PRIVACY POLICY
1. WHO WE ARE AND IMPORTANT INFORMATION
Your privacy is very important to us, so Rainbow Hunting Limited (referred to as “the Company”, “us”, “we”, or “our” in this Privacy Policy) are committed to protecting and respecting your privacy.
What is the purpose of this Privacy Policy?
This Privacy Policy (together with our terms and conditions and any other documents referred to in them) sets out:
- The basis on which any personal data we collect from you on www.rainbowhunting.co.uk (“our website”) or that you otherwise provide to us will be processed by us
- Your rights in relation to that information when you visit our website (regardless of where you visit it from) and
- Our policies regarding the collection, use, and disclosure of personal data when you use our services and the choices you have associated with that data.
We use your data to provide and improve our site. You must read our Privacy Policy when you use our website so that you are fully aware of how and why we are using your data. By using the site, you agree to the collection and use of information in accordance with this policy. We may change or add to this Privacy Policy, so we encourage you to come back and read it periodically.
Data Controller
For the purpose of UK laws, the data controller is Rainbow Hunting Limited of PO Box 127, Wellington, Somerset TA21 1DD United Kingdom. If you have any questions about data protection, please contact us using the details set out at the end of this Privacy Policy.
Third party links outside of our control
Our website may include links to third party websites, plug-ins and applications. This Privacy Policy only applies to our website. Clicking on third-party links or enabling related connections may allow third parties to collect or share data about you. We do not control these third-party websites and we are not responsible for their privacy statements. Therefore, when you leave our website and use a link to another website, you should read the privacy policy of every website you visit.
2. PERSONAL DATA WE COLLECT ABOUT YOU
Personal Data, or personal information, is any information about an individual from which that person can be identified. You can find out more information about Personal Data from the Information Commissioners Office.
While using our site, we may ask you to provide us with certain Personal Data that can be used to contact or identify you. This Personal Data may include, but is not limited to:
- Identity Data – such as your first name, last name, user name, marital status, title, date of birth, gender and financial details (eg: bank account and payment card details).
- Contact Data – such as your billing address, delivery address, email address, telephone numbers and marketing preferences.
- Transaction Data – such as details of payments from you and products or services you have purchased from us.
- Aggregated Data – which is data that is aggregated for any purpose that does not reveal your identity, such as statistical or demographic data. Aggregated Data may be derived from Identity Data, Contact Data or Transaction Data but it is not considered Personal Data in law because Aggregated Data does not directly or indirectly reveal your identity. If we combine or connect Aggregated Data with Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy.
- Other data – we may also collect further, voluntary information from clients to enable us to provide our service in an optimized manner. This additional client data may include: sensitive information, goals and aspirations, business details, health related information etc.
If clients fail to provide Personal Data
Where we need to collect your Personal Data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
3. HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect data from and about you including:
Information collected directly
You may give us your Identity Data and Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:
- Complete forms on our website, such as subscribing to our mailing list or entering a competition or promotion
- Complete surveys which we may use for research purposes or to improve our website or company, although you do not have to respond to them
- Enter competitions, prize draws, promotions or surveys
- Purchase our products or services through transactions on our website
- Request marketing to be sent to you or give us feedback
- Contact us directly, in which case we may keep a record of that correspondence
Information collected automatically
Like many websites, we automatically collect data, such as your browsing actions or usage patterns that are collected by using cookies and similar technologies.
We and our service providers, such as Facebook, use cookies, web beacons and other technologies to receive and store certain types of information when you interact with us through your computer or mobile device. Using these technologies helps us recognize you, customize your experience and make relevant marketing messages. Please see our Cookie Policy for further details but for the avoidance of doubt, some of the types of information we collect includes:
- Log & Device data. When you visit our site, we may automatically record information (“log data”), including information that your browser sends whenever you visit our site. This log data may include your web address you came from or are going to, your device model, operating system, browser type, unique device identifier, IP address, mobile network carrier, and time zone or location.
- Cookie data. We may use “cookies” (a small text file sent by your computer each time you visit our site) or similar technologies to record log data. When we use cookies, we may use “session” cookies (that last until you close your browser) or “persistent” cookies (that last until you or your browser delete them). To help us make e-mails more useful and interesting, we often receive a confirmation when you open e-mail from us if your computer supports such capabilities. You can opt out of receiving emails from us. Please see the Your Legal Rights section below.
- Third party data. We may receive data about you from various third parties and public sources, such as Facebook, Instagram and Google Ads.
4. HOW WE USE YOUR PERSONAL DATA
We will only use your Personal Data when the law allows us to. Most commonly we will use your Personal Data that we collect about you in the following circumstances:
- Provide our Products and Services. We will use your information to provide our products and services to you, for example processing your Personal Data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
- Understand and improve our products. In the interest of conducting and managing our business to enable us to give you the best service or product, such as monitoring and efficiently managing the performance and operation of our business and contacting you after you request information to see if we can provide further assistance and information about events, and keep you informed of other services which might be of interest to you. We will perform such research and analysis about your use of, or interest in, our products, services, or content, or products, services or content offered by others to help make our products better and to develop new products. We consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- Communicate with you & responding to your requests. We may send you emails about new product features or other news about us or on topics we think would be relevant to you. To opt out of these at any time see the Your Legal Rights section below. We will also use your information to respond to your questions or comments and we may develop and display content and advertising tailored to your interests on our products and services on our site and on other sites. We may contact you to inform you about changes in our services, our service offering and other important service-related notices such as changes to the privacy policy or about security or fraud notices.
- Comply with a legal or regulatory obligation. This means processing your Personal Data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
Please note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your Personal Data. We do not rely on consent as a legal basis for processing your Personal Data, other than in relation to sending third party direct marketing communications to you via email or text message.
Marketing
We strive to provide you with choices regarding certain Personal Data uses, particularly around marketing and advertising.
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.
If you agree, we may send you information about our products and services by email. Where it is in our legitimate interests, we may send you information about our products and services by post. If you have consented to receive marketing, you may opt out at a later date and you have a right at any time to stop us from contacting you for marketing purposes.
We will get your express opt-in consent before we share your Personal Data with any company outside Rainbow Hunting Limited for marketing purposes.
5. WHO WE SHARE YOUR PERSONAL DATA WITH
Please note that we do not share your personal information with others except as indicated within this policy or when we inform you and give you an opportunity to opt out of having your personal information shared.
We will share your information in the following ways:
With internal third parties – such as our employees and staff who assist with providing products and services to you and who work for the company.
With external third-party service providers, agents, or contractors – we use other companies, agents or contractors (“Service Providers”) to perform services on our behalf or to assist us with providing services to you such as:
- Processing credit card transactions or other payment methods
- Providing services such as marketing, advertising, communications, infrastructure and IT services, to provide customer service, to collect debts, and to analyse and enhance data (including data about users’ interactions with our service)
- Professional advisers, such as our lawyers, bankers, auditors, financial advisors and insurers to the extent that they require access to the information to provide advice.
- Authorities and regulators such as HM Revenue & Customs and the Information Commissioner’s Office or any relevant regulatory authority who require reporting of processing activities in certain circumstances
- Relevant authorities if we believe that disclosure is reasonably necessary to comply with a law, regulation, legal or governmental request; to enforce applicable terms of use, including investigation of potential violations thereof; to protect the safety, rights, or property of the public, any person, or Rainbow Hunting Limited as required by law; or to detect, prevent, or otherwise address, security or technical issues or illegal or suspected illegal activities (including fraud).
- Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Privacy Policy. In the unlikely event that we or substantially all of our assets are acquired or enter a court proceeding, you acknowledge that such transfers may occur and that your personal information can continue to be used as set forth in this privacy policy.
These Service Providers may have access to your personal or other information in order to provide these functions. In addition, some of the information we request may be collected by third party providers on our behalf. We do not authorize them to use or disclose your personal information except in connection with providing their services.
We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party Service Providers to use your Personal Data for their own purposes and we only permit them to process your Personal Data for specified purposes and in accordance with our instructions. We do not sell your information to third parties.
Analytics
Specifically for analytics providers, we use Squarespace and Google Analytics which are web analytics services offered by Squarespace and Google that track and report website traffic. They use the data collected to track and monitor the use of our services. Google share this data with other Google services and they may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://www.google.com/intl/en/policies/privacy/. Google also recommend installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.
Advertising
We may use third-party Service Providers to show advertisements, which may include targeted advertisements on a third-party site after you have visited our website. We and the third-party service providers use cookies to inform, optimize, measure performance serve ads based on your previous visits to our site.
Please note at this time, we do not recognize automated browser signals regarding tracking mechanisms, which may include “do not track” instructions.
We work with Google AdSense & DoubleClick Cookie Google, as a third-party vendor, who use cookies to serve ads on our site. Google’s use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to our Service or other websites on the Internet. You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page: https://www.google.com/ads/preferences/.
Facebook
You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/516147308587266/. To opt-out from Facebook’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217. To see more about Facebook’s participation in the Digital Advertising Alliance please visit the Your Legal Rights section of this notice. For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation.
Payment Providers
We may provide paid products and/or services within the site. When we do, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their own privacy notice. The payment processors we work with adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
Our payment processor
The payment processors we work with is Stripe – please view their privacy policy here.
Links to Other Sites
We may have links on our site to other sites that we do not operate. If you click on a third-party link, you will be taken directly to that site which is governed by its own privacy notice. We strongly encourage you to read that privacy notice. We do not control that site and assume no responsibility for the content, policies or its practices.
Cookies
We may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer or device.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy.
Change of purpose
We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us through the contact details at the end of this Privacy Policy.
6. DATA SECURITY
We believe we use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use and modification. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know and they are subject to a duty of confidentiality.
Unfortunately, no measures can be guaranteed to provide 100% security and the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data and any transmission of your data is at your own risk.
7. DATA RETENTION
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
By law we keep basic information about our customers, including contact data, identity data and transaction data) for six years after the end of the relevant contract for tax purposes.
In some circumstances you can ask us to delete your data: see Your Legal Rights below for further information.
We may anonymise your Personal Data (so that it is no longer associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We may retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
8. YOUR LEGAL RIGHTS
Unless subject to an exemption under the data protection laws, you have the following rights with respect to your Personal Data:
- The right to access – you are entitled to request a copy of the Personal Data which we hold about you, this is known as a Subject Access Request.
- The right to request rectification – you can request that we correct any Personal Data we hold about you if it is found to be inaccurate or out of date.
- The right to erasure – you can ask us to delete your Personal Data under certain circumstances where it is no longer necessary to retain such data.
- The right to object and to restrict processing – you can object or request that we restrict the processing of the information that wehold about you, for example where processing is based on our legitimate interests but we may be legally entitled to continue processing the data.
- You have the right to data portability for the information you have provided to us – you can request that we provide you with your Personal Data and where possible, to transmit that data directly to another data controller where applicable. You can request to obtain a copy of this information in a commonly used electronic format so that you can manage and move it. We will need to verify your identity before being able to respond to such requests.
Further details of these rights can be found on the Information Commissioner’s website.
We will endeavour to keep your information accurate, however, if at any time it becomes out of date, please notify us directly and we shall remove or amend the information within a reasonable time frame and in accordance with legislative requirements.
If you wish to exercise any of the rights set out above, please contact us via the contact details at the end of this Privacy Policy.
Opting out
We aim to take reasonable steps so you can correct, amend, delete or limit the use of your Personal Data. You have the following choices:
- E-mail. As described above, if you do not wish to receive promotional e-mails from us or third parties, you may opt out at any time by following the opt-out links on any marketing message sent to you or by writing to us directly by email at emma@rainbowhunting.co.uk or by post to the PO Box address at the end of this Privacy Policy. Where you opt out of receiving marketing messages, this will not apply to Personal Data provided to us as a result of any product or service purchase. Please note that if you ask us to remove you from our marketing list, we may keep your personal details on an “opted-out” list in order to ensure that we do not market to you again.
- Cookies. Your browser’s help function should contain instructions on how to set your computer to accept all cookies, to notify you when a cookie is issued, or to not receive cookies at any time.
- Advertising. You can opt out of online targeted advertising by opting out within the advertisement itself or by visiting Digital Advertising Alliance, http://www.aboutads.info/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe https://www.youronlinechoices.eu/. You can also opt out of the Digital Advertising Alliance using your mobile device settings.
- Accessing your Personal Data. You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that the Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
- Our policy on children’s information. Our site is not directed to children under 16. If you learn that your minor child has provided us with personal information without your consent, please contact us.
9. CHANGES TO THIS POLICY & DUTY TO INFORM US OF CHANGES
Please note that we may process your Personal Data without your knowledge or consent in compliance with the above rules, where this is required or permitted by law and we may change this policy from time to time. We reserve the right to revise and amend this Privacy Policy from time to time.
Any changes we may make to this Privacy Policy in the future will be posted on this page and you should therefore review it regularly. If you continue to visit our site after those changes are in effect, you agree to the revised policy. If the changes are significant, we may provide more prominent notice or get your consent on the new policy.
It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us by emailing us on the email address at the end of this Privacy Policy.
10. CONTACTING US
If you have any questions or comments about this Privacy Policyor the information we hold about you please contact us via email at emma@rainbowhunting.co.uk or in writing to Rainbow Hunting Limited, PO Box 127, Wellington TA21 1DD.
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint, so that we can try to resolve it for you.
Last updated: 30 June 2022