Privacy Policy
Who We Are
H2Z Foundation (‘we’ or ‘us’ or ‘our’) gathers and processes your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
Our designated Data Protection Officer can be contacted via the following methods
EMAIL: Data Protection Officer, charles.featherstone@therudechronicles.com
Information That We Collect
H2Z Foundation processes your personal information to meet its legal, statutory and contractual obligations and to provide you with our products and services. H2Z Foundation will never collect any unnecessary personal data from you and will not process your information in any way, other than as specified in this notice.
The personal data that we collect from you is: -
Name
Personal Email
We collect information in the below ways: -
Online form
How H2Z Foundation Uses Your Personal Data (Legal Basis for Processing)
H2Z Foundation takes your privacy very seriously and will never disclose, share or sell your data without your consent; unless required to do so by law. H2Z Foundation only retains your data for as long as is necessary and for the purposes specified in this notice. Where you have consented to the H2Z Foundation providing you with promotional offers and marketing, you are free to withdraw this consent at any time. The purposes and reasons for processing your personal data are detailed below: -
To send periodical alerts to new products related to H2Z Foundation books, offers and other marketing materials
To store incoming communications via our contact form.
Your Rights
You have the right to access any personal information that H2Z Foundation processes about you and to request information about:
What personal data H2Z Foundation holds about you
The purposes of the processing
The categories of personal data concerned
The recipients to whom the personal data has/will be disclosed
How long H2Z Foundation intends to store your personal data for
If H2Z Foundation did not collect the data directly from you, information about the source
If you believe that the H2Z Foundation holds any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information. H2Z Foundation will strive to update/correct it as quickly as possible unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with data protection laws, as well as to object to any direct marketing from us, to exercise your data portability rights and to be informed about any automated decision-making we may use.
If H2Z Foundation receives a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
Sharing and Disclosing Your Personal Information
H2Z Foundation will not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. H2Z Foundation uses third-parties so that it can provide you with the various services and products that it offers. All processors acting on our behalf only process your data in accordance with instructions from H2Z Foundation and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.
Safeguarding Measures
H2Z Foundation takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. It works hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and has programs in place to deploy several layers of security measures, including: -
Encryption of devices such as but not limited to USB Sticks and Flash Drives.
Regular staff training.
Anonymisation of sensitive data.
Data retained for only as long as is necessary.
Antivirus measures on IT hardware.
Transfers Outside the EU
Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may not necessarily have the same high standard of protection for your personal data.
H2Z Foundation utilises some products or services (or parts of them) that may be hosted/stored in the U.S.A., which means that we may transfer any information which is submitted by you through the website outside the European Economic Area ("EEA") for the purposes below:
Management of its email system
Storage of your data on our database server
Third party service providers (see above under “Sharing and Disclosing Your Personal Information”)
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to H2Z Foundation. However, as this information is required for us to provide you with our services/deliver your products/legitimate interests, H2Z Foundation will not be able to offer some/all of our products or services without it.
Legitimate Interests
As noted in the ‘How We Use Your Personal Data’ section of this notice, H2Z Foundation occasionally processes your personal information under the ‘legitimate interests’ legal basis. Where this is the case, H2Z Foundation will have carried out a Legitimate Interests Assessment (LIA) to ensure your interests have been considered and any risk posed to you against our own and that such interests are proportionate and appropriate.
H2Z Foundation uses the legitimate interests’ legal basis for processing the type of data listed below and has identified our interests as detailed below;
Use of email addresses to send newsletters and marketing material to members and other individuals who have recently interacted with H2Z Foundation or used H2Z Foundation services on the basis that these categories of individuals would reasonably expect to receive this type of material. Any individual is able to object to receiving such material through the use of the unsubscribe facility contained in each email communication.
How Long We Keep Your Data
H2Z Foundation only ever retains personal information for as long as is necessary and has strict review and retention policies in place to meet these obligations. For example, we are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
You can modify or withdraw consent at any time, which we will act on immediately, unless there is a legitimate or legal reason for not doing so.
MARKETING
Legitimate Interests Example
H2Z Foundation will occasionally send you communications regarding our products, services or promotions by email. Such information will be relevant to you as a customer/ subscriber and you will always have the option to unsubscribe at any time.
If you would prefer not to receive above-mentioned marketing and offers, please inform us via email at this address: charles.featherstone@therudechronicles.com
Consent
If Legitimate Interests is not the appropriate way to contact you, H2Z Foundation would like to contact you with regarding our products, services or promotions that we provide, but using your consent. If you consent to us using your contact details for these purposes, you have the right to modify or withdraw your consent at any time by using the opt-out/unsubscribe options or by contacting H2Z Foundation directly.
In these circumstances, we only contact you if you have already given your specific consent. At that point we will ask you how you want to be contacted i.e. by post, email, telephone or text.
If, however, you wish to opt-out of marketing, please email us at: charles.featherstone@therudechronicles.com or by using the "unsubscribe" option in our emails.
Lodging A Complaint
H2Z Foundation processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.
Email:
Data Protection Officer, charles.featherstone@therudechronicles.com
Information Commissioners Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745
Email: casework@ico.org.uk
Cookie Notice
A ‘cookie’ is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. When you visit a site that uses cookies for the first time, a cookie is downloaded onto your computer/mobile device so that the next time you visit that site, your device will remember useful information such as items added in the shopping cart, visited pages or logging in options.
Cookies are widely used in order to make websites work, or to work more efficiently, and our site relies on cookies to optimise your user experience and for features, products and services to function properly.
Most web browsers allow some control to restrict or block cookies through the browser settings, however if you disable cookies you may find this affects your ability to use certain parts of our website or services. For more information about cookies visit https://www.aboutcookies.org