Gapped Online

Menu
0

Privacy Policy

1. We are Gapped

Gapped Online Limited (“Gapped” or “We”) is an online products and services provider for car-enthusiasts. For the purposes of data protection law, Gapped is the controller of the personal information we collect about you when you enter our competitions, register to join our mailing list, or purchase an item from our online Shop. If you have entered one of our competitions, alongside this Notice, please also read the terms and conditions that apply to the competition you have entered (the “Competition Terms”).

We are committed to protecting the privacy and security of your information. This Notice (“Notice”) describes our privacy practices, including how Gapped collects, protects, uses, and shares your personal information for the purposes of delivering our competition to you. If you have any questions or concerns about our privacy practices or this Notice, or if you wish to exercise your rights as a data subject (see the section entitled “What are my Rights?” for more information) you can reach us at: support@gapped.online

2. What Personal Information do we process about you, and why do we process it?

Gapped collects personal information from you so that we can administer our competitions, promote our activities, and fulfil orders placed via our online Shop. The table below outlines:

  • What personal information we process.
  • Why we process it.
  • Our “lawful basis” for processing it, as required by certain laws, including the General Data Protection Regulation (“GDPR”) or the equivalent legislation in the UK (the “UK GDPR”).
  • How long we will keep it for.
What Personal Information do we Process?Why do we Process it?What is our lawful basis?How long do we keep it for?
Note: We will not retain your personal information for any longer than necessary. These retention periods are subject to compliance with applicable laws.
    Full Name
    Email Address
    Date of Birth
    Postal Address
    Phone Number    		To administer competitions, including prize fulfilment.Performance of the Competition Terms.6 months after prize fulfilment
    Full Name
    Email Address
    Date of Birth
    Location    		To send you direct marketing (for example, to tell you about Gapped competitions, news, events, products, or services).Your consent (where required by law);

    Our legitimate interest in sharing competitions, news, events, products, or services we think will interest you, subject to your right to opt-out at any time.
    		Until you withdraw consent or object to this processing activity (as described in section 3), as appropriate.
    Full Name
    Email Address
    Postal Address
    Phone Number    		To respond to your enquiries, and for other customer service purposes.Performance of the Competition Terms.As necessary to deal with your enquiries and for a limited period thereafter to deal with any follow-ups
    Full Name
    Email Address
    Date of Birth
    Postal Address
    Phone Number    		To comply with applicable laws and regulations.To comply with applicable laws.In line with local laws governing our retention of your personal information.
    Full Name
    Email Address
    Date of Birth
    Postal Address
    Phone Number
    IP Address    		To manage, protect against and investigate fraud, risk exposure, claims and other liabilities;Our legitimate interest in preventing and detecting fraud, and other threats to the integrity or security of the platform we use to host our competitions.In line with local statute of limitation laws to defend and manage claims (e.g. in the UK, six years) from the end of the calendar year that our engagement with you has ended.
    Full Name
    Email Address
    Date of Birth
    Postal Address
    Phone Number    		To the extent we deem it necessary or appropriate, to enforce or apply our rights under our agreement with our competition entrants, and/or protect the property, rights or safety of our entrants, Gapped, or others.Performance of the Competition Terms.

    Our legitimate interest in establishing, exercising, or defending legal rights and claims
    		In line with local statute of limitation laws to defend and manage claims (e.g. in the UK, six years) from the end of the calendar year that our engagement with you has ended.
    Full Name
    Email Address
    Postal Address
    Phone Number
    Transaction Information    		To accept, administer, and fulfil your orders placed via our online Shop.Performance of the contract between you and us.In line with local statute of limitation laws to defend and manage claims (e.g. in the UK, six years) from the end of the calendar year that our engagement with you has ended.

    3. Marketing

    You can change your marketing preferences at any time by contacting us. Where we’re marketing to you on the basis of your consent, you can withdraw your consent at any time. Note that withdrawing consent may mean we’re not able to continue providing you with some or all of our services.

    To opt-out of emails , please follow the opt-out instructions contained in the email. If you opt-out of receiving our marketing emails, we may still need to send you emails about your account or any requests you have made to us. Please note that it may take up to 10 business days for us to process opt-out requests.

    Where we have another lawful basis for processing, we will continue to process your personal information for other purposes – for example, we may process information based on necessity to perform a contract. Note that even if you have opted out or withdrawn your consent, there is a chance that our marketing activities may also reach you indirectly, by way of general marketing communications e.g., post or non-targeted online adverts.

    4. Who do we share your Personal Information with?

    We may share your personal information with third parties, as follows:

    • For our Service Providers to deliver their services to us. We may disclose the information we collect from you to third party vendors, technology and other service providers, contractors or agents, including our payment services provider, our platform provider, our order fulfilment company, and our prize fulfilment company who perform functions on our behalf, or are engaged with us;
    • For Business Transfers. If we are acquired by or merged with another company, or if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the information we have collected from you to the other company and professional advisors involved in the transaction;
    • In Response to Legal Process. We also may provide the information we collect from you in order to comply with the law, a legal proceeding, court order, or other legal process meaning your personal information could be shared with courts, parties to litigation and professional advisors;
    • To Protect Us and Others. We also may provide the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of the Competition Rules, or as evidence in litigation meaning we could share your information with government authorities such as the Police or regulatory bodies.

    5. International Transfers

    If we transfer your personal information out of the United Kingdom or the European Economic Area, we implement appropriate safeguards in accordance with applicable data protection laws, e.g., by sending to countries that have an adequacy decision by the European Commission and/or the UK Information Commissioner’s Office or implementing appropriate safeguards such as the UK Addendum to the EU’s Standard Contractual Clauses. If you would like to find out more about any such transfers, please contact us through the contact details provided in section 1 of this Notice.

    6. How Do We Protect Your Personal Information?

    We comply with our legal obligations by keeping personal information up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal information from loss, misuse, unauthorized access and disclosure and by employing physical, technical and administrative protections and procedures to help prevent unauthorized access to, disclosure, misuse, or loss of the data collected for our competitions.

    Your personal information is stored on secure servers, and only specific, authorized personnel have access to it. Such personnel work on password-protected computers and are subject to confidentiality and security policies and procedures. The security technology is updated and tested on an on-going basis. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. If you have any questions concerning the steps taken by Gapped to protect the security of the data you provide to us, please reach out to us through the contact details provided in section 1 of this Notice.

    7. Your Rights

    You have rights with respect to your personal information. Please note that your ability to exercise certain rights (objection; portability) will depend on the basis on which your personal information is processed (see section 2), and the exercise of all rights may be subject to exemptions or restrictions under applicable law – we will advise you if we rely on these. We may also need to ask you to provide evidence of your identity before complying with a request.

    Right of access: You can ask us to confirm whether we are processing your personal information and to give you a copy of the personal information we process, with certain supporting supplemental information (to the extent that it has not already been provided to you in this Notice). For more information, see Article 15 GDPR / UK GDPR.

    Right to rectify and complete personal information: You can ask us to rectify inaccurate information. We may seek to verify the accuracy of the data before rectifying it, and although we strive to maintain the accuracy of your personal information we do ask you to notify us immediately of any changes to your data (such as changes in address), so that we can ensure that your personal information is up-to-date. For more information see Article 16 GDPR / UK GDPR.

    Right of erasure: subject to certain legal restrictions, you may request us to erase your personal information where the personal information such as when it is no longer necessary for the purposes for which we collected it, where you’ve withdrawn consent and we don’t have another lawful basis to process your personal information, where you’ve objected to the processing, where the personal information has been unlawfully processed or has to be erased for compliance with applicable law. Your right to erasure is subject to restrictions. For example, we may not erase any personal information that we have to keep further due to legal requirements. Data that we need to assert, exercise, or defend legal claims are also excluded from your right to erasure. For more information see Article 17 of GDPR / UK GDPR.

    Right of restriction: You can ask us to restrict (i.e., keep but not use) your personal information, but only where: its accuracy is contested, to allow us to verify its accuracy; the processing is unlawful, but you do not want it erased; it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; you have exercised the right to object. We can continue to use your personal information following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

    Right to (data) portability: If our processing is carried out by automated means and on the basis of your consent, you can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it ‘ported’ directly to another data controller, if this is technically feasible.

    Right to object: You have the right to object to the processing of your personal information during processing based on our legitimate interests. If we process data on the basis of a legitimate interest, you can object to the processing at any time for reasons that arise from your particular situation. We will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

    Right to withdraw consent: You can withdraw your consent in respect of any processing of personal information which is based upon a consent that you have previously provided.

    Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement. The supervisory authority in the United Kingdom is the Information Commissioner’s Office. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority so please contact us in the first instance using the details at the start of this Notice.

    8. Third Party Websites

    Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

    9. Use of our services by children

    Our website is not intended for the use of children under the age of eighteen. We ask that children do not provide personal information through our website. If we become aware that we have collected the information of a child, we will delete that information from our records.

    10. Changes To This Notice

    We may change this Notice from time to time, so please be sure to check back periodically. If we make any changes to this Notice that materially affect our practices with regard to the personal information we have previously collected from you, we will provide you with notice of such change by sending you an email at the address you have provided.

    Congratulations!