1.

Who are we?

1.1

We are Etch Rock Limited.We own and operate this site.Our contact details are on the site. Please contact us if you have any questions or feedback about this policy.

1.2

We are Etch Rock Limited.We own and operate this site.Our contact details are on the site. Please contact us if you have any questions or feedback about this policy.

2.

What's the point of this policy?

2.1

This policy tells you how we deal with your "personal data" (i.e. technical term for information about any identified or identifiable living person). Please read on to find out what kinds of personal data we collect, how we use and protect it, to whom we disclose it and how you can access and rectify it.

2.2

Please do not use our site unless you are completely happy with this policy. If you do use our site, we will assume that you do accept it.

3.

Might the policy change?

3.1

It may well do and so you should check it whenever you visit our site.We will assume you agree to the revised policy if you use the site after the effective date shown at the top of the policy.

4.

What personal or other data do we collect?

4.1

We collect and store the information which you give us via forms on our site - such as your name, email address and activity preferences - or when communicating with us by email or in some other way. If you sign up for an event, you may be asked to give additional information which may include sensitive personal data such as relevant medical history.

4.2

We may receive and store certain information automatically when you interact with us. Examples include the internet protocol (IP) address used to connect your computer to the internet, connection information such as browser type and version, your operating system and platform, device-type, a unique reference number linked to the data you enter on our system, login details, the full URL clickstream to, through and from our site (including date and time), cookie number, activity on our website including the pages you visited and searches you made.

5.

What about cookies?

5.1

We use cookies. A cookie is a small file of letters and numbers that we put on your computer. Our site's functionality will be limited if you do not accept cookies.

5.2

Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the site owner or others. Session cookies are temporary cookies that remain in the cookie file of your browser only until you leave the site. Theyallow websites to link your actions during a browser session. Persistent cookies stay in the cookie file of your browser for longer (though how long will depend on the lifetime of the specific cookie). For further information on cookies, including how to use your browser to block them, visit: www.allaboutcookies.org.

5.3

Cookies are used on this site for the following purposes:

1. Session cookies: We use session cookies to enable the website to keep track of your movement from page to page and store your selections so you do not get asked repeatedly for the same information. These cookies allow you to proceed through many pages of the site quickly and easily without having to authenticate or reprocess each new area you visit.
2. Log-in cookies: If you select the "remember me" option, we use persistent cookies (up to 600 days) to remember your details and speed up your log-in when you return to our site.
3. JustGiving cookies: If you link your JustGiving account to your account on our website, a persistent cookie (up to 30 days) is placed on your computer which allows you to log in to your JustGiving account while using our service without having to re-enter your details.
4. Google Analytics("GA") cookies: Google sets persistent cookies (up to two years) to recognize and count the number of site visitors as well as providing other information about the visit such as duration, route through the site and what sites the visitor came from. This information helps us to improve the way our site works, for example by making sure users find what they need easily. Click here for more information about GA cookies. Click here to opt out of Google Analytics.
5. Google Universal Analytics ("UA"): We may also use UA (an enhanced version of GA). UA uses a persistent cookie (up to two years) and similar technologies to collect the kind of analytics information about your visit mentioned above. Click here for more information about security and privacy in UA. UA collection methods can be used to collect visitor usage data without cookies. We do not connect information about your visit with any other data that we hold about you and we do not upload to Google any data that allows Google to personally identify you.
6. Cookie warning cookie: This cookie takes note of whether you are happy to accept cookies on this website based on your response to the message which appeared when you first visited the site. This persistent cookie will remember your preference for up to 30 days. If you changed your mind click here to reset cookie policy, or here to decline.

5.4

By continuing to use our site, having seen our cookie notice, we assume that you consent to use of the cookies outlined above.

6.

How do we use your personal data?

6.1

We use your personal data to provide our services eg send service messages, process payments and/or fulfil orders.

6.2

We use your personal data to help us communicate with you effectively should you try to contact us via our site.

6.3

If you have given permission on our site, we may use your personal data (including details of your activity preferences) to send you emails (or other communications such as mail, phone or SMS) with details of our or third party goods or services which may be of interest to you including information about special offers or promotions.

6.4

We may add to your profile or otherwise send or make available to you details of other users' events relevant to your activity preferences.

6.5

We may use personal data to recognize you when you visit or return to our site to track anonymised traffic and usage patterns, to prevent or detect fraud or abuses or to help us improve our site.We may use cookies to do this. See above.

6.6

If you supply us with a third party email address for a "Refer A Friend" or similar offer, we will use that email address only to transmit the referral message and we will then immediately delete it.

6.7

We retain personal data from closed accounts in order to comply with legal obligations, enforce our terms and conditions, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations and take other actions as permitted by law.

6.8

We may access, remove, alter, store or otherwise use any personal dataif we have reason to believe that it breaches our terms and conditions, or that such steps are necessary to protect us or others, or that a criminal act has been committed, or if we are required to do so by law or appropriate authority.

7.

How do we protect personal data?

7.1

Security is a high priority. We take appropriate precautions to protect personal data.

7.2

Email and other electronic communications are not secure if they have not been encrypted. Your communications may pass through servers in a number of countries before they reach us. So we donot accept responsibility for any unauthorised access to or loss of personal data that stems from a cause beyond our control. Nor can we be held responsible for the actions or omissions of other users or third parties who may misuse your personal data which they collect from the site.

8.

To whom do we disclose personal data?

8.1

Payment details including credit card numbers are supplied direct to our payment partner mentioned on our site. We do not receive such information. To ensure your details are not being used without consent, your personal data may be supplied by our payment partners to relevant third parties including credit reference and fraud prevention agencies, who may keep a record of that information.

8.2

When you sign up for an event, we will supply your personal information to the event organiser (including sensitive personal data such as relevant medical history).

8.3

Very important: We may allow access to your personal data by third parties who supply us with a service. Examples include e-commerce platform providers, website hosts and businesses which assist us in undertaking communications or monitoring our site.

8.4

Very important:

1. Any information which you enter into your profile (including your name and age, photo and posts on your profile) as well as information in your public and private event pages will be available to and searchable by users of our site.
2. Your public event pages will be displayed or linked to from various locations on our site including on public event boards and on the profiles of others who have expressed an interested in the relevant activities.
3. Information in your public events pages can be reproduced on their own event pages by other users who join the event.
4. Your public and private event pages, or links to them, will be displayed or made available to your followers. Any other user of the site is entitled to follow you.

8.5

We may disclose personal data so far as reasonably necessary:

1. if we have reason to believe that it breaches our terms and conditions, or that such steps are necessary to protect us or others, or that a criminal act has been committed, or if there has been a complaint about content posted by you, or if we are required to do so by law or appropriate authority; or
2. in the case of an actual or proposed(including negotiations for a)sale or merger or business combination involving all or the relevant part of our business.

8.6

We may store or transfer personal data outside the European Economic Area (EEA) for the purposes stated in this policy. If so, we will of course comply with the applicable laws relating to data transfer outside the EEA.

8.7

Except as otherwise specifically included in this policy, this document addresses only the use and disclosure of information we collect from you. If you disclose your information to third parties, whether they are other users of our site or other websites (such as JustGiving), different rules may apply to their use or disclosure of your information.

9.

How can you access and rectify personal data?

9.1

You can access and rectify your personal data by contacting us by the means shown on our website. We may charge an administration fee in line with data protection laws.

1.

Who are we?

1.1

We are Etch Rock Limited. You can contact us at security@etchrock.com. Other contact details are on our website.

2.

What’s the point of this policy?

2.1

It tells you what to expect when we collect your personal information. Please only use our service if you are completely happy with this policy.

2.2

Generally, the policy covers only information provided to us. If you give personal information to other people, such as payment providers or other websites, please check their privacy policies.

2.3

NB Note that personal information of participants collected by event organisers, which is principally their responsibility. We act as data processors of this information on their behalf. Please contact them if you need more information.

3.

Might the policy change?

3.1

NB Note that personal information of participants collected by event organisers, which is principally their responsibility. We act as data processors of this information on their behalf. Please contact them if you need more information.

4.

What do we collect?

4.1

Information which you upload to our service or otherwise give us such as your name, contact details, dob, gender and profiles and other photos.

4.2

Information which event organisers opt to collect from you when you book tickets for an event via our service. This may include sensitive personal information such as relevant medical history. (We collect this information as data processors on behalf of event organisers.)

4.3

Automated information such as the internet protocol (IP) address used to connect your device to the internet, connection information such as browser type and version, information about your device including device-type and device identifier, operating system and platform, mobile network data, a unique reference number linked to the data you enter on our system, login details, clickstream data, details of your activity with date / time stamps including pages you visited and your searches / transactions.

4.4

If you log in via Facebook or Strava: Information from your public profile, your email address and your friends list.

5.

What’s our reason / legal basis for collecting the information?

5.1

Because it’s necessary to provide you with our goods or services under our contract with you. We may use it for other purposes (such as email marketing) if you consent. In the case of automated information collected when you browse your site, we use this to manage and improve our service in accordance with our “legitimate interests”.

6.

What about cookies?

6.1

We and/or third parties use cookies and other tracking technologies on our website. A cookie is an identifier (a small file of letters and numbers) that is sent to your computer. Our website’s functionality will be limited if you configure your browser to reject cookies.

6.2

Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the website owner or others. Session cookies are temporary cookies that remain in the cookie file of your browser only until your browser is closed. They allow websites to link your actions during a browser session. Persistent cookies stay in the cookie file of your browser for longer (how long will depend on the lifetime of the specific cookie). For further information on cookies, including how to use your browser to block them and how to delete cookies already stored on your device, visit: www.allaboutcookies.org.

6.3

The following kinds of cookies may be used on this website:

1. a) Session cookies: These enable us to keep track of your movement from page to page and store your selections so you do not get asked repeatedly for the same information. They allow you to proceed through many pages of the site quickly and easily without having to authenticate or reprocess each new area you visit. For example, a session cookie remembers your shopping cart selection so you will have the items you selected when you are ready to check out.
2. b) Etch Rock system cookies: Persistent cookies (up to one years) remember your profile, timezone, shopping cart and other information to facilitate our service if you log back in..
3. c) Log-in (“remember me”) cookies: Persistent cookies (up to 600 days) remember your details and speed up your log-in when you return to our website.
4. d) Third party log-in cookies: If you log in through a third party website, that website will place its own cookies on your computer. For more information, please visit the relevant pages on third party sites as follows: Facebook. Strava.
5. e) JustGiving cookies: If you link your JustGiving account to your account on our website, a persistent cookie (up to [insert] days) is placed on your computer which allows you to log in to your JustGiving account while using our service without having to re-enter your details.
6. f) Google cookies: Persistent cookies (up to four years we believe) are set in connection with the following Google services on our site and these cookies may involve certain non-personally identifying information being sent to Google:
7. 1. i) Google Analytics (“GA”): We use cookies to recognise and count the number of website visitors as well as providing other information about the visit such as duration, route through the website and what sites the visitor came from. This information helps us to improve the way our website works, for example by making sure users find what they need easily. You can specifically opt out of GA here. See below for other opt out routes.
   3. ii) Google Universal Analytics (“UA”): We may also use UA (an enhanced version of GA). UA uses a persistent cookie (up to two years) and similar technologies to collect the kind of analytics information about your visit mentioned above. Click here for more information about security and privacy in UA. UA collection methods can be used to collect visitor usage data without cookies. We do not connect information about your visit with any other data that we hold about you and we do not upload to Google any data that allows Google to personally identify you
   5. More information and opt out: Click here for Google’s privacy policy and here for more information about the kinds of cookies placed by Google. Click here for information about how Google uses data from its partners’ sites or apps as well as different ways to opt out of Google cookies.
8. g) Social media cookies: We use various social media and other third party features on our website including the “Like” button from Facebook, follow button from Twitter), Plus +1 button from Google, Pin It button from Pinterest, share / follow button from LinkedIn, embed button from YouTube, These features may involve the relevant companies using persistent cookies (for at least four years we believe) or linking your visit with cookies previously placed by them on your computer in order for them to collect information relating to your visit to our website or your interaction with their services or otherwise. Click the links shown above for further information about the specific features and those companies’ cookie / privacy practices generally as well as to opt out where this is possible.
9. h) Cookie-warning cookie: This cookie takes note of whether you are happy to accept cookies on this website based on your response to the message which appeared when you first visited the website. This persistent cookie will remember your preference for up to 30 days.

6.4

By continuing to use our website, having seen our cookie notice, we assume that you consent to use of the cookies outlined above.

7.

What do we do with personal information?

7.1

Provide our service, e.g. send service messages and fulfil orders.

7.2

Send you marketing messages, if you have given permission. You can withdraw permission at any time as explained on our service or by emailing us at the above email address.

7.3

Use it to recognise you when you visit or return to our service to track anonymised traffic and usage patterns, prevent or detect fraud or abuses and help us improve our service.

7.4

If you make available to us someone else’s email address, e.g. if you log in via Facebook, to send a referral message to that person and we will then immediately delete it.

8.

How long do we keep it?

8.1

We will generally delete your personal information when you close your account. However, we may keep some limited information for up to six years after your account is closed - for tax reasons and/or to help deal with any disputes. That timeframe may vary if we are legally required to keep information for a particular period.

8.2

We will delete personal information of event participants after 30 days following closure of the event organiser’s account.

8.3

We will keep your information which we use for marketing until you tell us to stop sending you marketing messages.

9.

To whom do we send or make available your personal information?

9.1

To other people who supply us with a service, e.g. e-commerce platform providers, website hosts, content delivery networks and businesses which help us send communications or monitor our website.

9.2

To Mailchimp (see privacy policy) and Hubspot (see privacy policy), if event organisers opt to use those services (via our platform) to enable them to email or otherwise communicate with you.

9.3

To event organisers who opt to collect your personal information via our platform.

9.4

To other users of our service, if you create a public profile or otherwise include the personal information in a post, comment or other public action on our service. You have the option of hiding your profile and profile information. However, to remove information placed on the site such as comments and posts, you will need to delete your account.

9.5

To the relevant authorities or complainants, if we think the personal information breaches our terms and conditions, or it is necessary to protect us or others, or that a criminal act may have been committed, or we are required to do so by law or appropriate authority.

9.6

To potential buyers so far as reasonably necessary, in the case of an actual or proposed (including negotiations for a) sale or merger or business combination involving all or the relevant part of our business.

10.

What happens to your payment details?

10.1

These go direct to our payment partners. We do not receive such information. To ensure your details are not being used without consent, our payment partners may send your personal information to relevant third parties including credit reference and fraud prevention agencies, who may keep a record of that information.

11.

Do we send your information outside the European Union?

11.1

Your personal information which we collect is stored within the EU and is not transferred to any third countries except that your name and contact details may be transferred to the US by Mailchimp and/or Hubspot, both of which are certified under the EU-US Privacy Shield Framework. This provides certain safeguards in relation to the handling of your personal data. See here for more information.

12.

What rights do you have?

12.1

If the legal requirements are met: To ask us for access to your personal information, to rectify it if there are mistakes, to delete or restrict or object to its use in certain circumstances or to “data portability”.

12.2

If you have a complaint about how we are dealing with your personal information, please contact us via the email address above. If you are not happy with our response or think we are not handling your personal information in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).

12.3

For more information about your rights, visit the ICO’s website: www.ico.org.uk.

1.

Who are we?

1.1

We are Etch Rock Limited. You can contact us at security@etchrock.com. Other contact details are on our website.

2.

What’s the point of this policy?

2.1

It tells you what to expect when we collect your personal information. Please only use our service if you are completely happy with this policy.

2.2

Generally, the policy covers only information provided to us. If you give personal information to other people, such as payment providers or other websites, please check their privacy policies.

2.3

NB Note that personal information of participants / donors / fundraisers is collected by event organisers / charities, who are the “data controllers”. We act as data processors of this information on their behalf. Please contact them if you need more information.

3.

Might the policy change?

3.1

Yes. We will post any new version on our website (please check whenever you visit the site) and also notify you by email, SMS, in-app message or otherwise. We will assume you agree to the new version of the policy if you use our site or app after its effective date.

4.

What do we collect?

4.1

Information which you upload to our service or otherwise give us such as:

a) your name and contact details;

b) other information provided when you register with us such as date of birth and gender;

c) details about your transactions on our service;

d) information included in your profile, such as photos, as well as posts, reviews or which you otherwise provide for display on our service or which you include in messages sent via our service;

e) contact or other information which you give or allow us to use for newsletters or other marketing; and

f) your communications with us.

4.2

Information contained in Gift Aid forms or which event organisers / charities opt to collect from you when you book tickets for an event or make a donation via our service. This may include sensitive personal information such as relevant medical history. (We collect this information as data processors on behalf of event organisers / charities.)

4.3

Automated information such as the internet protocol (IP) address used to connect your device to the internet, connection information such as browser type and version, information about your device including device-type and device identifier, operating system and platform, mobile network data, a unique reference number linked to the data you enter on our system, login details, clickstream data, details of your activity with date / time stamps including pages you visited and your searches / transactions.

4.4

If you log in via Facebook or Strava: Information from your public profile, your email address and your friends list. If you make available to us someone else’s email address for “refer a friend” or similar, we will send a referral message to that person and we will then immediately delete it.

5.

What’s our reason / legal basis for collecting the information?

5.1

Because it’s necessary to take steps at your request to enter into a contract with you and/or to perform such a contract, e.g., send service messages, process payments and fulfil orders. This applies to initial enquiries and to contact and transaction details as well as to location information and profiles and other information which you provide for public display on our service. it.

5.2

Because it’s in our “legitimate interests”, e.g., to manage and improve our service including tracking usage patterns and preventing or detecting fraud or abuse. This applies to automated usage data. it.

5.3

Because you’ve specifically agreed on our service (e.g, by ticking a consent box). This applies to contact or other information which you give or allow us to use for newsletters or other marketing. You can withdraw permission at any time as explained on our service or by emailing us at the above email address.

6.

What about cookies?

6.1

We and/or third parties use cookies and other tracking technologies on our website. A cookie is an identifier (a small file of letters and numbers) that is sent to your computer. Our website’s functionality will be limited if you configure your browser to reject cookies.

6.2

Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the website owner or others. Session cookies are temporary cookies that remain in the cookie file of your browser only until your browser is closed. They allow websites to link your actions during a browser session. Persistent cookies stay in the cookie file of your browser for longer (how long will depend on the lifetime of the specific cookie). For further information on cookies, including how to use your browser to block them and how to delete cookies already stored on your device, visit:www.allaboutcookies.org

6.3

We ourselves place the following types of cookies:

Type of cookies	Purpose
Logged-in status	Assess whether you are logged in to our site
“Remember me”	Remember you and speed up your login when you return to our site
Authentication	Identify and authenticate you to help you move easily through the site
Preferences	Store information about the preferences you’ve selected (e.g. favourites, currency, wishlists) and personalise the site
Shopping cart	Remember contents of your cart and related preferences
Affiliate	Track whether you have visited us from websites affiliated with us so we can pay affiliates and assess the effectiveness of the affiliate links
Security	Provide security-related features to protect our site, for example to help stop fraudulent logins
Cookie notice	Store your response to our cookie notice

6.4

Companies which provide us with a service also place cookies. Some of these cookies (e.g. from Google) may involve certain information, such as your IP address and web address of the page you’re visiting, being sent to the company concerned. Below is a summary of the kinds of cookies used together with details about who places them and where you can go to get more information and to opt out (where possible):

a) Analytics cookies: These kinds of cookies recognise and count the number of website visitors as well as providing other information about the visit such as duration, route through the website and where the visitor came from. This information helps us to improve the way our website works, for example by making sure users find what they need easily. These cookies are provided by:

• Google Analytics (“GA”). More:

- general information about the types of cookies placed by Google including analytics

- a technical explanation of GA cookies

- Google’s use of its partners’ data including how to control information collected by Google

- how to specifically opt out from GA cookies

- Google’s privacy policy

b) Social media cookies: These kinds of cookies are placed by social media companies when you use their features on another site, for example if you play embedded audio or video, click a Facebook “like” or sent a tweet. These features may involve the relevant companies using cookies to collect information relating to your visit to our website or your interaction with their services or otherwise. Click the following links for further information including how to opt out where this is possible: Facebook , Twitter ,Google Plus,LinkedIn,Pinterest,Instagram, YouTube

c) Payment provider cookies: Our payment provider may place cookies if you use their payment services on our site:

- Stripe’s privacy policy

- Square’s privacy policy

d) Third party log-in cookies: If you log in through a third party website, that website will place its own cookies on your computer:Facebook. Strava

7.

How long do we keep your personal information?

7.1

Until your account is closed or our contract with you has otherwise ended.

7.2

We may hold on to some of your information for longer (typically up to six years) if reasonably needed for legal, regulatory or tax reasons, deal with disputes, prevent fraud or abuse and/or enforce our terms and conditions.

7.3

We will delete personal information of event participants after 30 days following closure of the event organiser’s account. (Please liaise with event organisers about this as they are the “data controllers” of this information.)

7.4

We will keep your information which we use for marketing until you tell us to stop sending you marketing messages.

8.

To whom do we send or make available your personal information?

8.1

To other people who supply us with a service, e.g. e-commerce platform providers, website hosts, content delivery networks and businesses which help us send communications or monitor our website.

8.2

To Mailchimp (seeprivacy policy) Hubspot (see privacy policy) or SecretSource Marketing (see privacy policy ), if event organisers or charities opt to use those services (via our platform) to enable them to email or otherwise communicate with you.

8.3

To event organisers / charities who opt to collect your personal information via our platform.

8.4

To HMRC, in the case of Gift Aid information.

8.5

To other users of our service, if you create a public profile or otherwise include the personal information in a post, comment, donation or other public action on our service. You have the option of hiding your profile and profile information. In the case of donations, you can hide your name / image so that you cannot be publicly identified. To remove information placed on the site such as comments and posts, you will need to delete your account.

8.6

To the relevant authorities or complainants, if we think the personal information breaches our terms and conditions, or it is necessary to protect us or others, or that a criminal act may have been committed, or we are required to do so by law or appropriate authority.

8.7

To potential buyers so far as reasonably necessary, in the case of an actual or proposed (including negotiations for a) sale or merger or business combination involving all or the relevant part of our business.

9.

Do we send your information outside the European Union?

9.1

Your personal information which we collect is stored within the EU and is not transferred to any third countries except that your personal information may be transferred to the US by the following companies certified under the EU-US Privacy Shield Framework , which provides certain safeguards for your personal information: Google (analytics), Mailchimp and Hubspot (email delivery) and the social media companies referred to above.

10.

What rights do you have?

10.1

If the legal requirements are met: To ask us for access to your personal information, to rectify it if there are mistakes, to delete or restrict its use in certain circumstances or to “data portability” or to withdraw any consent you’ve given (e.g. marketing).

10.2

You may also have the right to object to use of your personal information in certain circumstances.

10.3

If you have a complaint about how we are dealing with your personal information, please contact us via the email address above. If you are not happy with our response or think we are not handling your personal information in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).

10.4

For more information about your rights, visit the ICO’s website: www.ico.org.uk.