THE JAGS FOUNDATION PRIVACY NOTICE
The Jags Foundation (‘TJF’) is committed to protecting and respecting your privacy and we make it our highest priority to safeguard the confidentiality of all personal information you provide to us.
This Privacy Notice sets out the approach that we take to the handling your personal data. Please read it to understand how we protect the information you provide to us.
Information that we collect from you
We collect and retain personal information in relation to all TJF members specifically name, home address, email address and details of the subscriptions received. We also collect personal bank details via an Application Program Interface (‘API’) on our website with our partner GoCardless under a service agreement and payment card details via a similar agreement with our partner Stripe. Whether or not you provide us with this kind of information is always entirely under your control.
We also collect and retain personal information in relation to individuals who sign-up to receive informational emails from us. This is confined to their name and email address, and maintained on Mailchimp. You can request to unsubscribe from this mailing list, and to have your information removed at any time.
We may also collect information about your usage of our website but we do so at an aggregated level and not in a manner that allows you to be identified personally.
In order to minimise the impact on your privacy, we will never knowingly collect more data than is strictly necessary to perform the activities described in this notice.
Use of your information
Your information is used to:
- Allow us to collect payments from you as a member of TJF as instructed by you;
- Maintain a register of members for corporate purposes;
- Allow us to administer any member benefits schemes that may be introduced;
- Allow us to contact you from time to time to keep you updated with TJF affairs; and
- Better understand and protect our interests as a member organisation by allowing us to track membership trends at an aggregated level.
Processing your information
We process your personal data in a manner compliant with the General Data Protection Regulation (‘GDPR’).
Our legal basis for processing your data is that:
- We are required to do so as per your instruction under a contract (for example, for collecting monthly subscription amounts) or
- We have a legitimate interest in processing the information (for example, maintaining a register of members)
Disclosure of your information
We may occasionally pass aggregated information on the usage of our website to third parties for research purposes, but this will never include information that can be used to identify you.
We may share your information with certain third-party data processors for the purposes of one or more of the uses specified above, but always under strict terms of service which ensure that your data remains protected. The third-party data processors we may use are:
- Royal Bank Of Scotland and Virgin Money UK (the providers of our banking services)
- Beacon Apps (our membership database provider)
- GoCardless (our direct debits facilitator)
- Stripe Payments UK (our card payment facilitator)
- 41 Sports Media (our website hosts)
- Partick Thistle FC Ltd (the Football Club)
- Rocket Science Group LLC (trading as Mailchimp)
Unless required or permitted to do so by law, we will not otherwise share, sell or distribute any of the information we hold without your prior and relevant consent.
We do not transfer any data to parties located outside the United Kingdom or European Economic Area (‘EEA’).
Security and data retention
We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We make the confidentiality and security of your information our highest priority and we limit access to it to only those TJF directors or appointed officials who need to come into contact with it in order to fulfil their duties.
Although we always do our best to protect your information, the transmission of information via the internet can never be completely secure and we are therefore unable to guarantee the security of the information which you share with us at your own risk.
We will retain your information for a reasonable period, or for as long as the law requires (whichever period is longer).
All information is retained on secure servers or on encrypted and password protected devices.
Notification of a data breach
We take the matter of protecting your data very seriously. In the event that we become aware of a data breach which we conclude has a high risk of adversely impacting your individual rights and freedoms we will seek to inform you and the relevant authority within 72 hours of becoming aware of the essential facts.
Cookies are useful as they can quicken up the web journey for you and can also allow a website to recognise a user’s device.
Our tracking cookies collect information about how you browse and use our website, what pages you visit, how you entered the site and where you left it. This data is anonymous and not specific to you yet helps us to make improvements to your web experience by identifying pages where more visitors may be exiting the website or where visitors may be struggling to find necessary information.
Managing your cookies
You will be able to use the Help menu bar on most browsers to get information on how to block or prevent cookies. This will give you information on how to disable cookies altogether, however it should be noted that this may stop some functions on websites.
Accessing your personal information
You are legally entitled to request at any time:
- To view the personal data we hold about you;
- To request that we do not process your personal data in the manner described above;
- To request that we do not share your personal information with any third-party processor in the manner described above;
- To request that we correct or update any information held about you that you do not believe to be accurate; or
- To request that we permanently delete any personal information we hold relating to you.
Where you wish to make such a request, our preference is that you submit it in writing, along with proof of your identity, to:
The Jags Foundation
80 Firhill Road
with the envelope marked for the attention of Graeme Cowie, Company Secretary/Data Controller.
Whilst this is our preferred method of contact, you are legally entitled to contact us via any communication channel. We will aim to respond without undue delay and in any event within 30 days of receipt of your request.
Any changes to our privacy notice in the future will be posted to the website and, where appropriate, through e-mail notification. If you have any further questions or issues around our privacy notice, please contact us by e-mail here.
In the event that you wish to make a complaint or raise an issue with the processing of your data by TJF you can do so by contacting the Information Commissioner’s Office (‘ICO’) via the report a concern section of their website here.