RibRide is committed to keeping your personal data safe and ensuring the security of any personal data we may process, in compliance with the 2018 General Data Protection Regulation (GDPR).
This statement explains;
- Who the Data Controller is.
- How we collect and process your personal data.
- Our legal bases for processing your data.
- Who your data may be shared with.
- Your rights under the General Data Protection Regulation (GDPR).
The Bookings Manager at RibRide is the Data Controller for RibRide and has responsibility for the company’s handling and processing of personal data.
We keep the amount of personal data collected, stored, and used, to data that is relevant, adequate and absolutely necessary for carrying out our business.
Date collection and the processing of personal data from www.ribride.co.uk
We collect personal data in the following ways;
Newsletters - It is voluntary for those who visit the website to provide personal information in connection with services, such as receiving newsletters.
Contact forms - When visitors fill in forms on the website, we collect data shown in the contact form. We also collect the visitors IP address and browser user agent string to help spam detection.
Bookings - In the operation of the e-commerce element of our website, all personal information is stored on servers operated by the supplier of our e-commerce – Bookeo. Transactions are performed with Clover and SagePay. Only RibRide, Bookeo, Clover and Sagepay have access to the information collected.
Website analytics – This website uses google analytics to gather anonymous information about visitors to our website. This is used to further develop information offered and to improve the customer experience.
Our legal basis for processing your personal data
We will only process your data where we have a legal basis for doing so.
Contractual obligation – To fulfil our contractual obligation to you, for example, we will need to process your personal data to process any purchases you make.
Consent - When you book an activity and share your personal information, we believe you have given consent to receive newsletters from us. You may unsubscribe from these at any time.
Legitimate interest - We may use your personal date for our legitimate business interest to provide you with the best customer service, to provide a service that is tailored to you and to improve the quality of information we provide customers. For example, we may rely on our legitimate interest to process your personal data for the following purposes;
- Marketing communications related to previous purchases you have made with us
- Customer service communications as part of the purchase process
- To obtain feedback about our customer service and activities
- To enhance, modify, personalise or otherwise improve our services and communications for your benefit.
- To register applicable course certificates with the Royal Yachting Association (RYA)
- To meet our wider legal obligation, such as those of our grant funders
Who your data may be shared with
We may share your personal data with approved third-party providers that have data measures in the place that align with the requirements of GDPR. For example
- Our payment providers
- Our newsletter provider
- The RYA certificate registration hub
We do not purchase, or handle data received from third parties and we do not use automated decision making and/or user profiling.
You can request, in writing, a copy of the personal information we hold about you.
We take reasonable steps to keep your information accurate, but you can also ask us to change any information we hold about you, to keep it accurate, complete, and current.
You have the right to ask us to delete the personal information we hold on you.
Where our processing of your information is performed on the basis of ‘legitimate interest’, you can request we stop.
If you are dissatisfied with our use or management of your personal information, you have the right to complain to the relevant Data Protection Supervisory Authority. In the UK this is the Information Commissioners Office (ICO). You can contact them via their website www.ico.org.uk.
We will only keep your personal data for as long as necessary for the purposes for which it was first gained. Personal data will be retained for the purposed outlined in this policy and where we have a legal basis for doing so.
Who we are and how to contact us
Synergy Yachting Ltd t/a RibRide
Address: RibRide, Water Street, Menai Bridge, Anglesey, LL59 5DE
Phone +44 (0) 333 1234 303