We keep this privacy notice under regular review. This privacy notice was last updated on 15 July 2020.
This privacy notice sets out how Piggyback processes your personal data when you contact us and when you use this website. Personal data is information about individuals or information from which individuals can be identified (“personal data”).
Piggyback Interactive Limited is a private limited company incorporated under the laws of England and Wales with company number 03521751. Our registered office is at 5 Westmont Court, Monmouth Road, London, W2 4UU (“we”, “our”, “us” and/or “Piggyback”). Piggyback is registered as a data controller at the Information Commissioner’s Office (ICO) with registration number ZA762413.
How do we collect personal data?
We collect personal data directly from you when you use this website. We may also receive your personal data from third parties, including our website analytics and payment service providers, including, Yoast, WordPress and Google.
We may also collect your personal data through Facebook, Twitter and YouTube when you use tools to tag us and mention us in your posts, statuses and comments through your accounts on these platforms, and when you provide us with your personal data on our accounts on these platforms, e.g. when you comment on one of our posts on Facebook or subscribe to our channel on YouTube. We may also receive anonymised data that was derived from your personal data from YouTube when you play one of our YouTube videos embedded on our website or directly on YouTube.
What personal data do we collect?
We collect the personal data listed in the Schedule to this privacy notice.
How do we use your personal data?
The following is a list of the purposes for which we process your personal data, and the lawful basis on which we carry out such processing:
|To respond to communications, including customer support queries||Consent|
|To prepare and analyse statistics relating to the use of our website and services by you and other users, to investigate complaints and to seek and analyse feedback||Legitimate interests of ensuring our services and website are as enjoyable as possible|
|To run our everyday operations, e.g. communications between members of our team in connection with the provision of our products||Legitimate interests of running our business|
|To administer and protect our business and the website including troubleshooting, data analysis and system testing||Legitimate interests of running our business, provision of administration and IT services, including network security|
|To administer a sale or possible sale of the whole of or part of our business or the restructuring of our business||Legitimate interests of facilitating any such possible or actual transaction or restructuring|
|To consider any job applications we may receive||Consent|
We may also process your personal data (a) to comply with a legal obligation we are under; and (b) for additional purposes in the future, but only if such purposes are compatible with those listed above and if we believe that the same lawful basis applies.
In certain circumstances, you may be obliged to provide us with your personal data under a statutory or contractual requirement. This might include, but is not limited to, personal data we require to enter into an agreement with you or your business; for tax and accounting purposes; and to enable us to fulfil our compliance and other obligations under relevant legislation or regulation. Failure to provide us with personal data required under a statutory or contractual requirement may prevent us from entering into or performing our obligations under a contract with you or your business.
When do we disclose your personal data?
We may share your personal data with third parties.
Some of these third parties may be based, or may process data in, the EU. When we transfer personal data to third parties within the EU, we do so on the basis of Article 28, GDPR compliant terms. Until such time as the Brexit transition period expires on 31 December 2020 no additional safeguards are required for the transfer of personal data between the UK and the EEA.
We may also share your personal data with third parties that process data in and/or are incorporated in territories outside of the EEA and which do not provide the same level of protection to personal data as countries subject to the General Data Protection Regulation ((EU) 2016/679) (GDPR) (international partners).
When we disclose your personal data to international partners, we do so on the basis of their registration with the Privacy Shield Framework (https://www.privacyshield.gov/welcome) or other appropriate safeguards for the purposes of the GDPR (https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers/), including standard contractual clauses approved by the European Commission which can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
Third parties and/or international partners we may share your personal data with or allow access to include WordPress (our open-source content management system), Google (our website platform – Google Cloud – and website analytics provider), Yoast (our other website analytics provider) and Borlabs (our cookies and tracking technologies management service provider).
Your personal data may be shared with other parties and/or on our social media accounts for the purposes and the legitimate interests of facilitating our operations and promoting our offerings including on, Facebook, Twitter and YouTube, for example, when we share a post that you commented on. Your personal data will also be shared with YouTube when you play one of our YouTube videos embedded on our website or directly on YouTube.
We may also transfer your personal data to third parties or international partners in the context of a sale or possible sale of the whole of or part of our business or the restructuring of our business.
We may also disclose your personal data to law enforcement agencies in order to assist with any investigations, when we bring a claim or defend ourselves against a claim that requires the disclosure of the personal data, and when we engage professional advisors.
How long do we retain your personal data for?
We will retain your personal data for the following purposes and retention periods:
|Future employment opportunities with us when a job application has been unsuccessful||2 years|
|Potential claims||7 years|
Website cookies and trackers
We will obtain your consent to use these cookies except where the use of the cookie is strictly necessary for the operation of our website.
The cookies used on our website are either set by us or by our third party service providers i.e. by domain providers other than the domain of our website that provide us with external services, such as analytics providers, product distributors and payment processing services providers and fall into the following categories:
- Necessary: Those that are necessary for the operation of the website, including allowing you to interact with our website, to recall selections as you move between pages and which enable core functionality such as security, credentials authentication, network management and accessibility, e.g. the Borlabs cookie that manages visitors’ preferences on our website’s cookie banner.
- Functional: Those that remember choices you make e.g. to allow you to dismiss notices and suggestions and allow you to use non-essential features on our website, such as playing YouTube videos embedded on our website.
- Analytics: Those that analyse the use of our website e.g. interface use, monitor our web audience and traffic.
Yoast SEO, the search engine optimisation tool provided by Yoast. Yoast utilises the data collected to improve this website’s and its content’s search engine optimisation level and to provide feedback towards the improvement of the readability of the content of this website.
We use a combination of both session and persistent cookies. Session cookies keep track of your current visit and how you navigate the website and persistent cookies enable our website to recognise you as a repeat visitor when you return. The session cookies will be deleted from your device when you close your browser. Persistent cookies remain on your device after you have left the website.
Most browsers have cookies enabled by default, but you are able to change your cookies settings, which are usually found in the ‘options’ or ‘preferences’ menu of your internet browser. You can block any cookies from any website by activating the setting on your browser that allows you to refuse the setting of some or all cookies. You can also use your browser settings to delete cookies. For more information about cookies please visit https://ico.org.uk/your-data-matters/online/cookies/.
You have the following rights under data protection legislation. If you have any questions about your rights, or you wish to exercise any of these rights, please email firstname.lastname@example.org.
We may require you to provide forms of identity should you wish to exercise one of your rights below.
Access: Upon request, you are entitled to confirmation that we process your personal data and a copy of such personal data.
Rectification: If the personal data we hold on you is incorrect, you have the right for this to be rectified. You may also update your personal data through your account settings.
Erasure: You can request us to erase your personal data where there is no compelling reason to continue processing.
Restriction: You may request a restriction on the processing we undertake on your personal data. This will only apply where we have no lawful basis to process your personal data, your personal data is inaccurate or to comply with an objection request (see below).
Objection: You may object to our processing of your personal data if our processing is carried out on the basis of legitimate interests. Please note, however, that should we determine that our interests are so compelling as to override your objection we may continue to process your personal data.
You may object to receiving direct marketing at any time.
Portability: You have the right to receive some of your personal data in machine readable format. This right extends to you being able to request that such data is sent to a third-party controller.
Withdrawing consent: If the lawful basis we rely on to process your personal data is consent you have the right to withdraw this consent. Please email us at email@example.com to withdraw consent for the processing of your personal data.
To withdraw your consent for the processing of your personal data by a third party, please contact the relevant organisation.
Complaining to a supervisory authority: Further information about your rights can also be obtained from your national data protection regulator – in the UK, this is the ICO (https://ico.org.uk/). If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with your national data protection supervisory authority, although we would ask that you contact us in the first instance.
Your right to be informed: You can contact us to find out more or to ask any questions you may have about our use of your personal data.
Personal data we collect:
|Type of personal data||Method of collection|
|Payment related information||From a third party|
|IP address||Directly from you|
|Enquiries and opinions, and any personal data you may provide us with in such communications||Directly from you|