Privacy Policy
- Introduction
The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC is committed to respecting your privacy. This notice explains how The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC complies with the law on data protection, what your rights are, and how we may use the personal information we collect before, during and after your relationship with us as a customer.
The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC will be the data controller of any of your personal information as defined in Article 4(7) of the UK GDPR. This notice applies to our current and former customers. This notice does not form part of any contract and is for informational purposes only. References to “we,” “our” or “us” in this privacy notice are to The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC.
- Contact Details
The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC’s [Data Protection Lead/Data Protection Officer (‘DPO’)] oversees our compliance with data protection legislation. Our ICO registration number is.
Our contact details are the following:
Telephone: 07375898392
Email: [email protected]
Postal Address: Treloggan Industrial Estate, Unit 14, Darbari Prow Park, Newquay TR7 2SX
- Personal Data
When you interact with The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC in relation to your relationship with us as a customer, you may provide us with, or we may obtain, personal data about you.
We typically collect personal data about customers through the sales and marketing process.
- Data Collected, Processing Purposes, Lawful Bases, Data Sharing, and Retention Periods
Depending on the processing activity, we may rely on one or more of the following lawful bases for processing your personal data under the UK GDPR:
- Article 6(1)(a) which is where you have given us your consent to process your personal data.
- Article 6(1)(b) which relates to processing necessary for the performance of a contract.
- Article 6(1)(c) so we can comply with our legal obligations as your employer.
- Article 6(1)(d) in order to protect your vital interests or those of another person.
- Article 6(1)(e) for the performance of our public task.
- Article 6(1)(f) for the purposes of our legitimate interest.
The table below describes the main purposes for which we process your personal data, the categories of your information involved, and our lawful bases for being able to do this. It also includes the types of organisations we share your personal data with and how long we keep your personal data.
| Data Collected | Purpose | Lawful Basis | Data Sharing | Retention Period |
| IP address | To monitor your activity on our website | Legitimate Interest | [insert categories of recipient of the data] | [insert retention periods] |
| Name, email address, message | To reply to queries made through our website contact forms | ConsentLegitimate Interest | [insert categories of recipient of the data] | [insert retention periods] |
| Name, business address, business email, business telephone, title | To negotiate with you to enter a contract as a customer with us | Contract (If you are a sole trader)Legitimate Interest (If you are an employee of a company) | [insert categories of recipient of the data] | [insert retention periods] |
| Name, business address, business email, business telephone, title | To communicate with you as one of our customers | Contract (If you are a sole trader)Legitimate Interest (If you are an employee of a company) | [insert categories of recipient of the data] | [insert retention periods] |
| Name, business address, business email, business telephone, title | To send you marketing communications | ConsentLegitimate Interest | [insert categories of recipient of the data] | [insert retention periods] |
| Name, business address, business email, business telephone, title, payment details | To fulfil our obligations to you as one of our customers in relation to your contract with us | Contract (If you are a sole trader)Legitimate Interest (If you are an employee of a company) | [insert categories of recipient of the data] | [insert retention periods] |
When we rely on the lawful basis of legitimate interest to process your personal data, we must tell you what these legitimate interests are. The legitimate interests we rely on are as follows:
- In relation to our contract with your organisation [insert details]
- In relation to sending marketing messages to your organisation [insert details]
- [insert details]
Where you have given us your consent to use your personal information, you have the right to withdraw this consent at any time. You may do this by contacting us as described in the “Contact Details” section above.
Please note that the withdrawal of your consent will not affect any use of the data undertaken before consent is withdrawn, and we may still be entitled to hold and process relevant personal information on bases other than consent. Withdrawing consent may also have the same effects as not providing the information at all, for example, we may no longer be able to provide certain services to you.
In some cases, you will have a legal, contractual, or other, requirement or obligation to provide us with your personal information. If you do not provide us with the requested personal information, we may not be able to properly perform our contract with you or comply with legal obligations. In cases where you are not under obligation to provide such information, failing to provide it may still mean we are not able to properly perform our contract with you.
- Recipients of Personal Data and International Transfers
The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC is required to transfer the personal information provided by its service users to third parties to fulfil contractual obligations.
Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.
Appropriate safeguards for international transfers are:
- Adequacy decisions
- International Data Transfer Agreements (IDTA)
- Standard Contractual Clauses (SCC)
Please contact us using the details found in the “Contact Details” section for more information on our use of international transfers.
The following are categories of recipients that service user information could be transferred to:
| Data Processor | Nature of Processing | Categories of Personal Data | Location of Data | Security Measures | Transfer Safeguard |
| Microsoft O365 | Cloud productivity apps | Personal data is contained in emails created by service user and stored in applicable cloud products. | UK | Microsoft compliance | |
| Typeform | Website hosting provider | Personal data contained in message forms created by service user and stored in applicable cloud products. | UK | Typeform compliance | |
| MailChimp | Email platform | Personal information stored in e-mail marketing platform. | USA | MailChimp compliance |
In some circumstances, such as under a court order, we are legally obliged to share information. We may also share information about you with third parties including government agencies and external auditors. For example, we may share information about you with HMRC to collect tax.
- Your Rights In Relation To This Processing
As an individual, you have certain rights regarding our processing of your personal data, including a right to lodge a complaint with the Information Commissioner as the relevant supervisory authority.
Some of these rights are ‘absolute rights’, meaning you can exercise these rights as and when you like. Others are ‘qualified rights’, meaning certain conditions must be met for you to exercise these rights, or we can apply specific exemptions to you being able to exercise these rights.
Right of Access (absolute): You have the right to obtain confirmation from The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC as to whether personal data concerning you are being processed and, where that is the case, access to that data.
Right to Rectification (absolute): You have the right to oblige us to rectify inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed by providing a supplementary statement.
Right to Erasure (Right to be Forgotten) (qualified): You have the right (under certain circumstances, but not all) to oblige us to erase personal data concerning you.
Right to Restriction of Processing (qualified): You have the right (under certain circumstances, but not all) to oblige us to restrict the processing of your personal data. For example, you may request this if you are contesting the accuracy of personal data held about you.
Right to Data Portability (qualified): You have the right (under certain circumstances, but not all) to oblige us to provide you with the personal data about you in a structured, commonly used, and machine-readable format.
You also have a right to oblige us to transmit those data to another controller.
Right to Withdraw Consent (absolute): If the lawful basis for processing is consent, you have the right to withdraw that consent.
Right to Object to Direct Marketing (absolute): Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
Rights in Relation to Automated Decision-Making and Profiling (qualified): The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC does not perform any automated decision-making based on personal data that produces legal effects or similarly affects you.
If you wish to exercise any of your rights concerning your personal data, you should contact The UK Surf & Skate Expo Ltd & Wavelength T/A Surf Media CIC’s Data Protection Officer at the address shown above. If you are not satisfied with the response you receive, you have the right to lodge a complaint with the supervisory authority. In the United Kingdom this is Information Commissioner’s Office:
| Information Commissioner’s Office |
| Telephone: 0303 123 1113 Email: [email protected] Web: https://ico.org.uk/for-the-public/ Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details the “Contact Details” section above.