OpenPlay Data Protection and Privacy Policy

SECTION 1 - INTRODUCTION

OpenPlay (OP) is a technology platform that connects people who want to participate or be coached in sport with coaches and venues.

This is our data protection and privacy policy. It tells you how we collect and process data received from you on our site. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

OP is committed to the protection of your personal information in accordance with the principles set out in the Data Protection Act 2018 ('the act'), The Data Protection Act 2018 is the UK's implementation of the General Data Protection Regulation (GDPR).

These principles require that personal data which we hold must be:

• Processed fairly and lawfully
• Processed for limited purposes and in an appropriate way
• Adequate, relevant and not excessive for the purpose
• Accurate
• Not kept longer than necessary for the purpose
• Processed in line with data subjects' rights
• Secure.

Here are the details that we have to provide as a 'data controller':

Our site address is: www.openplay.co.uk and www.openplay.net
Our company name is: Openplay Ltd
Our registered address is: 111 Victoria Road, London, CR4 3JD

Tel: 0800 086 2006
Web: www.openplay.co.uk
Email: [email protected]

SECTION 2 - WHAT DO WE DO WITH YOUR INFORMATION?

When you interact with our site or purchase something from our site, we collect the personal information you give us such as your name, mobile number and email address.

When you browse our site, we also automatically receive your computer's internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system and technical information regarding how you connect to our site.

We may collect and use personal information for the following purposes:

• To run and operate our site

  • We may need your information display content on our website correctly.

• To improve customer service

  • Information you provide helps us respond to your customer service requests and support needs more efficiently.

• To personalise user experience

  • We may use information in the aggregate to understand how our users as a group use the services and resources provided on our site.

• To improve our site

  • We may use feedback you provide to improve our products and services.

• To process payments

  • We may use the information Users provide about themselves when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.

• To send periodic emails

  • We may use the email address to send user information and updates pertaining to their order. It may also be used to respond to their inquiries, questions, and/ or other requests.

SECTION 3 - CONSENT

How do you get my consent?

When you provide us with personal information to complete a transaction, make a booking, amend or cancel a booking, fill out a form, respond to a survey, and in connection with other activities, services, features or resources we make available on our site we imply that you consent to our collecting it and using it for that specific reason only.

We will collect personal identification information from users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain site related activities.

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time by:

• Emailing us at

  [email protected]

• Mailing us at:

  Openplay Ltd, 1 E Poultry Ave, Clerkenwell, London EC1A 9PT

SECTION 4 - DISCLOSURE

We may disclose your personal information if we are required by law to do so.

SECTION 5 – AMAZON WEB SERVICES

Our site is hosted on Amazon Web Services. They provide us with the online infrastructure on which our e-commerce platform sits.

Your data is stored in private Amazon Web Services(AWS) SQL Server databases behind a secured firewall.

SECTION 6 - PAYMENTS

When you make a payment during the booking process to complete your purchase It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) and sent to third party payment gateways as chosen by our clients (Stripe, GoCardless, Civica Pay, PayPal, SagePay, Braintree and Pay360). Your purchase transaction data is stored on our servers for the purposes of client reconciliation.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard and American Express.

PCI-DSS requirements help ensure the secure handling of credit card information by our site and its service providers.

SECTION 7 - COOKIES

Our Site may use "cookies" to enhance your experience. Your web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about you. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, note that some parts of the site may not function properly.

List of cookies we collect
The table below lists the cookies we collect and what information they store.

COOKIE Name	COOKIE Description
cookies	This cookie is set when the cookie notification bar is closed.
[]_downloaded	This cookie is set when data is submitted via the download forms.
_ga	Google analytics cookie. Used to distinguish users.

SECTION 8 - THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy.

When you click on links on our site, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

External Third Parties

We may have to share your personal data with the parties set out below:

• Sports facility owners and/or managers acting as processors or joint controllers based in the UK and Ireland who provide the sporting facilities that you locate and/or reserve via our Site and/or Application.

• Service providers acting as processors based in the UK, Ireland and the US who provide IT and system administration services.

• Third parties who process information such as credit or debit card payments and provide support services related to payments for us.

• Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the UK who provide consultancy, banking, legal, insurance and accounting services.

• HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances.

• Organisations acting as joint controllers based in the EU who supplying funding to, and who pay our subscription fees on behalf of, sports facility owners and/or managers who provide the sporting facilities that you locate and/or reserve via our Site and/or Application

SECTION 9 - SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted through third party payment gateways using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 10 - SHARING YOUR PERSONAL INFORMATION

We do not sell, trade, or rent Users personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners and trusted affiliates. We may use third party service providers to help us operate our business and the site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

SECTION 11 - AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

SECTION 12 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our site is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

SECTION 13 - ACCEPTANCE OF THESE TERMS

By using this site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information please contact our

Privacy Compliance Officer at [email protected]

or through post to:

Openplay Ltd To the attention of: Privacy Compliance Officer Innovation Warehouse, 1 E Poultry Ave, Clerkenwell, London EC1A 9PT, United Kingdom

Last updated 28th November 2018