We may share your personal data with third parties for the purposes referred to above, these include:

• our service providers
• tax, government and any relevant regulatory authorities
• prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims
• fraud prevention and/or law enforcement agencies
• third parties where we are required to do so by law

We require all organisations engaged by us to respect the security of your personal data and to treat it in accordance with the law.

Transfer of Your Personal Data Outside The UK

Your personal data may be transferred outside of the UK to trusted service providers and other third parties when necessary.

When we do this we require third parties to keep your personal data confidential and secure. We ensure that suitable protection is maintained at all times by ensuring that appropriate safeguards are in place.

RETAINING YOUR PERSONAL DATA

We keep personal data for as long as it is required by us to meet our legal or regulatory obligations and for the exercise and/or defence of any legal claims.

OPTING OUT OF MARKETING AND PREFERENCE UPDATES

If you no longer wish to receive direct marketing and updates from us, you can unsubscribe at any time by clicking on the link in the footer of any marketing email you receive from us or using the ‘unsubscribe from all’ link within the email preference centre accessible through the emails.

PROFILING

We do not engage in any profiling activities with your personal data.

AUTOMATED DECISION MAKING

We do not use any automated processes to make decisions about you which may produce legal or significant effects concerning you.

YOUR DATA SUBJECT RIGHTS

You have certain rights relating to the personal data we hold about you.

However, they may be subject to various exceptions and limitations.

These rights can be exercised by using the contact information in this privacy notice.

Your rights:

Right to be informed: We are obliged to provide clear and transparent information about our processing activities of your personal data.

Request access to your personal data (commonly known as a “data subject access request”): You have the right to understand what personal data we hold about you and why.

Request correction of the personal data: If you believe that we hold inaccurate or incomplete personal data, you have the right to request us to rectify or correct your personal data.

Request erasure of your personal data: You may ask us to delete or remove personal data where there is no good reason for us continuing to process it. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons

Request restriction of processing of your personal data: You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. You may exercise the right to restrict processing when one of the following conditions applies:

• the accuracy of the personal data is contested
• processing of the personal data is unlawful
• we no longer needs the personal data for processing but the personal data is required for part of a legal process
• the right to object has been exercised and processing is restricted pending a decision on the status of the processing

Right to Data Portability: You may request your personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.

Right to Withdraw Consent: You may withdraw consent at any time if we are relying on your consent to process your personal data. This won’t affect any processing already carried out before you withdraw your consent or processing under other grounds.

We may need specific information from you to help us confirm your identity.

MAKING A DATA PROTECTION COMPLAINT

If you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.

If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the Information Commissioner’s Office (ICO).