Privacy Policy 25 May 2018

 

At North East 250 Ltd we respect and protect your privacy. 

Our commitment to you:

  • We will keep your data secure and not doing anything with your personal information that you wouldn’t reasonably expect
  • We will not share your data with third parties unless you agree
  • We will only use your data to tailor the information we provide you with and improve our services
  • You have the right to update, delete and access your data

 

We have updated our Privacy Policy to comply with GDPR and we may update it again from time to time so please check back for our latest, dated version.

Rules on processing data are explained in the General Data Protection Regulation (GDPR).  If you have any questions please contact enquiries@northeast250.com.

 

This privacy policy tells you:

  • What personal information the North East 250 collects about me
  • How and why do we use your personal data
  • When the North East 250 collect personal data 
  • How long we keep your personal data
  • Our legal basis for processing your personal data
  • Who we disclose your personal data to
  • What your rights are over your personal data
  • How you can stop us from using your personal data
  • Our digital services
  • Contact us directly

 

1. Who are we?

North East 250 Ltd is the data controller.  This means we decide how your personal data processed and for what purposes.

This privacy policy, combined with our website terms and conditions and cookie policy covers how we handle personal data.

 

2. What personal information the North East 250 collects about me

To respond to enquiries and complaints and to manage our relationship with you, the North East 250 may collect and process the following data about you:

  • Visitor Members

Identity information including your first name, last name and title

Contact information including your billing address, delivery address, email address and telephone numbers in order to process and dispatch your membership pack

Financial information such as credit/debit card information is processed via CardNet secure payment facility

Profile information including username and password

Communications information including your correspondence with us and any feedback you may provide us with

Technical information including your IP address

  • Business Members

Identity information including your first name, last name and title

Business contact information including business name, address, website address, email address, telephone numbers

Financial information such as credit/debit card information

Profile information including username and password

Communications information including your correspondence with us and any feedback you may provide us with

Technical information including your IP address

  • E-Newsletter Subscribers

To subscribe to our newsletter we collect your first and last name and email address 

We only collect this data when you have opted-in/consented to receive email marketing from the North East 250 

We retain this in a secure database

  • Merchandise Customers

Identity information including your first name, last name and title

Contact information including your billing address, delivery address, email address and telephone numbers in order to process and dispatch your order

Financial information such as credit/debit card information

Technical information including your IP address

 

3. When we will collect your data

We collect and process personal information directly from you when you provide this information to us by:

  • Purchasing a Visitor Membership, Business Membership or any merchandise on our website
  • When you sign up to receive our e-newsletter or complete an online survey
  • When you communicate with use via phone, email or via the website contact form
  • We also collect technical information when you use our website – please see our cookie policy for details
  • We do not collect data from anyone under the age of 16 and we will delete such data if we are informed that we hold it

 

4.  How long we will keep your personal data

We will only keep your data for as long as necessary and for the purposes for which we collected it.  The North East 250 adheres to a data retention policy as listed below.

 

Type of Data Details Purpose of Data Review Period Retention Period
Personal Details Name, address, title Handle orders, deliver items and process payments.  12 months 5 years
Contact Details Billing address, delivery address, email address, phone numbers Handle orders, deliver items and process payments.  12 months 5 years
Business Details Business address, website address, email address, telephone numbers Handle orders, deliver items and process payments.  12 months 5 years
Image Data Photographs taken with consent PR 12 months 5 years
Financial Data Payment details, transactional data Purchasing of memberships or merchandise and to comply with financial record keeping obligations 12 months 7 years
Technical Data IP address, login data, anonymised info from Google Analytics eg device used to access website, geographical location, how long spent on website Support online reporting and analytics as well as operational information 12 months 5 years
Marketing Data Preferences in receiving communications Marketing activity 12 months 5 years
Profile Data Feedback, survey responses To support reporting and development of services we provide 12 months 5 years

 

 

5. Legal basis for keeping your data

Our lawful basis for processing your general personal data is for the consent of the data subject in order to deliver your business or visitor membership, merchandise order, and continue to receive communication on news and updates from North East 250.

 

6.  Your rights

You have the following rights in relation to the personal information that we hold about you:

  • The right to request access to your personal information This enables you to request a copy of the personal information we hold about you and to check we are processing it lawfully
  • The right to request correction of the personal information we hold about you. This enables you to request that we correct any incomplete or inaccurate information that we hold about you
  • The right to request erasure of your personal information in some circumstances. This enables you to request that we erase your personal information where there is no good reason for us continuing to process it
  • The right to object to us processing your personal information. This enables you to object to us processing your personal information where we are relying on a legitimate interest and it impacts on your fundamental rights and freedoms
  • The right to restrict our processing of your personal information. This enables you to ask us to suspend the processing of your personal information in certain circumstances

More information on your legal rights and on lawful processing can be found on the ICO website.

 

7.  Who we disclose your personal data to

Your personal data is strictly confidential and will never be shared with any 3rd parties unless you have consented to do so

 

8. How you can stop us from using your personal data

Please contact enquiries@northeast250.com or call 07540523993 and we will erase your data securely and within one week of receiving your request.

 

9. Our digital services

  • Cookies

Like most websites, we may use “cookies” to help us make our site and the way you use it better. Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or smartphone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.

Cookies are small text files which are delivered onto your computer by websites that you visit. Our use of cookies is integral to both the current visitor experience and how we shape and grow our web-based services in the future.

Please see our Cookie Policy for details

  • Web Analytics

We use Google Analytics to to gather information about how people use our website.  

We do not store or collect personal information as such data is anonymised by Google.  

This information helps us investigate efficiency and effectiveness of our website, its users needs and how we can improve.

Website log files collect your IP address, when you visited the site and the pages you visited. An IP address is a numeric code assigned to a device based on your geographical location.

You may opt out of our use of analytics by visiting the Google Analytics opt-out page.

  • Social Media

When you use a social media platform and interact with North East 250, you do so by consenting to the terms & conditions of such platforms.  This can include Facebook, Twitter, Instagram, LinkedIn, Pinterest, YouTube and Google+.  For more information, please see their individual Privacy Polices.

If you use #NE250 or #UltimateRoadTrip or #HeartofScotland on any social media platform it gives us the right to repost and your post may potentially appear within our marketing materials.

  • E-Newsletter

To provide newsletters we require contact information including but not limited to first name, last name and email address.

We only collect this data with your consent and retain it on a secure database. To withdraw consent click unsubscribe or please contact enquiries@northeast250.com and your data will be securely removed from the database.

 

10. Contact us directly

If you have any questions or concerns regarding this privacy policy, would like further details on any of the information contained in this notice or would like to exercise your rights, please contact us via email: enquiries@northeast250.com or via telephone: 07540523993.

Contact the regulatory body via the ICO website.