contactus@chipkie.com<\/a><\/p>\nBecause we are based outside the United Kingdom and offer services to individuals in the UK, we have appointed a UK representative<\/strong> under Article 27 of the UK GDPR. You may contact our UK representative on data protection matters at:<\/p>\n\n[INSERT UK REPRESENTATIVE NAME]<\/strong> [INSERT UK ADDRESS] [INSERT EMAIL]<\/p>\n<\/blockquote>\nIf we have appointed a Data Protection Officer, you can contact them at [INSERT, or delete if not applicable].<\/p>\n
2. The Personal Data We Collect<\/h2>\n
The types of personal data we may collect about you include:<\/p>\n
\n- Identity Data<\/strong> \u2014 your name, age, and gender.<\/li>\n
- Contact Data<\/strong> \u2014 your telephone number, address, and email.<\/li>\n
- Financial Data<\/strong> \u2014 bank account and payment card details, collected and stored through our third-party payment processor (such as Stripe). The processor stores this; we do not have access to your full card or bank account numbers.<\/li>\n
- Identity Verification Data<\/strong> \u2014 government-issued identification details we may request to verify your identity and help prevent fraud, where reasonably necessary or required by applicable law.<\/li>\n
- Transaction Data<\/strong> \u2014 details about payments between you and us (such as subscription Fees). (We do not collect, hold, or process the loan funds exchanged between users; we record only the loan information you choose to enter.)<\/em><\/li>\n
- Technical and Usage Data<\/strong> \u2014 your IP address, login data, browser session and approximate geolocation data, page-view and session statistics, device and network information, acquisition sources, search queries and browsing behaviour, and your use of our website (including via cookies and analytics).<\/li>\n
- Profile Data<\/strong> \u2014 your username and password, profile picture, your activity on the Platform, and support requests.<\/li>\n
- Interaction Data<\/strong> \u2014 information you provide when you take part in surveys, contests, promotions, activities, or events.<\/li>\n
- Marketing and Communications Data<\/strong> \u2014 your marketing preferences and communication preferences.<\/li>\n
- Professional Data<\/strong> \u2014 if you are a worker of ours or apply for a role, your professional history.<\/li>\n<\/ul>\n
Special category data.<\/strong> We do not generally seek to collect “special category” data (such as data about health, race, religion, or biometrics). Please do not provide such data unless we specifically request it. If you do, we will only process it where a condition under Article 9 of the UK GDPR applies.<\/p>\n3. How We Collect Personal Data<\/h2>\n
We collect personal data: when you provide it directly (in person, by phone, by email, or online); when you complete a form or register for events or newsletters or respond to surveys; when you use a website or application we operate (including via analytics, cookie, and marketing providers \u2014 see Section 6); from third parties such as our payment processor (Stripe) and identity-verification providers; and from publicly available sources.<\/p>\n
4. How and Why We Use Your Personal Data (Lawful Bases)<\/h2>\n
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:<\/p>\n
\n
\n\n\n| Purpose<\/th>\n | Data used<\/th>\n | Lawful basis<\/th>\n<\/tr>\n<\/thead>\n |
\n\n| Provide the Platform, set up your login, and deliver the services you sign up for<\/td>\n | Identity, Contact, Profile, Transaction<\/td>\n | Performance of a contract<\/strong> with you<\/td>\n<\/tr>\n\n| Take payment for your subscription and handle billing<\/td>\n | Contact, Financial, Transaction<\/td>\n | Performance of a contract<\/strong>; Legal obligation<\/strong> (keeping accounting records)<\/td>\n<\/tr>\n\n| Verify your identity and prevent, detect, and respond to fraud and misuse<\/td>\n | Identity, Identity Verification, Technical<\/td>\n | Legitimate interests<\/strong> (protecting our Platform and users from fraud); Legal obligation<\/strong> where applicable<\/td>\n<\/tr>\n\n| Respond to your support requests and communicate with you<\/td>\n | Identity, Contact, Profile<\/td>\n | Performance of a contract<\/strong>; Legitimate interests<\/strong> (running our service efficiently)<\/td>\n<\/tr>\n\n| Internal record-keeping and administration<\/td>\n | Most categories<\/td>\n | Legitimate interests<\/strong>; Legal obligation<\/strong><\/td>\n<\/tr>\n\n| Analytics, research, and improving our Platform and business<\/td>\n | Technical, Usage, Profile, Interaction<\/td>\n | Legitimate interests<\/strong> (to operate and improve our business)<\/td>\n<\/tr>\n\n| Send you marketing about our products and offers<\/td>\n | Contact, Marketing, Profile<\/td>\n | Consent<\/strong>, or Legitimate interests<\/strong> for existing customers (soft opt-in) \u2014 see Section 5<\/td>\n<\/tr>\n\n| Run promotions and competitions<\/td>\n | Identity, Contact, Interaction<\/td>\n | Consent<\/strong>; Performance of a contract<\/strong> (competition terms)<\/td>\n<\/tr>\n\n| Consider your job application<\/td>\n | Professional, Identity, Contact<\/td>\n | Legitimate interests<\/strong> \/ steps prior to entering a contract<\/td>\n<\/tr>\n\n| Comply with our legal obligations and establish, exercise, or defend legal claims<\/td>\n | As relevant<\/td>\n | Legal obligation<\/strong>; Legitimate interests<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n Where we rely on legitimate interests<\/strong>, we have balanced our interests against your rights, and you may object to that processing (see Section 12). Where we rely on consent<\/strong>, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.<\/p>\n5. Marketing and Your Right to Object<\/h2>\nWe will only send you marketing communications where you have consented, or where we are permitted to do so under the “soft opt-in” rules in PECR (for example, where you are an existing customer and we market similar products, and you did not opt out when we collected your details).<\/p>\n You can opt out of marketing at any time<\/strong> \u2014 by using the unsubscribe link in any marketing email, by adjusting your preferences in your Account, or by contacting us. You have an absolute right to object to direct marketing, and we will stop promptly.<\/p>\n6. Cookies and Similar Technologies<\/h2>\nWe use cookies and similar technologies on our website. Strictly necessary cookies<\/strong> are used to operate the website. For all other cookies \u2014 including analytics and advertising cookies \u2014 we will ask for your consent<\/strong> through our cookie banner, and you can change your choices at any time via our cookie settings.<\/p>\nGoogle Analytics.<\/strong> We use Google Analytics, including Advertising Features, which may set first-party and third-party cookies that collect Technical and Usage Data and support retargeting. These are only set where you have consented. You can also opt out using the Google Analytics Opt-out Browser Add-on and control personalised ads through Google’s Ads Settings.<\/p>\nIf you block cookies through your browser, some parts of our website may not work properly. For more detail, see our Cookie Policy [INSERT LINK].<\/p>\n 7. Who We Share Your Personal Data With<\/h2>\nWe share personal data only where necessary, and we require recipients to protect it. We may share personal data with:<\/p>\n | | | | | | | | | |