What does this notice cover?
This notice describes how Stars to Heal (“it”, “we”, or “us”) will make use of your data when you access Stars to Heal Site, participate in Stars to Heal fundraising and draws, or contact us. We are the controllers for the personal data we collect in this context.
This notice also describes your data protection rights, including a right to object to some of the processing that Stars to Heal carries out for the Stars to Heal Site. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
What information do we collect?
We collect and process personal data about you when you interact with us or the Stars to Heal Site, and when you participate in our fundraising and draws. This includes:
o date of birth
o contact information, such as postal address, email address, and telephone number.
o your payment and delivery details for any purchase, including billing addresses and payment card details (note that your payment card details are processed by our third-party payment vendor);
o your marketing preferences, including any consents you have given us (where applicable);
o information related to the browser or device you use to access our Site;
o survey information such as shopping habits, age, gender, income, or other survey data you may choose to provide us if you participate.
o any personal data necessary to grant the prize (e.g., information included in any tax or ownership transfer documents or as part of necessary background checks);
o photographs, video recordings, and information when you choose to provide that information.
How do we use this information, and what is the legal basis for this use?
We detail below the purposes for which we use this information, how we use it and who we share it with, and the legal basis for that use.
At a high level, personal data may be shared with third party service providers, who will process it on behalf of Stars to Heal for various operational purposes (such as website hosting, maintenance, card processing services, email communication services, and the like).
Personal data of winners may be shared for purposes of fulfilling the prize, including as part of a necessary background check or as part of preparing any required ownership documents. With permission, personal data for winners may also be shared publicly on the Stars to Heal Site or other outlets, for the purposes of publicizing who won the draws, including names, photographs, and videos.
More specifically, we process personal data related to the Stars to Heal Site for the following purposes and legal bases:
o to verify your identity;
o to take payments;
o to communicate with you, including sending you automated service messages;
o to provide customer service;
o to draw winners; and
o to arrange the delivery or other provision of prizes for the winners of the draw.
o to provide products and services you have requested;
o to help us monitor, improve, and protect our products, content, services, and the Stars to Heal Site, both online and offline;
o to investigate and respond to any complaints received from you or from others, about the Stars to Heal Site or our products or services;
o where you have transacted with us, to send you direct marketing (e.g. email or text message) in relation to our current activities, future events and draws. You can opt out of this marketing (i) at the time of the collection of your details, (ii) by using the links within the marketing communications or (iii) by contacting us;
o to personalize the Stars to Heal Site, our products or services for you;
o to provide targeted advertising on the Stars to Heal Site, selected partner sites and social networks;
o to process payment card details, payments and check the validity of the sort code, account number and card number you submit in order to prevent fraud (which is processed by our third-party payment vendor);
o to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
o to provide the prize to winners.
o in connection with legal claims, compliance, regulatory, and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);
o to invite individuals to take part in market research; and
o in connection with those cookies and similar technologies that are strictly necessary to make the Stars to Heal Site function (which cookies we place in accordance with our Cookies Notice and the information provided to you when those technologies are used).
o where you have signed up to our mailing list, to send you direct marketing in relation to Stars to Heal products and services;
o in connection with surveys, where you choose to participate in those surveys and choose to provide us any information.
o in connection with cookies and similar technologies that are not strictly necessary for Stars to Heal Site to function, which technologies we may use to collect or receive information from your websites and elsewhere on the Internet and use that information to provide measurement services and target ads about Stars to Heal (as further described in our Cookies Notice) and the information provided to you when those technologies are used;
o in connection with photographs, video recordings and information about you if you win a draw and choose to provide that information; and
o to use on other occasions the data for the purpose that we explain at that time we seek your consent.
o In response to requests from government or law enforcement authorities conducting an investigation or courts
Please note that if you post a comment to the Stars to Heal Site or other social media sites, the information that you choose to post, including any personal data that you choose to post, may be available generally to the public.
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.
Please note that where information is transferred outside the USA or UK/EEA, and where this is to a vendor in a country that is not subject to an adequacy decision by the EU or USA Commission, this is done in order to enter you into the draw you have requested and to ensure your donation is processed and sent on to the relevant charity. In some cases, data may alternatively be adequately protected by EU and or USA Commission approved standard contractual clauses or a vendor’s Processor Binding Corporate Rules.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we do not have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.
To exercise any of these rights, you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an EU and or USA data protection authority where you live, work or where you believe a breach may have occurred.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at email@example.com
How long will you retain my data?
Where we process Stars to Heal account data, we do this for as long as you are an active user of Stars to Heal Sites and for 6 years after this.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with processing your contest entry, we keep the data for up to 6 years from your last interaction with us.