French in 3 is committed to protecting your privacy. We will use the information that we collect about you in accordance with, the Privacy and Electronic Communications Regulations 2003, the Data Protection Act 1998 (DPA) and any replacement laws, and, from May 2018, the General Data Protection Regulation (GDPR).
What information do we collect?
The personal information that we collect includes:
- name, title
- email, phone numbers links to social media accounts
- transaction history (we never store your whole card number, although we may keep a note of the last four digits to help us identify transactions)
How do we collect your information?
You give us your information when you make a purchase of one of our packages or sign up for our newsletters, update your preferences on our website or communicate with us.
We keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information.
Depending on your settings and the privacy policies used by social media and messaging services like Facebook, LinkedIn or Twitter, we may receive non-personally identifying demographic or analytical information from these services that enables us to better understand the reach and effectiveness of our advertising.
Information available publicly
This may include information found in places such as Companies House your biography on your work website or information that has been published in articles/ newspapers.
How we keep your details safe and secure
Your personal data will be held and processed on French in 3’s systems or systems managed by suppliers on behalf of French in 3. We always seek to hold your data securely. Access to customer information is strictly controlled.
Our basis for processing your personal information and what we use it for
We aim to be clear when we collect your data and not to do anything you wouldn’t reasonably expect.
We may process your personal data because it is necessary for the performance of a contract. For example, if you make a purchase.
We may process personal data because it is in our legitimate interests to do so. For example we may use your personal information to better understand your interests, to tailor our communications to you and/or to give you an exceptional experience at our events. We may also collect information about how you use our services (including our website) to analyse our customer base and improve our processes.
We may also process your personal data (including sensitive personal data) where we have your consent to do so (for example to monitor the diversity of visitors to French in 3). We will also ask for your consent to provide you with information about products and services which may be of interest to you (apart from where it is appropriate for us to rely on our legitimate interests to do so).
How you control your information
We may tell you about offers and information about our site. Occasionally, we may include information in these communications from partner organisations or organisations who support us. We make it easy for you to tell us how you want to hear from us (by logging onto our website and updating your preferences in the “My Account” section). You can opt out from these marketing communications at any time.
How long do we keep your information?
We may retain information for a period of six years after your association with us has come to an end. Some information may be retained indefinitely for historical, statistical or research purposes. As stated below, you have the right to require us to erase personal data.
- Under the DPA you have the following rights:
- to obtain access to, and copies of, the personal data that we hold about you
- to require that we cease processing your personal data if the processing is causing you damage or distress
- to require us not to send you marketing communications
- Once the GDPR takes effect in May 2018, you will also have the following additional rights:
- to require us to correct the personal data we hold about you if it is incorrect
- to require us to erase your personal data
- to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights
- Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.