Privacy Policy
Company Shop Limited and Community Shop C.I.C. (we, us or our) delivers community-based events and services designed to support and improve wellbeing.
We are committed to protecting and respecting your privacy and this privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us through our mobile Application (the App), will be processed by us.
Who is responsible for your personal data?
Company Shop Limited is the data controller and is responsible for how your data is used within our App.
Company Shop Limited
Wentworth Industrial Estate, Tankersley, Barnsley, S75 3DH
Registered with the Information Commissioner with registration number: Z9117512.
Personal data we collect from you
Our App requires us to collect personal data from you to ensure we can provide you with the services you are requesting. The data we collect is categorised below:
Account Information
When you create an account on the App, we collect:
Name
Email address
This information is required to create and manage your account and use the App on your device(s).
Events and Attendance Data
When you register for and attend events through the App, we collect:
Events you register for
Attendance records (including QR code scans used to confirm attendance)
This allows us to manage event attendance and allow you to participate in the events you are selected as part of our service delivery.
Wellness Questionnaire Data
The App includes optional wellness questionnaires where we retain this data and make it available to a Community Wellbeing Practitioner for the purpose of providing tailored help and recommended activities to members.
Participation is entirely voluntary
We do not sell this data to other organisations.
Technical Data
We collect limited technical information necessary to operate the App;
Device type
Basic system information
We do not use this information to identify you or track your behaviour.
How do we collect your personal data?
We collect personal data in the following ways:
When you create an account on the App
When you register for or attend events
When you voluntarily complete questionnaires
When you interact with the App’s features
We do not collect personal data from third-party data brokers or external data sources.
How we use your personal data
Your personal data is required only as necessary for the Application to function. Any further information that is requested is voluntary. We use your personal data in the following ways:
to carry out our obligations arising from any contracts entered into between you and us, including providing access to the App and its features;
to allow you to register for and attend events;
to notify you about changes to our services;
to improve our services and develop new community programmes using anonymised data such as creating new events based on feedback.
To derive community metrics based on your responses to our wellbeing questionnaire
These answers are anonymised prior to its use and cannot be used to identify you or your personal circumstances.
Tracking, Analytics and Profiling
We do not currently use analytics tools, advertising SDKs, cookies, or similar tracking technologies within the App.
If this changes in the future, we will update this Privacy Policy and, where required, notify you and obtain your consent where legally required.
We do not use your personal data to carry out automated decision-making about you.
What is the legal basis for processing your personal data?
We rely on the following legal bases under UK GDPR:
Because processing is necessary for the performance of a contract with you
E.g. to provide you with access to the App and its functionality
To comply with our legal obligations
E.g. Mandatory statutory record keeping
Because processing is necessary for purposes of our legitimate interest or those of any third-party recipients that receive your personal data, provided that such interests are not overridden by your interests or fundamental rights and freedoms
E.g. improvement of our services within the Community Shop App.
Consent
where you voluntarily provide information through optional questionnaires
Where we store your personal data and transfers to third parties
All personal data you provide to us is stored within our secure infrastructure or through our trusted cloud based providers who are required to process your data in accordance with Applicable data protection laws.
We store and transfer your personal data in the following ways :
with trusted service providers who support the operation of the App (e.g. hosting providers);
We may share your personal data with any third party to whom we assign or novate any of our rights or obligations;
We may share your personal data with courts, law enforcement authorities, regulators or legal advisers or other parties where it is reasonably necessary for the establishment, exercise or defence of a legal or equitable claim, or for the purposes of a confidential alternative dispute resolution process;
We may also instruct service providers within or outside of our organisation, domestically or abroad, e.g. shared service or data centres, to process personal data for the purposes outline on our behalf and in accordance with our instructions only. We will retain control over and will remain fully responsible for your personal data and will use Appropriate safeguards as required by Applicable law to ensure the integrity and security of your personal data when engaging such service providers;
in connection with a business reorganisation, merger, or sale;
International transfers
Company Shop provides services to its customers exclusively in the United Kingdom. However we may transfer your personal data abroad if required to support How We Use your Personal Data as described above. This may include countries which do not provide the same level of protection as the laws within the European Economic Area. We will ensure that any such international transfers are made subject to Appropriate or suitable safeguards as required by the General Data Protection Regulation (EU) 2016/679. This includes entering into the EU Standard Contractual Clauses and UK IDTA contractual clauses.
When doing so we will comply with Applicable data protection requirements and take Appropriate safeguards to ensure the security and integrity of your personal data.
Data security and retention
We will take Appropriate technical and organisational measures to keep your personal data confidential and secure in accordance with our internal procedures covering the storage, disclosure of and access to personal data. Personal data may be kept on our personal data technology systems, those of our service providers.
We retain your personal data only for as long as necessary:
Account data is retained while your account is active
Event participation data is retained for operational purposes
Questionnaire data is anonymised and cannot be linked back to individuals
Your rights
You have the following rights under data protection law:
Right of access
Right of rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Rights in relation to automated decision making and profiling
Where processing is based on consent, you have the right to withdraw that consent at any time.
You can find out more about your rights under UK GDPR through the UK Regulator for data protection – the Information Commissioners Office (ICO).
If you wish to exercise any of the above rights, please send an email to sar@biffa.co.uk. We may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorised disclosure of data.
Contact and complaints
If you have any questions about this privacy policy or wish to exercise your rights, please contact:
centralhr@companyshop.ltd.uk or write to us at;
HR Director, Company Shop Limited, Wentworth Way, Wentworth Industrial Estate, Tankersley, Barnsley, S75 3DH.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Links
The App may contain links to third-party websites. These websites have their own privacy policies and we do not accept any responsibility or liability for them. Please review their policies before submitting any personal data.
Changes to our Privacy Policy
This policy may be updated from time to time. Any changes will be posted within the App.