PRIVACY POLICY

Challenge Finder Ltd ("We") are committed to protecting and respecting your privacy. We are a limited company registered in England and Wales under company number 08950158 and have our registered office at 37 Far Street, Wymeswold, Loughborough, Leicestershire, England, LE12 6TZ.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.challengefinder.co.uk you are accepting and consenting to the practices described in this policy.

For the purpose of the Data Protection Act 1998 (the Act), the data controller is Challenge Finder Ltd of 37 Far Street, Wymeswold, Loughborough, Leicestershire, England, LE12 6TZ.

WHAT PERSONAL DATA DO WE HOLD?

Some examples of the type of information we may collect and hold about you are as follows:

  • Your full name and your title or an indication of the gender that you most closely associate with;
  • Birth date or alternatively a relevant age range;
  • Postal address;
  • Telephone number(s);
  • Email address;
  • Records of your correspondence with us;
  • Information you enter into our websites and digital products and details of how you use those websites and digital products (more details can be found in our cookie policy at https://www.challengefinder.com/frontend/cookiePolicy);

But we may also collect, hold and process other personal data where it is appropriate and relevant, for example:

  • Details of why you have decided to support/contact us and how you may have heard about us and the work that we do;
  • Details of how you would like to be involved and what you intend to do with the information we provide;
  • Personal data about you that will enable us to be more precise in what we send you or how we approach you; and
  • For purely business-related reasons, including managing relationships with third party and partner organisations.
  • We will only process sensitive personal data also known as special categories of data (eg. in relation to your health), with your explicit consent, for reasons of substantial public interests or where necessary for the establishment, exercise or defence of legal claims.

HOW AND WHY WILL WE USE THIS DATA

We will use your personal data to:

  • Provide you with other information which we feel may interest you. This may include newsletters, tips, updates, information in relation to fundraising campaigns, voluntary surveys or questionnaires for you to complete, details of relevant volunteering opportunities, and details of any promotions and competitions we are running.
  • Analyse and understand how people use our websites and digital products so we can improve and personalise the experience for users and reflect your preferences and previous interactions;
  • Keep a record of our relationship with you;
  • Improve how we communicate with you, how we fundraise, and how we operate more generally;keep in contact with you in the ways that you have requested or agreed to;
  • Personalise our services and communications to you.
  • Provide you with information about carefully selected third party events, products, campaigns and competitions, where we are permitted to do so;
  • Notify you about changes to our services;
  • Verify your identity where required to use some of our services and benefits;
  • Carry out any obligations or provide you with any other services, functionality or content which you specifically request or agree to.

WHAT LAWFUL BASIS DO WE RELY ON YOUR DATA

The legal bases that we rely on for processing your personal data are:

You have provided your consent to us using your personal data for a specific purpose:

We will ask for your consent to use your personal data to send you marketing emails and SMS.

You always have the right to withdraw your consent at any time.

It is necessary in connection with the performance of a contract with you:

Sometimes it is necessary to process your personal data so that we can enter into contractual relationships with you. For example, if you purchase an event, we will require your personal data to enable us to perform an carry out that agreement.

It is within our legitimate interests.

Applicable law allows personal data to be collected and used if it is reasonably necessary for our legitimate interests or a third party’s legitimate interests (as long as the processing is fair, balanced and does not unduly impact individuals’ rights). We will rely on this ground to process your personal data when it is not practical or appropriate to ask for your consent, and where we are confident that this will not impact your rights. This may include where we undertake research on individuals including before we proactively contact them.

Where you have provided your details to us, we may contact you by post and phone for certain marketing and fundraising activities as set out in section 5 below (but we will explain this to you at the point that we collect your details). You can opt out of this activity at any time by emailing us on [email protected]

When we process your personal data to achieve such legitimate interests, we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. We will not use your personal data for activities where our interests are overridden by the impact on you, for example where use would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).

HOW WE COLLECT PERSONAL DATA

We will collect and process the following data about you:

  • Information you give us. This is information about you that you give us by filling in forms on our site www.challengefinder.co.uk (our site) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, search for an Event, place an order on our site, participate in discussion boards or other social media functions on our site or enter a competition, promotion or survey and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph.
  • Information we collect about you. With regard to each of your visits to our site we will automatically collect the following information:
  • technical information, including, the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
  • information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), events you viewed or searched for', age response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any phone number used to call our customer service number.
  • Information we receive from other sources. This is information we receive about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data if we intend to share those data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies). We will notify you when we receive information about you from them and the purposes for which we intend to use that information.

COMMUNICATIONS AND MARKETING

We may contact you by post and telephone, and, where you have provided consent, by e-mail, to let you know about our events and activities. We provide the opportunity for you to opt-out from receiving our marketing communications every time we contact you.

You can opt-out from receiving our marketing communications, or update your contact preferences at any time by emailing: [email protected]

SOCIAL MEDIA TARGETING

If you are a social media user, we will use certain social media tools as part of our relationship with you. These tools include such things as Facebook and Instagram Custom/Lookalike Audiences, Google Customer Match/Similar Audiences, Twitter Tailored/Lookalike Audiences and LinkedIn Matched Audiences.

Through using these tools, we will provide some of your data to the social media platform / organisation to allow them to identify your social media profile with them. The social media platform / organisation will then show you relevant advertisements relating to Challenge Finder which we think you will be interested in seeing on your newsfeed.

The social media platform / organisation will also use your profile to identify those with similar characteristics to you who we think may also be interested in finding out more about Challenge Finder and the work we do. These identified individuals will then be shown advertisements about Challenge Finder and our partners on their newsfeed. This activity is governed by the social medial platform’s own privacy policy and terms and conditions, so please do refer to these documents if you require any further information about this activity.

DATA SHARING

We do not sell your information under any circumstances. We may from time to time share your personal data with third parties for them to use for marketing purposes or for us to use jointly with a third party where we are acting as your agent for an event booking. However, we will only ever do this where you have given us permission to do so or where we are carrying out joint research.

We work with service providers and other third parties who help us to operate and to provide and improve our information, products and services, and we may share information with them for this purpose.

Whilst we may allow our staff, consultants and/or external service providers acting on our behalf to access and use your personal data for the activities we have described in this policy (eg. to provide services or products to you, deliver mailings, to analyse data and to process payments), we only permit them to use it to deliver the relevant information, goods or services, and only if they apply an appropriate level of security protection.

We may need to disclose your personal data upon request to regulatory and government bodies as well as law enforcement agencies. We may also merge or partner with other organisations and in so doing, acquire or transfer personal data but your personal data would continue to be used for the purposes set out above.

The personal data we collect from you may be transferred to, shared and/or otherwise processed by organisations or companies outside the European Economic Area (“EEA”). Where your personal data is transferred outside the EEA, we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data (for example, by entering into EU Commission approved standard contractual clauses).

Unfortunately, the transmission of personal data via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to or via our websites and digital products; any transmission is at your own risk. If you have any questions about the international data transfer of your personal data, please contact us using the details below in section 12.

CHILDRENS DATA

We may collect and manage personal data about children in some circumstances, such as where children participate in events through Challenge Finder, or have requested to receive certain communications from us, such as newsletters. Those aged under 13 are not permitted to receive our newsletters, or enter any competitions or prize draws with us. We will not knowingly have any other direct contact with those aged under 13.

Where consent is required to process children’s personal data and the child is under 13 years, where appropriate we shall seek consent from a parent or guardian, or shall ensure such consent is in place before any data is shared with us. We shall only hold personal data about children that is absolutely necessary for the purpose of the event/programme that they are applying for or participating in.

Where a parent or guardian gives consent on behalf of a child, we may contact that child after their 16th birthday, to check if they wish to maintain their relationship with us.

HOW WE KEEP YOUR PERSONAL DATA SAFE AND WHO HAS ACCESS TO IT

We are committed to ensuring that there are appropriate technical controls in place to protect your personal data including protection from misuse and unauthorised access. For example our network is protected and routinely tested.

Your information is only accessible by staff, volunteers and contractors who are bound by appropriate policies and procedures to protect your information

YOUR RIGHTS

Please note that you may only use/ benefit from some of the following rights in limited circumstances. For more information, we suggest that you consult guidance from the Information Commissioner’s Office (ICO) – https://ico.org.uk/for-organisations/guide-to-the-general-data-protectio... - or please contact us using the details below.

Right to restrict processing:

In certain circumstances as outlined in the ICO guidance referred to above, you have a right to require us to stop processing your personal data in a particular way.

Right to erasure:

You have the right to request that your personal data is erased from our records in certain circumstances.

Right of access:

You have a right to ask for a copy of the personal data we hold about you. If you want to access your personal data, please send a description of the personal data you want to see and proof of your identity by post to The [email protected]

Right to rectification:

We also want to make sure that your personal data is accurate and up to date. Please let us know if your details change. You may also ask us to correct or remove personal data which is inaccurate.

Right to data portability:

In certain circumstances you have a right to data portability which means we will provide you (or a third party you nominate) with your personal data in a structured, commonly used and machine-readable format.

DATA RETENTION

We keep personal data for as long as there is a need to keep it in connection with the purposes for which it was collected. We may keep your personal data after a particular matter or exchange has concluded but purely for record keeping purposes and to be able to respond to queries. In some cases, we are also obliged to retain your personal data to comply with legal or statutory obligations (for example, to keep records of contractual or financial matters).

Whilst the specific time periods vary depending on the circumstances, in general we will not keep records that include personal data for more than 10 years after a particular matter or exchange has concluded. In the event that you ask us to stop sending you marketing communications, we will retain certain details, such as your name and email address, but only to ensure that you are not contacted again.