2.1 Types of data / Privacy policy scope
“Personal Data” means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped together below. Not all of the following types of data will necessarily be collected from you but this is the full scope of data that we collect and when we collect it from you:
- Profile/Identity Data: This is data relating to your first name, last name, gender, date of birth.
- Contact Data: This is data relating to your phone number, addresses, email addresses, phone numbers.
- Marketing and Communications Data: This is your preferences in receiving marketing information and other information from us.
We do not collect any Special Categories of Personal Data about you (this includes detailsabout your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation,political opinions, trade union membership, information about your health, and geneticand biometric data). Nor do we collect any information about criminal convictions andoffences.
2.2 The Legal Basis for Collecting That Data
There are a number of justifiable reasons under the GDPR that allow collection and processing of Personal Data. The main avenues we rely on are:
- “Consent”: Certain situations allow us to collect your Personal Data, such as whenyou tick a box that confirms you are happy to receive email newsletters from us, or‘opt in’ to a service.
- “Contractual Obligations”: We may require certain information from you in orderto fulfil our contractual obligations and provide you with the promised service.
- “Legal Compliance”: We’re required by law to collect and process certain types ofdata, such as fraudulent activity or other illegal actions.
- “Legitimate Interest”: We might need to collect certain information from you to beable to meet our legitimate interests - this covers aspects that can be reasonablyexpected as part of running our business, that will not have a material impact onyour rights, freedom or interests. Examples could be your address, so that we knowwhere to deliver something to, or your name, so that we have a record of who tocontact moving forwards.