Last updated: 15 October 2019
We want to provide a safe and secure user experience. We will ensure that the information you submit to us, or which we collect, via various channels (including our websites, our mobile app, through written correspondence (including e-mail), or through any of our offline sites), is only used for the purposes set out in this Policy.
Right to Object: You have a legal right to object at any time to:
(i) use of your personal information for direct marketing purposes; and
(ii) processing of your personal information which is based on our legitimate interests, unless there are compelling legitimate ground for our continued processing
1. Age requirements Our website and mobile app are designed partly for children. As such, we are aware of the need to be extra cautious when processing personal information.
If you are under 13 years old, you may only use the website and/or mobile app if you have the consent of, or are supervised by, a parent or guardian.
We do not knowingly collect personal information directly from children under 13 years of age. If you are under 13 years old, please do not provide any personal information to us.
Where we do collect data about under 13s, we anticipate and assume that in most cases this will be from a parent or guardian. For example, in respect of our website, we ask parents or guardians to give us the child's name, age and personal information to facilitate their visit to Father Christmas. In respect of our mobile app, there is a specific childrens' area, and a separate parent and guardians' area, with these areas separated by an age-gate mechanism. The only area of the mobile app in which anyone can enter personal information is the parent and guardians' area.
Notwithstanding the above, children have the same rights over their data as adults (for details see Section 6 below).
2. Information we may collect from you
2.1 We may collect and process the following information about you:
2.1.1 Information that you upload directly when you register on our website (eg, to hear about tickets): Name and email address;
2.1.2 Information that you upload directly to your profile page reached by logging into the website: Names of your guests, personal information provided for the purpose of personalising your visit to Father Christmas;
2.1.3 Information that you upload directly when you make a purchase on our website: Name, address, email address, payment information, first names of child guests, purchase history;
2.1.4 Information that you provide to us at our offline site: personal information provided for the purpose of personalising your visit to Father Christmas
2.1.5 Correspondence, or a record of it, should you contact us;
2.1.6 Information about cookies when you use our website (please refer to the section on Cookies below); and,
2.1.7 Statistical information that is collected by Google Analytics, the App Store and Google Play about how you used our website and/or mobile app.
3. How we use your information
3.1 We use information held about you in the following ways:
3.1.1 to provide our website and/or mobile app;
3.1.2 to ensure that our website and/or mobile app is presented in the most effective manner for you and for your computer or device;
3.1.3 to identify you when you use our website and/or mobile app;
3.1.4 to answer your questions and improve our website and/or mobile app;
3.1.5 to notify you about changes to our website and/or mobile app;
3.1.6 to provide you with updates and other information about special offers and new features of our website and/or mobile app; and
3.1.7 for marketing purposes (including sending you promotional information about third parties) where you agree to this. You can unsubscribe from marketing messages at any time. If you change your mind about us processing your personal information for marketing purposes, please contact us by email: email@example.com.
Credit card numbers are used only for payment processing and are not retained for other purposes.
We will not use or share the personally identifiable information provided to us online in ways unrelated to the uses described in this Policy.
4. The legal basis for processing your information
4.1 Under GDPR, the main grounds that we rely upon in order to process personal information of uses of our websites and clients are the following:
4.1.1 necessary for entering into, or performing, a contract – in order to perform obligations that we undertake in providing the website and/or mobile app to you, or in order to take steps at your request to enter into a contract with us, it will be necessary for us to process your personal data;
4.1.2 necessary for compliance with a legal obligation – we are subject to certain legal requirements which may require us to process your personal data. We may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency;
4.1.3 necessary for the purposes of legitimate interests - either we, or a third party, will need to process your personal data for the purposes of our (or a third party's) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected. Our legitimate interests include responding to requests and enquiries from you or a third party, optimising our website, mobile app and customer experience, informing you about our products and services and ensuring that our operations are conducted in an appropriate and efficient manner;
4.1.4 consent – in some circumstances, we may ask for your consent to process your personal data in a particular way.
5. How we share your information
5.1 We may share your personal information with third parties in the following circumstances:
5.1.1 for marketing purposes where you consent to this;
5.1.2 to other members of LaplandUK's group of companies, our partners and service providers for the purpose of: managing or administering certain aspects of our website, for analytics purposes and to help us develop new services;
5.1.3 to protect the rights, property or safety of us or other website and/or mobile app users;
5.1.4 where we are obliged, or permitted, to do so by applicable law, regulation or legal process;
5.1.5 if we (or substantially all of our assets) are acquired by a third party, in which case personal information held by us about our users will be one of the transferred assets; or
5.1.6 By sending aggregated information about how users use the website to third parties (eg, Google Analytics, the App Store or Google Play)..
Where we store your information
5.2 We take appropriate organisational and technical measures to protect your personal information that we hold. We limit access to your personal information to those who we believe reasonably need to come into contact with that information in order to carry out their jobs.
5.3 The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by persons operating outside the EEA who work for us, one of our associated companies or a third party engaged by us. To the extent that any personal information is provided to third parties outside the EEA, or who will access the information from outside the EEA, we will ensure that approved safeguards are in place, such as the standard contractual clauses approved by the European Commission or the EU/US Privacy Shield.
5.4 Given that the internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our website and any transmission is at your own risk.
5.5 We will retain your information for as long as is necessary to fulfil any of the services we provide or to comply with applicable legislation, regulatory requests and relevant orders from competent courts.
5.6 We will store certain categories of your personal information for the following periods of time:
Category of Personal Data
Storage time period
Personal data provided for visits to Father Christmas
Contact details from booking
6. Your rights on information we hold about you
6.1 You have certain rights in relation to personal information we hold about you, which can be exercised in accordance with applicable data protection laws including the GDPR. Details of these rights and how to exercise them are set out below. We will require evidence of your identity before we are able to act on your request.
6.2 Right of Access:
6.2.1 You have the right to access information held about you and you can ask us for a copy of the information at any time. Where we have good reason, and if the GDPR permits, we can refuse your request for a copy of your personal information, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.
6.3 Right of Correction or Completion:
6.3.1 If personal information we hold about you is not accurate, out of date or incomplete, you have a right to have the data rectified, updated or completed. You can let us know by contacting us via email; firstname.lastname@example.org
6.4 Right of Erasure:
6.4.1 In certain circumstances, you have the right to request that personal information we hold about you is erased e.g. if the information is no longer necessary for the purposes for which it was collected or processed or our processing of the information is based on your consent and there are no other legal grounds on which we may process the information.
6.5 Right to object to or restrict processing:
6.5.1 In certain circumstances, you have the right to object to our processing of your personal information by contacting us via email; email@example.com. For example, if we are processing your information on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests. You also have the right to object to use of your personal information for direct marketing purposes.
6.5.2 You may also have the right to restrict our use of your personal information, such as in circumstances where you have challenged the accuracy of the information and during the period where we are verifying its accuracy
6.6 Right of Data Portability:
6.6.1 In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used and machine-readable format. You can ask us to transmit that information to you or directly to a third party organisation.
6.6.2 This right exists only in respect of personal information that:
(a) you have provided to us previously; and
(b) is processed by us using automated means.
6.6.3 While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third party organisation's systems. We are also unable to comply with requests that relate to personal information of others without their consent.
6.7.1 You have the right to ask us not to process your personal information for marketing purposes. We will inform you, before collecting your personal information, if we intend to use your personal information for such purposes or if we intend to disclose your personal information to any third party for such purposes. We will only process your personal information for such purposes where you agree to such processing (eg, by checking certain boxes on the forms or registration pages we use to collect your information).
6.7.2 If you have previously agreed to us using your personal information for marketing purposes, you may change your mind at any time by contact us by emailing us at firstname.lastname@example.org. You will also be given the opportunity to unsubscribe when you receive marketing messages.
6.8 You can exercise any of the above rights by contacting us via email; email@example.com.
6.9 Most of the above rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.
6.10 To the extent that we are processing your personal information based on your consent, you have the right to withdraw your consent at any time. You can do this by contacting us via email; firstname.lastname@example.org.
7.3 All of the major browsers offer tips and guidance for managing the cookies available on your browser. There are also lots of different third party browser plug-ins and extensions available which you can download to make it easier to see and control your cookies.
7.4 You can find out more about internet advertising by visiting the following websites: http://www.allaboutcookies.org, www.yourchoicesonline.eu, and www.networkadvertising.org. Some of these sites enable you to opt out of online behavioural advertising and other tracking cookies (in addition to the control settings on your browser).
We may from time to time use third party advertisers or sponsors on our website and/or mobile app. In the event that we do so we will not disclose identifiable information about individuals but we may provide them with aggregated information about our users. We may also use such aggregated information to help advertisers reach the kind of audience they want to target (for example, men in London). We may make use of the personal information we have collected from you to enable us to comply with our advertisers' and sponsors' wishes by displaying their advertisement to that target audience.
10. Keeping your account secure
10.1 Where we have given you (or where you have chosen) a password which enables you to access certain parts of the website, you are responsible for keeping this password confidential and you are responsible for any misuse of such information. You must change your password on a regular basis and must not share your password with anyone.
10.2 You are solely responsible for the security and confidentiality of your account. Please ensure that you do not allow anyone else to access the website in your name and sign out after you have finished accessing your account.
10.3 You are responsible for all orders, and for the accuracy of all information, sent via the internet using your user ID, password or any other personal identification used to identify you on the website.
10.4 You will be liable to us for all orders or transactions placed by use of your user ID and password, even if such use might be wrongful. We will not be liable to you for any loss that you may incur as a result of misuse of your user ID and password, and we accept no liability resulting from its unauthorised use, whether fraudulent or otherwise.
12.1 If you are unhappy about our use of your personal information, you can contact us via email; email@example.com. You are also entitled to lodge a complaint with the UK Information Commissioner's Office using any of the below contact methods:
12.2 Telephone: 0303 123 11113
12.3 Website: https://ico.org.uk/concerns/
12.4 Post: Information Commissioner's Office
12.5 If you live or work outside the UK or you have a complaint concerning our activities outside the UK, you may prefer to lodge a complaint with your local supervisory authority.
13.1 If you have any enquiries or if you would like to contact us about our processing of your personal information, including to exercise your rights as outlined above, please contact us by any of the methods below. When you contact us, we will ask you to verify your identity.
Contact: Data Officer
Post: Eeko’s Barn
(This is our registered office)
© Copyright LaplandUK 2017. All right reserved.