This policy explains the what, how and why of the information we collect when you visit our website, or you join our Club. It also explains the different ways we use and disclose that information. We want to make it clear that we
take your privacy extremely seriously. We will never sell your data for sales or marketing purposes.

If we make changes to this notice, we will notify you by updating it on our website. Royals Netball Club will be what is known as the ‘Data Controller’ of the personal data you provide to us, and we will sometimes refer to ourselves
in this notice as “we” or “us”. By Data Controller, this means Royals determines the purposes and way in which any personal data is, or will be, processed.

In the following sections we aim to answer any questions you have, but if we do not, please do get in touch.

What information do we collect, when and why?

When do we collect your personal data? −
• When you interact with any of our websites, social media or apps.
• When you contact us by any means with enquiries, complaints, purchases, phone calls, emails etc.
• When you enter prize draws, competitions or choose to complete a survey or form.
• When you book any kind of appointment or meeting with us, attend matches or training sessions or book to attend an event.
• When you’ve given a third-party permission to share with us the information they hold about you.
• We collect data from publicly available sources, when you have given your consent to share information or where the information is made public.

What sort of personal data do we collect? −
Depending on how you engage with us we will require some if not all the following information on you and your children: -
• Full Name
• Address
• Contact Numbers
• Email Address
• Web Cookies (see Cookie policy)
• Payment Card information
• Bank Details
If you have paid membership fees using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information.
To undertake website personalisation, we will gather information about the devices you use to access our sites (desktop and mobile), and this may include IP address.

How do we use your information?

− What are the General Data Protection Regulations (GDPR) ?
The GDPR set out a number of reasons for which a company may collect and process your personal data, including:
• Contract / Membership - your personal information is processed in order to fulfil a contractual arrangement such as renewing a Membership.
• Consent – where you explicitly agree to us using your information in this way.
• Legitimate Interests - this means the interests of Royals in managing our Club to allow us to provide you with the best service in the most secure and appropriate way.
• Legal Obligation – where there is statutory or other legal requirement to share the information.

Who we share your information with and why

Royals do not disclose any personal information obtained about you to third parties except when we need to in order to complete a transaction, for example, England Netball.
Royals works with a number of trusted partners and businesses such as kit suppliers, England Netball, and Tournament Organisers.

Some examples of the categories of third parties with whom we share your data are:
Supplier Partners
Royals works with partners who supply products and services on our behalf. All partners will only hold the minimum amount of personal information needed to fulfil the orders you place or provide a service on our behalf.
Netball Partners
Royals works with England Netball and other Netball Pathway Organisations to affiliate, ensure the right insurances and progress Players accordingly.
Marketing Companies
Royals works with marketing companies who help us manage our electronic communications.
Payment processing
Royals works with trusted third-party payment processing providers in order to securely take and manage payments.

How long we keep your information

We know how much data security matters to you. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it.

If we collect your personal information, the length of time we retain it is determined by several factors including the purpose for which we use that information and our obligations under other laws.

• The regulations require us to hold your personal information for a longer period or delete it sooner.
• You exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the GDPR policy.
• We bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further
appeals are possible; or
• In limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

What are your rights?

You are entitled to request the following from Royals, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
• Right of access –to request access to your personal information and information about how we process it.
• Right to rectification –to have your personal information corrected if it is inaccurate and to have incomplete personal information completed.
• Right to erasure (also known as the Right to be Forgotten) – to have your personal information erased.
• Right to restriction of processing – to restrict processing of your personal information.
• Right to data portability - to electronically move, copy or transfer your personal information in a standard form.
• Right to object - to object to processing of your personal information.
• Rights with regards to automated individual decision making, including profiling –rights relating to automated decision making, including profiling.

If you have any general questions about your rights or want to exercise your rights, please contact us.

You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.

Contact
Should you need any clarification or wish to make a request, please contact any of the Committee members detailed in the ‘Contacts’ section of the website quoting Security and Privacy Enquiry.