Privacy Policy
This Policy explains how Entertainment Retailers Association (company number 02268007) (“ERA”) collects and uses your personal information.
Our details
We are the data controller with conduct of your personal information.
You can contact us by email to admin@eraltd.org or by post to ERA, 42-43 Maiden Lane London WC2E 7LL. You can also use the contact form on our website at https://eraltd.org/contact/.
You can contact our Data Protection Officer, Kim Bayley, by email to privacy@eraltd.org or by post to The DPO, ERA, 42-43 Maiden Lane London WC2E 7LL.
How we use your personal information
The following table explains how we use your personal information in our business. Different sections apply depending on your relationship to us. Please read each section carefully as more than one section may apply to how we use your information.
| Situation | Types of information | Purpose and lawful basis for processing |
|---|---|---|
| We monitor how users interact with our website through the use of cookies. | IP address, approximate location. | After obtaining your consent to setting the cookies, we have a legitimate interest in monitoring how you interact with our website in order to customise it for you, improve it and to troubleshoot issues. |
| You send us an enquiry. | Name, contact information, details of your enquiry. | We have a legitimate interest in responding to your enquiry and keeping a record of the correspondence in order to efficiently operate our business. We process your information to carry out pre-contractual steps relating to a potential contract between us. |
| You or your organisation purchases goods or services from us or registers for membership. | Name, contact information, job title, payment details, details of the goods, services and/or membership plan purchased. | If the contract is with you, the processing is necessary for us to perform our obligations under the contract (including, where applicable, to manage your membership). If the contract is with your organisation then we have a legitimate interest in processing your personal information for the purpose of managing the contractual relationship between your organisation and us (including, where applicable, your organisation’s membership). We have a legitimate interest in keeping a record of the contract between us (or your organisation and us) for the administration of our business and to address any disputes which may arise between us (or your organisation and us). |
| You or your organisation supplies goods or services to us. | Name, contact information, job title, payment details, details of the goods/services supplied. | If the contract is with you, the processing is necessary for us to perform our obligations under the contract. If the contract is with your organisation then we have a legitimate interest in processing your personal information for the purpose of managing the contractual relationship between your organisation and us. We have a legitimate interest in keeping a record of the contract between us (or your organisation and us) for the administration of our business and to address any disputes which may arise between us. |
| You share your dietary or accessibility requirements with us so that we can accommodate them. | Name, details of requirements (which may include dietary requirements, information about your health). | We usually process this information based on your explicit consent. In case of an emergency, we may process this information in order to protect your vital interests whereby we have a legitimate interest in protecting your wellbeing. |
| We send you marketing communications concerning our organisation and activities. | Name, contact information, marketing preferences. | We send you marketing communications based on your consent. |
How long we keep your information for
We only keep your information for so long as is reasonably necessary. Generally speaking, we keep your personal information for the following periods of time:
- General enquiries – 2 years from when we resolve your enquiry, unless it results in us entering into a contract with you or your organisation, in which case the below time period applies instead.
- Members - the duration of your membership plus 7 years.
- Customers and staff of customers - the duration of the customer contract plus 7 years.
- Suppliers and staff of suppliers - the duration of the supplier contract plus 7 years.
Who is your information shared with?
We share your personal information with third parties only where we are required to do so to comply with the law, to protect our rights, to perform our contractual obligations or to efficiently operate our business. In order to achieve these purposes, we share your data with the following people or group of people:
- If you are an employee or representative of a customer or supplier of ours then we may share your information with your employer and colleagues for the purpose of manging the business relationship between your organisation and us.
- Our outsourced service providers. These organisations have strict contractual obligations to handle your information in accordance with data protection law and to keep it confidential at all times.
- Our professional advisers (including accountants and lawyers). These people are subject to professional duties of confidentiality.
- Potential acquirers of our organisation may be given access to redacted information about our customers, members, suppliers and their staff/representatives. Before we share this information the potential purchaser would need to sign a non-disclosure agreement which protects your personal information.
If the recipient of your information is based outside of the UK and is not based in a country which offers equivalent protections for personal data then your data will be safeguarded by an International Data Transfer Agreement or equivalent terms.
Your rights
Under UK data protection law you have the following rights:
- The right to be informed about what we do with your information. This Policy provides you with this information.
- If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by and notifying us using the details set out at the start of this policy. Consent to marketing communications can be withdrawn by following the steps outlined in that communication, such as clicking the ‘unsubscribe’ link in the marketing emails we send.
- The right to access a copy of your information which we hold. This is called a ‘data subject access request’. Additional details on how to exercise this right are set out in the ‘Access to Information’ section below.
- The right to prevent us processing your information for direct marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data or by contacting us using the details set out at the start of this policy.
- The right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing.
- The right to object to us processing your personal information in certain other situations.
- The right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate.
- The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.
- The right, in certain circumstances, to request that we erase, rectify, cease processing and/or delete your information.
You have the general right to complain to us in the first instance if you are not happy with how we are processing your personal information. If you would like to complaint, please contact us using the details set out at the start of this Policy. If you are not satisfied by our response then you can complain to the Information Commissioner’s Office (ICO) via www.ico.org.uk.
Access to information
Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information we hold on you. You must send us proof of your identity, or proof of authority if making the request on behalf of someone else, before we can supply the information to you. Requests should be sent to us using the contact details set out at the start of this policy.
You do not need to pay a fee to exercise this right unless you are requesting copies of documents you already possess, in which case we may charge our reasonable administrative costs. We are also allowed to charge you for our reasonable administrative costs in collating and providing you with details of the requested information which we hold about you if your request is clearly unfounded or excessive. In very limited circumstances, we are entitled to refuse to comply with your request if it is particularly onerous.
In certain circumstances, you are entitled to receive the information in a structured, commonly used and machine-readable form.
Cookies
For information about how we use cookies on our website, please refer to our Cookies Policy at: https://eraltd.org/cookies-policy/
Changes to this Policy
This Policy was last updated on 22nd May 2023.