Racehorse Owners’ Association (the “ROA”)
Date of last revision: 25 January 2017
1.1 At the ROA (“We”), we are committed to protecting and respecting your privacy.
1.2 In this Policy, ““personal data”, “sensitive personal data”, “data controller”, “data processor” and “data subject” shall have the meanings given to them in the Data Protection Act 1998 (the “Act”).
1.3 This Policy sets out the basis on which We process any personal data that We store about you. Please read the following carefully in order to understand how We will treat, store and process your personal data.
1.4 By becoming a member of the ROA, or by visiting www.roa.co.uk (the “Website”) you accept and consent to the treatment of your personal data in the manner described in this Policy (from time to time). Please check back regularly as We are entitled to change this Policy at any time, and any changes will affect you.
1.5 For the purposes of the Act, the data controller is The Racehorse Owners’ Association Limited, a company incorporated in England and Wales with company number 00398604 and its registered office on the 1st Floor at 75 High Holborn, London WC1V 6LS.
2. Data we collect
2.1 You will give us the information we require you to provide when you sign up to become a member of the ROA. This information can be provided online, over the phone or by completing our membership forms by hand, and will include (by way of example only) personal data such as your name, address, date of birth, e-mail address, phone number, bank account or credit card details, records of your attendance at any events or your racing style or preferences.
2.2 We may also collect information about you from any of your visits to our Website. This includes:
2.3 We may also receive personal data about you from other sources, such as credit rating agencies, as part of verifying your eligibility for membership.
We will use your personal data:
5.1 We may need to share your personal data with our service providers, associated organisations and agents for the purposes stated in this Policy.
5.2 We may disclose your personal data to third parties for the purposes of recovering any funds owed by you.
5.3 We will disclose your personal data to third parties if We sell all or substantially all of our assets to a third party (in which case your personal data will be one of the transferred assets).
5.4 If We are under any duty to disclose or share your personal data with the required third party to comply with any legal obligation, or to enforce or apply our terms and conditions of membership contained here) we will do so.
5.5 We have agreed to share your personal data with the British Horseracing Authority Limited (company number 02813358) on the terms of a written agreement, strictly for regulatory and integrity purposes only.
6.1 All personal data we collect from you will be stored on secure servers hosted by a third party located in the UK. Data will not, at any time, be stored or transferred to a third party located outside of the EEA (unless We notify you in advance and receive your express consent to any such storage or transfer).
6.2 All payment transactions will be facilitated by our preferred third party payment gateway which will be secured in accordance with payment card industry data security standards.
6.3 Whilst We will use appropriate security and technical measures to prevent unauthorised access to your personal data, We cannot guarantee the complete security of your personal data transmitted to us through our Website (as the transmission of information via the Internet is never completely secure). Any transmission of personal data through our Website is done at your own risk.
7. Your rights
7.1 You have the right to ask us not to process your personal data for marketing purposes. We will inform you if we intend to use your data for such purposes, or if we disclose your personal data to third parties for such purposes.
7.2 You can exercise your right to prevent processing for direct marketing purposes at any time by checking certain boxes on the forms we use to collect your data. Alternatively, you can contact us for any queries, comments or requests regarding your rights or this Policy, at email@example.com.
7.3 Where our Website contains links to third party websites (from time to time), if you follow a link to any of these websites, your visit will be subject to their own privacy policies, for which We accept no responsibility or liability for how they collect and store your personal data.
7.4 You have the right, under the Act, to access all the personal data We hold about you from time to time. This right can be exercised, in accordance with the Act, by submitting a subject access request to us at firstname.lastname@example.org and payment of the nominal administration fee of £10.00.