1. What Personal Data Do We Collect?
We collect various types of information when you interact with us, including:
- First name, last name, title, date of birth, and gender.
- Residential address, email address, mobile number, and details of the device you use.
- Bank account and payment card details, as well as details about payments to and from you.
- Identification documents such as passport, driving license, and any other documents provided for ID purposes.
Social Media Data
- Your social media handles.
- Preferences for receiving marketing and communication preferences.
- Details of support and other queries raised with us.
- Collected from analytics providers such as Google, based inside or outside the EEA.
- Contact data for your friends, contacts, and family for making or receiving payments/assets.
- Information collected when sending gift payments to non-account holders.
2. How We Use Your Information and Our Lawful Bases
Under GDPR and UK GDPR, we process your information based on the following lawful bases:
- Obtained before sending marketing communications related to Right Choices Corn Maze or third parties.
- Processing certain information to fulfill transactions, provide products and services, and manage your account.
- Processing and retaining Financial Data in line with financial and tax regulations.
- Processing data such as Social Media Data, Support Data, Technical Data, Transaction Data, Usage Data, and Profile Data for various purposes, including assessing app usage, managing relationships, providing support, and conducting analytics to improve our services.
3. Who Do We Share Your Information With?
We share your information with Right Choices Corn Maze group companies and third-party service providers. Some of the key partners include CIFAS, Amazon Web Services (AWS), UK and European Banks, and third-party cloud computing service providers. We ensure third parties treat your data with utmost security and adhere to our instructions.
4. How We Store Your Information and for How Long
Your information is securely stored in the cloud. We retain your data for as long as necessary to fulfill the purposes we collected it for, considering legal, regulatory, tax, accounting, or reporting requirements. We delete data held electronically at the end of the retention period.
5. Your Rights
- You have the right to request copies of your personal information.
- You can ask us to rectify incomplete or inaccurate information.
- You can request the erasure of your personal information under specific circumstances.
Restriction of Processing
- You can ask us to restrict the processing of your information under certain conditions.
Objection to Processing
- You have the right to object to the processing of your personal data.
- You can request the transfer of your information to another organization in certain circumstances.