal data unlawfully, or
- your personal data has to be erased in order to comply with a legal obligation.
This is not a general right to erasure; there are exceptions. For example, we have the
right to
continue using your personal data if such use is necessary for compliance with our legal
obligations or for the establishment, exercise or defence of legal claims. |
- Right to restrict processing
|
You have the right to restrict further processing of your
personal data
where:
- you consider the personal data we hold to be inaccurate, in which case we have to
restrict
any processing while we verify the accuracy of your personal data;
- the processing we are carrying out is unlawful and you request us to restrict
processing,
rather than erasing your personal data;
- we no longer need the personal data, but you need it to establish, exercise or
defend a
legal claim; or
- we are considering our legitimate interests for processing your personal data to
which you
have objected.
When processing is restricted, we can still store your personal data, but may not process
it
further without your consent (unless processing is required in connection with legal
claims, to
protect another person’s rights or on important public interest grounds). |
- Right to data portability
|
You have the right to obtain and reuse the personal data that we
hold
about you in a structured, commonly used and machine-readable format, and (where
technically
feasible) to have such information transmitted to another "data controller",
where:
- this is personal data you provided to us (i.e. not any other information);
- we are processing such data on the basis of your consent or to perform a contract
with you;
and
- the processing is carried out by automated means.
|
- Right to object to processing
|
You have the right to object to processing in the following
circumstances:
- where the processing of your personal data is based on our legitimate interests.
However, If
we can show compelling legitimate grounds for processing your personal data which
override
your interests, rights and freedoms, or we need your personal data to establish,
exercise or
defend legal claims, we can continue to process it. Processing of your personal data
will be
restricted while we make this assessment. Otherwise, we must stop using the relevant
personal data; or
- where your personal data is processed for direct marketing purposes (including
profiling
related to such direct marketing).
|
- Right to withdraw consent to processing
|
If you have given your consent to us to process your personal
data for a
particular purpose (for example, to send you marketing communications), you have the
right to
withdraw your consent at any time (although if you do so, it does not mean that any
processing
of your personal data up to that point is unlawful). |
- Right to make a complaint to the data protection authority
|
You have the right to make a complaint to the Information
Commissioner’s
Office (ICO) if you are unhappy with how we have handled your personal data or believe
our
processing of your personal data does not comply with applicable data protection law.
The
contact details of the ICO are set out below under How
you can contact us.
|
10. Children’s personal data
We do not knowingly collect personal data from children under the age of 16. If you become aware that
your
child or any child for which you have parental responsibility has provided their personal data to us
without
your consent, please contact us using the contact details set out above under How you can contact
us.
11. Links to other websites
Our website may, from time to time, contain hyperlinks to third party websites or other websites
operated by
H. Young (Operations) Limited. This Privacy Policy does not apply to your use of those other
websites. We
encourage you to read the privacy statements on the other websites you visit, as they will govern
the use of
any personal data you provide when visiting those websites.
12. Changes to this Privacy Policy
This Privacy Policy was last updated on 24/05/2018.
This Privacy Policy may be updated from time to time. We will post the updated terms on our website
and,
where appropriate, we will notify you of the changes, for example by an email notification. We
recommend
that you check this page from time to time to ensure that you are aware of and understand any
changes.