It is important that you read this entire Policy. By submitting an application to join the indu committee (the “Committee”), you are confirming that you have read and understood this Policy.
We might need to change parts of this Policy from time to time. Where these changes are important, we will do our best to let you know. However, please make sure that you check this Policy regularly.
Are you under 13?
You should wait until you have turned 13 before you apply to join the Committee.
However, we realise that sometimes we might collect personal information about children who are not 13 yet. If you haven’t turned 13 yet, please ask your parents or guardians to read this Policy with you.
Who are we?
We are indu Cosmetics Limited. You can contact us by:
Post at 71-75 Shelton Street Covent Garden, London, WC2H 9JQ;
E-mail at email@example.com
Telephone at 020 7843 9017
We are the ‘controller’ of your personal information which we collect from you. This means that we choose why and how we process your personal information.
What is personal information?
Personal information includes information about a person who can be identified from that information.
Common types of personal information include your name, e-mail address, telephone number or age.
How is your personal information collected?
Information you provide to us.
We collect information you provide to us when you apply to join the Committee, contact us, or provide us you’re your ideas or feedback. This information includes:
- your name (and your parent’s name if you’ve submitted an online application);
- your or your parent’s e-mail address;
- your postal address;
- other information about yourself which you include in your application;
- any videos or images of yourself or anyone else you share with us;
- your ideas and feedback which you provide to us
It is important that the personal data we hold about you is correct and up to date. If you want to update the information you have previously given to us, please contact us.
Why are we collecting your personal information?
We will only use your personal information when the law lets us. This usually means we will use it:
- Where you have given us your permission to do so (we call this providing Consent)
- Where you (or, where you are under 13, your parent) have provided your consent to use your personal information, we are allowed to use it.
- So that we can do anything we have agreed to do for you (we call this performing a contract with you)
- This means we process your information so that you can apply and join the Committee and send you any rewards you have earned for providing us with feedback.
- To do something that the law says we have to do
- This might be things such as ensuring your safety when you participate in any online activities as part of the Committee.
- Where it is reasonable that we might want to do this, and this doesn’t affect your own rights (we call this having a legitimate interest)
- This might be if we want to record any committee meetings so that we have an internal record of the meeting. This will allow us to use your ideas and feedback to improve our products or branding or to improve your experience as a member of the Committee~~.~~, or for any other internal business purposes.
- Being recorded at meetings is not mandatory. We will always aim to notify you in advance if we plan on recording a meeting. If for any reason you do not wish to be recorded, please contact firstname.lastname@example.org
Who might we share your information with and why?
Depending on how and why you provide us with your personal data we may share it in the following ways:
- with our staff so that they can contact you about your application, answer any questions you might have, or organise the Committee events for you;
- with any company who buys our business;
- with other companies we are owned by or who we own; and
- if we need to protect our business, with companies or organisations who help to protect us against things like fraud.
We work with different people and companies to run the Community. We make sure all of our service providers sign contracts with us that clearly set out that they take protecting your personal data seriously. The type of services providers we use include:
Moving your data outside of the UK
We do not plan to move your personal data outside of the UK. However, if we do, we will always:
- make sure that the country we are sending it to also has laws that protect your personal data; or
- If the country we want to send your personal data to doesn’t have laws that we think protect your personal data well enough, we will make sure that we sign a special agreement with the company we are sending your data to which makes sure that that company has to handle your personal data as if they had to comply with the law in the UK.
How long will you keep my information?
We will only hold your information while you are still a member of the Committee and for a short while after, or if we need to keep it to comply with any laws or regulations.
If there are any complaints which you are involved in, we might hold your information for longer than usual to help us fix the problem.
In some situations, we may anonymise your personal data (this means that the data can no longer be linked to you). If we do this, we may use this information without telling you about it.
What are my rights?
The law makes sure that you are in control of your personal information. Data protection law gives you the following rights:
- Access: The right to request access to and a copy of your personal information;
- Restriction: You can ask us to pause our processing of your personal information in certain circumstances (for example, you are disputing its accuracy);
- Rectification: You can have any errors in your personal information corrected;
- Deletion: You can ask us to delete all your personal information in certain circumstances (for example, if the information is no longer necessary for the purposes for which it was collected);
- Objection: You can tell us you don’t want us to process your personal information in certain situations, for example if you no longer want to receive marketing communications;
- Portability: You can ask us to transfer your information electronically to you or another organisation in certain situations; and
- Withdrawal of consent: Where we rely on your consent to process your information you can withdraw consent at any time.
When exercising your data protection rights, we may ask you to confirm your identity in order to help us respond efficiently to your request.
How can I contact you if I have questions?
If you have any queries regarding this Policy, if you wish to exercise any of your rights set out above or if you think that the Policy has not been followed, please contact us using the information provided above.
You may also make a complaint about our handling or processing of your personal data with the Information Commissioner (who are in charge of making sure we handle your data properly). We would, however, appreciate the chance to talk about your concerns before you approach the Information Commissioner, so please contact us first.