Privacy & Cookie Policy

Effective Date: May 1, 2007
Premier Sports values the users of our website www.roffeyrobins.kitfor.co.uk (the "Website"). Your privacy and trust are very important to us. We recognize that you may be concerned about our collection, use, and disclosure of the personally identifiable information ("Personal Information") that we collect when you use the Website and the services offered on the Website ("Premier Sports Services"). This Privacy Policy describes the information that we collect from you, how we collect this information, and what we do with it after we collect it. By using the Website you are accepting the practices described in this Privacy Policy. Our policy and security it authorised and managed by www.deconetwork.com
If you have any questions or comments regarding this Privacy Policy, please contact us at sales@premier.kitfor.co.uk.


Does Premier Sports Ever Make Changes to its Privacy Policy?
We may make changes to the Privacy Policy from time to time. We will notify you of any changes by sending you an email, posting a notice on the home page of the Website, or posting a notice in your account when you first login after we have made changes. If you receive notification of a change in our Privacy Policy, you must review the new Privacy Policy carefully to make sure you understand our practices and procedures. You may not be able to receive notices from us if your cookies are not set to accept and/or are disabled.

What Types of Information Does Premier Sports Collect?
Personal Information. We collect Personal Information that you provide to us, such as your name, mailing address, phone number, email address, credit card number, and financial information. Non-Personal Information. We also collect non-personal information from you, such as your browser type, the URL of the previous website you visited, your ISP, operating system, and your Internet protocol (IP) Address Non-Personal Information cannot be easily used to personally identify you.

How and When Does Premier Sports Collect This Information?
Providing Information to Us. We collect Personal Information from you when you provide it to us. For example, if you purchase a product sold through an affiliate, we may collect your name, mailing address, telephone number, credit card number, and email address. If you create an account, we may collect your name, tax identification number, mailing address, email address, and other information that we request during the registration process, and any information that you provide to Premier Sports. If you sign up to receive a newsletter, we will collect your email address. Communications With Us. If you communicate with us regarding the Website or the System, we will collect any information that you provide to us in any such communication. Analytic and Reporting Technologies. Like the operators of most websites, we use analytic and reporting technologies to record Non-Personal Information such as Internet domain and host names, Internet protocol (IP) addresses, browser software, operating system types, click stream patterns, and the dates and times that the Website and the System are accessed. We also contract with several online partners to help manage, monitor and optimise our Website and the System and to help us measure the effectiveness of our advertising, communications and how visitors use the Website. To do this, we may use web beacons and cookies.

How Does Premier Sports Use My Information?
Personal Information. We use Personal Information primarily for our own internal purposes, such as providing, maintaining, evaluating, and improving the Website, fulfilling requests for information, producing and shipping the products that you order, and providing customer support. For example, if you create an Account, we will use the information that you provide us to communicate with you and pay you any commissions that you earn. Similarly, if you sign up to receive a Premier Sports newsletter, we will use the email address you provide to send you the newsletters. Non-Personal Information. We use Non-Personal Information to track the use of the Website and the System and for other internal purposes, such as providing, maintaining, evaluating, and improving the Website.

When Will Premier Sports Disclose My Information to Third Parties?

Disclosure to Successors. We may disclose your Personal Information to any successor-in-interest of ours, such as a company that acquires us. In the event Premier Sports goes through a business transition, such as a merger or acquisition by or with another company, or sale of all or a portion of our assets, your Personal Information will likely be among the assets transferred. You will be notified via email or by a notice on our Website of any such change in ownership or control of your Personal Information.
Disclosure to Unaffiliated Third Parties. We may disclose your Personal Information to prevent an emergency, to prevent harm to others, to respond to legal requirements, to protect or enforce our rights and policies, to protect or enforce the rights of a third party, or as required or permitted by law (including, without limitation, to comply with a subpoena or court order). In particular, we may disclose your information to a third party that alleges that you have infringed their intellectual property rights. Similarly, if you allege that someone is infringing upon your intellectual property rights, we may disclose your information to that person.
Disclosure to Third Party Service Providers and Online Partners. We may contract with various third parties who help us provide, maintain and improve the Website and the System. For example, we use a third party to process payments made to us, and may subcontract out production, fulfilment, analytics, reporting or other operations. We also contract with several online partners to help manage, monitor and optimise our Website and the System and to help us measure the effectiveness of our advertising, communications and how visitors use the Website. We will use commercially reasonable efforts to prevent such third parties from disclosing your Personal Information, except for the purpose of providing the services in question. We cannot guarantee that such third parties will not disclose your Personal Information.
Disclosure to Affiliates. If you purchase a product, Premier Sports may provide your name, and the city and state information provided by you to an Affiliate. In our Affiliate Agreement, Premier Sports contractually obligates each Affiliate not to use or disclose this information for any purposes other than internal record keeping, and for marketing, only if you have opted in to receive marketing material directly from the Affiliate. We cannot guarantee all Affiliates will comply with this obligation.
Disclosure of Non-Personal Information. We will disclose Non-Personal Information, in aggregate form, to potential strategic partners, advertisers, investors, customers, and others. You may not opt-out of the sharing of this information. However, it cannot be easily used to identify you personally.

What About Cookies and Web Beacons?
A cookie is a small file placed on the hard drive of your computer. Most websites use cookies. We use cookies to track your use of the Website and the System, provide you with a more personalized user experience, and to allow you to login and begin use of the Website automatically when you visit the Website. A web beacon is an often-transparent graphic image, usually no larger than a 1x1 pixel that is placed on a web page or in an e-mail that is used to monitor the behaviour of the user visiting the Website or receiving the e-mail. Cookies and web beacons used by Premier Sports and our online partners are not linked to Personal Information. Some of our Shopkeepers may use cookies or web beacons on our Website. We have no access to or control over these cookies and web beacons. This Privacy Policy covers the use of cookies and web beacons by Premier Sports and our online partners only and does not cover the use of cookies or web beacons by any other third party.

1st party Cookies used on this site
The following 1st party cookies are used on our site:

Name	Purpose
login_token	Allows the user to be automatically logged in if they have previously entered their username and password.
_pc_session_id	Allows our site to store information about session (referrer, landing page, etc...)
c_rt_ppr	Allows DecoNetwork to apply session affinity to back-end nodes in cluster.
set_sa	Used on the sign-up page to store what DecoNetwork sales agent website has originally been visited.

 

 

3rd party Cookies used on this site
The following 3rd party cookies are used on our site:

 

 

 

 

Provider	Name	Purpose	More information
Google	_utma _utmb _utmc _utmz	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.	Google Privacy policy

 

 

 

Other third party cookies maybe used on this site and is the responcibility of the site owner to declard those cookies.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize DecoNetwork Pty Ltd pages, or register with DecoNetwork Pty Ltd site or services, a cookie helps DecoNetwork Pty Ltd to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same DecoNetwork Pty Ltd Web site, the information you previously provided can be retrieved, so you can easily use the DecoNetwork Pty Ltd features that you customized.

How to control and delete cookies
You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the DecoNetwork Pty Ltd services or Web sites you visit.

Visit www.aboutcookies.org which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.

To opt-out of third-parties collecting any data regarding your interaction on our website, please refer to their websites for further information.

Does Premier Sports Protect My Personal Information?
Personal Information. Whenever we obtain your Personal Information, we use commercially reasonable efforts to protect it from unauthorized access or disclosure. However, we are not insurers of the security of your Personal Information. Accordingly, we assume no liability for any disclosure of data due to errors in transmission, unauthorized third party access or other acts of third parties, or acts or omissions beyond our reasonable control. Website Content. The content that you store, post, or transmit on or through the Website, such as message board postings, storefront pages, and images on your Products, may be accessed by other users, including people that you do not know. We are not responsible for the actions of others. Therefore, you should use care in communicating with other users and only disclose your Personal Information to other users that you know to be trustworthy. You should not assume that your content will be kept private.

How Can I Review and Make Changes to My Personal Information?
You can obtain a copy of and request that we correct errors in your Personal Information by emailing us at sales@premier.kitfor.co.uk. For your protection, you will be required to provide proof of your identity to obtain a copy of your Personal Information. If your Personal Information changes or if you no longer want to use the Premier Sports Services, you may correct, update or deactivate your Personal Information and/or your account through the account management screen. If you would like to deactivate or terminate your account you can also contact our Customer Service.

Tell-A-Friend
If you choose to use our referral service to tell a friend about the Website, we will ask you for your friend's name and email address. We will automatically send your friend a one-time email inviting him or her to visit the Website. We store this information for the sole purpose of sending this one-time email and tracking the success of our referral program.

Security
The security of your Personal Information is important to us. When you enter sensitive information such as a credit card number and/or social security number on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). We follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Does This Privacy Policy Apply When I Access Third Party Websites?
You may be able to access third party websites directly from the Website. This Privacy Policy does not apply when you access third party websites. We cannot control how third parties may use Personal Information you disclose to them, so you should carefully review the privacy policy of any third party website you visit before using it or disclosing your Personal Information to its provider.

What About Children's Privacy?
Under Thirteen. The Website and the System are intended for users aged 13 and older only. Accordingly, we will not knowingly collect or use any Personal Information from children that we know to be under the age of 13. In addition, we will delete any information in our database that we know originates from a child under the age of 13. Thirteen to Seventeen. Prospective users between the ages of 13 and 17 can only use the Website under their parent's or legal guardian's supervision. If you are between the ages of 13 and 17, you, your parent, or your legal guardian may request that we deactivate any of your Personal Information in our database and/or opt-out from receiving communications from us. If you wish to do so, please contact us at sales@premier.kitfor.co.uk.

Can I Opt-Out From Receiving Communications From Premier Sports?
We provide you the opportunity to opt-out of having your Personal Information used for certain purposes. For example, if you purchase a product/service but do not wish to receive any additional marketing material from us, you can indicate your preference on our order form. If you no longer wish to receive our newsletters and promotional communications, you may opt-out of receiving them by following the instructions included in each newsletter or communication or by emailing us at sales@premier.kitfor.co.uk. We also offer you an opportunity to opt-out of certain communications through the account management screen. If you need assistance you may contact us at sales@premier.kitfor.co.uk. If we disclose your Personal Information to a third party in a manner that is not set forth in this Privacy Policy you will be notified so that you can make an informed choice about sharing your Personal Information with that third party.

 

Data protection policy

Context and overview

Key details

• Policy prepared by:                                                         David Goldsmith
• Approved by board / management on:   10.05.2020
• Policy became operational on:                    11.05.2020          
• Next review date:                                                            09.05.2021                       

Introduction

Premier Sports needs to gather and use certain information about individuals.

These can include customers, suppliers, business contacts, employees and other people the organisation has a relationship with or may need to contact.

This policy describes how this personal data must be collected, handled and stored to meet the company’s data protection standards — and to comply with the law.

Why this policy exists

This data protection policy ensures Premier Sports complies with data protection law and follow good practice

• Protects the rights of staff, customers and partners
• Is open about how it stores and processes individuals’ data
• Protects itself from the risks of a data breach

Data protection law

The Data Protection Act 1998 describes how organisations — including Premier Sports — must collect, handle and store personal information.

These rules apply regardless of whether data is stored electronically, on paper or on other materials.

To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.

The Data Protection Act is underpinned by eight important principles. These say that personal data must:

1. Be processed fairly and lawfully
2. Be obtained only for specific, lawful purposes
3. Be adequate, relevant and not excessive
4. Be accurate and kept up to date
5. Not be held for any longer than necessary
6. Processed in accordance with the rights of data subjects
7. Be protected in appropriate ways
8. Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection

 

People, risks and responsibilities

Policy scope

This policy applies to:

• The head office of Premier Sports
• All branches of Premier Sports
• All staff and volunteers of Premier Sports
• All contractors, suppliers and other people working on behalf of Premier Sports

It applies to all data that the company holds relating to identifiable individuals, even if that information technically falls outside of the Data Protection Act 1998. This can include:

• Names of individuals
• Postal addresses
• Email addresses
• Telephone numbers
• …plus any other information relating to individuals

Data protection risks

This policy helps to protect Premier Sports from some very real data security risks, including:

• Breaches of confidentiality. For instance, information being given out inappropriately.
• Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.
• Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

Responsibilities

Everyone who works for or with Premier Sports has some responsibility for ensuring data is collected, stored and handled appropriately.

Each team that handles personal data must ensure that it is handled and processed in line with this policy and data protection principles.

However, these people have key areas of responsibility:

• The board of directors is ultimately responsible for ensuring that Premier Sports meets its legal obligations.
• The data protection officer, David Goldsmith, is responsible for:
  • Keeping the board updated about data protection responsibilities, risks and issues.
  • Reviewing all data protection procedures and related policies, in line with an agreed schedule.
  • Arranging data protection training and advice for the people covered by this policy.
  • Handling data protection questions from staff and anyone else covered by this policy.
  • Dealing with requests from individuals to see the data Premier sports holds about them (also called ‘subject access requests’).
  • Checking and approving any contracts or agreements with third parties that may handle the company’s sensitive data.
• The  IT manager, n, is responsible for:
• Ensuring all systems, services and equipment used for storing data meet acceptable security standards.
• Performing regular checks and scans to ensure security hardware and software is functioning properly.
• Evaluating any third-party services the company is considering using to store or process data. For instance, cloud computing services.
• Approving any data protection statements attached to communications such as emails and letters.
• Addressing any data protection queries from journalists or media outlets like newspapers.
• Where necessary, working with other staff to ensure marketing initiatives abide by data protection principles.
• The marketing manager, David Goldsmith is responsible for:

 

 

General staff guidelines

• The only people able to access data covered by this policy should be those who need it for their work.

• Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

• Premier Sports will provide training to all employees to help them understand their responsibilities when handling data.
• Employees should keep all data secure, by taking sensible precautions and following the guidelines below.
• In particular, strong passwords must be used and they should never be shared.
• Personal data should not be disclosed to unauthorised people, either within the company or externally.
• Data should be regularly reviewed and updated if it is found to be out of date. If no longer required, it should be deleted and disposed of.
• Employees should request help from their line manager or the data protection officer if they are unsure about any aspect of data protection.

 

Data storage

These rules describe how and where data should be safely stored. Questions about storing data safely can be directed to the IT manager or data controller.

When data is stored on paper, it should be kept in a secure place where unauthorised people cannot see it.

These guidelines also apply to data that is usually stored electronically but has been printed out for some reason:

• When not required, the paper or files should be kept in a locked drawer or filing cabinet.
• Employees should make sure paper and printouts are not left where unauthorised people could see them, like on a printer.
• Data printouts should be shredded and disposed of securely when no longer required.

When data is stored electronically, it must be protected from unauthorised access, accidental deletion and malicious hacking attempts:

• Data should be protected by strong passwords that are changed regularly and never shared between employees.
• If data is stored on removable media (like a CD or DVD), these should be kept locked away securely when not being used.
• Data should only be stored on designated drives and servers, and should only be uploaded to an approved cloud computing services.
• Servers containing personal data should be sited in a secure location,
• Data should be backed up frequently. Those backups should be tested regularly, in line with the company’s standard backup procedures.
• Data should never be saved directly to laptops or other mobile devices like tablets or smart phones.
• All servers and computers containing data should be protected by approved security software and a firewall.

Data use

Premier Sports stores the following personal information on the following locations. This data is in a secured location.

 

Data use

Personal data is of no value to Premier Sports unless the business can make use of it. However, it is when personal data is accessed and used that it can be at the greatest risk of loss, corruption or theft:

• When working with personal data, employees should ensure the screens of their computers are always locked when left unattended.
• Personal data should not be shared informally. In particular, it should never be sent by email, as this form of communication is not secure.
• Data must be encrypted before being transferred electronically. The IT manager can explain how to send data to authorised external contacts.
• Personal data should never be transferred outside of the European Economic Area.
• Employees should not save copies of personal data to their own computers. Always access and update the central copy of any data.

 

Data accuracy

The law requires Premier Sports to take reasonable steps to ensure data is kept accurate and up to date.

The more important it is that the personal data is accurate, the greater the effort Premier Sports should put into ensuring its accuracy.

It is the responsibility of all employees who work with data to take reasonable steps to ensure it is kept as accurate and up to date as possible.

• Data will be held in as few places as necessary. Staff should not create any unnecessary additional data sets.
• Staff should take every opportunity to ensure data is updated. For instance, by confirming a customer’s details when they call.
• Premier Sports will make it easy for data subjects to update the information Premier Sports holds about them. For instance, via the company website.
• Data should be updated as inaccuracies are discovered. For instance, if a customer can no longer be reached on their stored telephone number, it should be removed from the database.
• It is the marketing manager’s responsibility to ensure marketing databases are checked against industry suppression files every six months.

 

Subject access requests

All individuals who are the subject of personal data held by Premier Sports are entitled to:

• Ask what information the company holds about them and why.
• Ask how to gain access to it.
• Be informed how to keep it up to date.
• Be informed how the company is meeting its data protection obligations.

If an individual contacts the company requesting this information, this is called a subject access request.

Subject access requests from individuals should be made by email, addressed to the data controller at admin@premiersportsonline.co.uk. The data controller can supply a standard request form, although individuals do not have to use this.

Individuals will be charged £10 per subject access request. The data controller will aim to provide the relevant data within 14 days.

The data controller will always verify the identity of anyone making a subject access request before handing over any information.

 

 

Disclosing data for other reasons

In certain circumstances, the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.

Under these circumstances, Premier Sports will disclose requested data. However, the data controller will ensure the request is legitimate, seeking assistance from the board and from the company’s legal advisers where necessary.

 

Providing information

Premier Sports aims to ensure that individuals are aware that their data is being processed, and that they understand:

• How the data is being used
• How to exercise their rights

To these ends, the company has a privacy statement, setting out how data relating to individuals is used by the company.

[This is available on request. A version of this statement is also available on the company’s website.]

Data protection policy

Context and overview

Key details

• Policy prepared by:                                 David Goldsmith
• Approved by board / management on:   22.05.2018
• Policy became operational on:                24.05.2018          
• Next review date:                                     22.05.2019                          

Introduction

Premier Sports needs to gather and use certain information about individuals.

These can include customers, suppliers, business contacts, employees and other people the organisation has a relationship with or may need to contact.

This policy describes how this personal data must be collected, handled and stored to meet the company’s data protection standards — and to comply with the law.

Why this policy exists

This data protection policy ensures Premier Sports complies with data protection law and follow good practice

• Protects the rights of staff, customers and partners
• Is open about how it stores and processes individuals’ data
• Protects itself from the risks of a data breach

Data protection law

The Data Protection Act 1998 describes how organisations — including Premier Sports — must collect, handle and store personal information.

These rules apply regardless of whether data is stored electronically, on paper or on other materials.

To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.

The Data Protection Act is underpinned by eight important principles. These say that personal data must:

1. Be processed fairly and lawfully
2. Be obtained only for specific, lawful purposes
3. Be adequate, relevant and not excessive
4. Be accurate and kept up to date
5. Not be held for any longer than necessary
6. Processed in accordance with the rights of data subjects
7. Be protected in appropriate ways
8. Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection

 

People, risks and responsibilities

Policy scope

This policy applies to:

• The head office of Premier Sports
• All branches of Premier Sports
• All staff and volunteers of Premier Sports
• All contractors, suppliers and other people working on behalf of Premier Sports

It applies to all data that the company holds relating to identifiable individuals, even if that information technically falls outside of the Data Protection Act 1998. This can include:

• Names of individuals
• Postal addresses
• Email addresses
• Telephone numbers
• …plus any other information relating to individuals

Data protection risks

This policy helps to protect Premier Sports from some very real data security risks, including:

• Breaches of confidentiality. For instance, information being given out inappropriately.
• Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.
• Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

Responsibilities

Everyone who works for or with Premier Sports has some responsibility for ensuring data is collected, stored and handled appropriately.

Each team that handles personal data must ensure that it is handled and processed in line with this policy and data protection principles.

However, these people have key areas of responsibility:

• The board of directors is ultimately responsible for ensuring that Premier Sports meets its legal obligations.
• The data protection officer, David Goldsmith, is responsible for:
  • Keeping the board updated about data protection responsibilities, risks and issues.
  • Reviewing all data protection procedures and related policies, in line with an agreed schedule.
  • Arranging data protection training and advice for the people covered by this policy.
  • Handling data protection questions from staff and anyone else covered by this policy.
  • Dealing with requests from individuals to see the data Premier sports holds about them (also called ‘subject access requests’).
  • Checking and approving any contracts or agreements with third parties that may handle the company’s sensitive data.
• The  IT manager, n, is responsible for:
• Ensuring all systems, services and equipment used for storing data meet acceptable security standards.
• Performing regular checks and scans to ensure security hardware and software is functioning properly.
• Evaluating any third-party services the company is considering using to store or process data. For instance, cloud computing services.
• Approving any data protection statements attached to communications such as emails and letters.
• Addressing any data protection queries from journalists or media outlets like newspapers.
• Where necessary, working with other staff to ensure marketing initiatives abide by data protection principles.
• The marketing manager, David Goldsmith is responsible for:

 

 

General staff guidelines

• The only people able to access data covered by this policy should be those who need it for their work.

• Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

• Premier Sports will provide training to all employees to help them understand their responsibilities when handling data.
• Employees should keep all data secure, by taking sensible precautions and following the guidelines below.
• In particular, strong passwords must be used and they should never be shared.
• Personal data should not be disclosed to unauthorised people, either within the company or externally.
• Data should be regularly reviewed and updated if it is found to be out of date. If no longer required, it should be deleted and disposed of.
• Employees should request help from their line manager or the data protection officer if they are unsure about any aspect of data protection.

 

Data storage

These rules describe how and where data should be safely stored. Questions about storing data safely can be directed to the IT manager or data controller.

When data is stored on paper, it should be kept in a secure place where unauthorised people cannot see it.

These guidelines also apply to data that is usually stored electronically but has been printed out for some reason:

• When not required, the paper or files should be kept in a locked drawer or filing cabinet.
• Employees should make sure paper and printouts are not left where unauthorised people could see them, like on a printer.
• Data printouts should be shredded and disposed of securely when no longer required.

When data is stored electronically, it must be protected from unauthorised access, accidental deletion and malicious hacking attempts:

• Data should be protected by strong passwords that are changed regularly and never shared between employees.
• If data is stored on removable media (like a CD or DVD), these should be kept locked away securely when not being used.
• Data should only be stored on designated drives and servers, and should only be uploaded to an approved cloud computing services.
• Servers containing personal data should be sited in a secure location,
• Data should be backed up frequently. Those backups should be tested regularly, in line with the company’s standard backup procedures.
• Data should never be saved directly to laptops or other mobile devices like tablets or smart phones.
• All servers and computers containing data should be protected by approved security software and a firewall.

Data use

Premier Sports stores the following personal information on the following locations. This data is in a secured location.

 

Data use

Personal data is of no value to Premier Sports unless the business can make use of it. However, it is when personal data is accessed and used that it can be at the greatest risk of loss, corruption or theft:

• When working with personal data, employees should ensure the screens of their computers are always locked when left unattended.
• Personal data should not be shared informally. In particular, it should never be sent by email, as this form of communication is not secure.
• Data must be encrypted before being transferred electronically. The IT manager can explain how to send data to authorised external contacts.
• Personal data should never be transferred outside of the European Economic Area.
• Employees should not save copies of personal data to their own computers. Always access and update the central copy of any data.

 

Data accuracy

The law requires Premier Sports to take reasonable steps to ensure data is kept accurate and up to date.

The more important it is that the personal data is accurate, the greater the effort Premier Sports should put into ensuring its accuracy.

It is the responsibility of all employees who work with data to take reasonable steps to ensure it is kept as accurate and up to date as possible.

• Data will be held in as few places as necessary. Staff should not create any unnecessary additional data sets.
• Staff should take every opportunity to ensure data is updated. For instance, by confirming a customer’s details when they call.
• Premier Sports will make it easy for data subjects to update the information Premier Sports holds about them. For instance, via the company website.
• Data should be updated as inaccuracies are discovered. For instance, if a customer can no longer be reached on their stored telephone number, it should be removed from the database.
• It is the marketing manager’s responsibility to ensure marketing databases are checked against industry suppression files every six months.

 

Subject access requests

All individuals who are the subject of personal data held by Premier Sports are entitled to:

• Ask what information the company holds about them and why.
• Ask how to gain access to it.
• Be informed how to keep it up to date.
• Be informed how the company is meeting its data protection obligations.

If an individual contacts the company requesting this information, this is called a subject access request.

Subject access requests from individuals should be made by email, addressed to the data controller at admin@premiersportsonline.co.uk. The data controller can supply a standard request form, although individuals do not have to use this.

Individuals will be charged £10 per subject access request. The data controller will aim to provide the relevant data within 14 days.

The data controller will always verify the identity of anyone making a subject access request before handing over any information.

 

 

Disclosing data for other reasons

In certain circumstances, the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.

Under these circumstances, Premier Sports will disclose requested data. However, the data controller will ensure the request is legitimate, seeking assistance from the board and from the company’s legal advisers where necessary.

 

Providing information

Premier Sports aims to ensure that individuals are aware that their data is being processed, and that they understand:

• How the data is being used
• How to exercise their rights

To these ends, the company has a privacy statement, setting out how data relating to individuals is used by the company.

[This is available on request. A version of this statement is also available on the company’s website.]