Flex-e-card Data Protection Statement
1. What do we collect?
Flex-e-card Limited, (“Flex-e-card”), is a UK company and the data controller of the data you provide to us. Flex-e-card’s company registration number is 11321821 and its registered office address is; 11 Brindleyplace, 4th Floor, Birmingham, England, B1 2LP.
Unless otherwise agreed with you, we will only collect basic personal data about you which does not include any special categories of personal information, (often referred to as ‘sensitive personal data’). This information may however include such data as your name and address.
2. Why do we need this data?
We may require data from you in order to:
2.1. Deliver the products you have ordered from us to the correct person, address, email address and/ or telephone number;
2.2. Provide you with customer services in accordance with our terms and conditions of sale;
2.3. Protect our customers, our clients and our business from fraud and other financial crime through the operation of customer due diligence checks;
2.4. Properly administer access to our systems, products and services;
If you do not provide us with the information we require, this may prevent us from being able to sell or distribute a gift card to you, limit our ability to assist you in the event that you contact us with an enquiry or prevent you from being able to access our systems, products or services.
We will not collect any personal data from you that we do not need in order to provide the services we have agreed to provide you with or to fulfil our own legitimate interests.
3. What do we do with this data?
The personal data we collect from you may be processed by:
3.1. Our staff here in the UK;
3.2. Representatives of your chosen shopping centre(s);
3.3. Our data processing partner, Global Processing Services Limited, (“GPS”). GPS’ company registration number is 131101V. GPS stores and processes data in the Isle of Man. The Isle of Man is the recipient of an adequacy decision of the European Commission; this means that the European Union is satisfied that data stored and processed in the Isle of Man is protected adequately;
3.4. Our web – development partner, Thought Consultancy Limited, (“Thought”). Thought’s company registration number is 4313082;
3.5. Our fulfilment partner, NiteCrest Limited, (“NiteCrest”). NiteCrest’s company registration number is 3215488;
3.6. Our payments processing partner, Sage Pay Europe Limited, (“Sage Pay”). Sage Pay’s company registration number is 7492608;
3.7. Our e-KYC partner, Capita Secure Information Solutions Limited, (“Capita”). Capita’s company registration number is 1593831;
No other third parties will have access to your data unless you have given your consent, or there is a legal obligation for us to provide such access. Please be aware that we may store information on a cloud – based system whose servers are located within the European Union.
We take all reasonable steps to ensure that your personal data is processed securely and more information on this can be found on our website.
4. How long do we keep this data?
We will generally keep your personal data for a minimum period of 6 years from the date on which our relationship with you ends, after which it will be disposed of securely if it is no longer required for the lawful purpose(s) for which it was obtained. Typically, the date upon which our relationship with you ends, is the date on which your gift card is fully spent, or expires, or the date upon which you discontinue use of our systems, products and services. If you consent to marketing, any information we use or share for this purpose will be kept until you notify us that you no longer wish to receive marketing.
5. Your rights
You have a wide range of rights in connection with the storage and processing of your data. If you wish to exercise one or more of your data related rights, please get in touch with us via firstname.lastname@example.org.
You also have the right to lodge a complaint with your national data protection regulator. Further information on lodging a complaint can be found online.
We would like to send you information about our own products and services however we will only do so if you provide your consent. We would also like to share your data with your chosen shopping centre in order that they can send you information about gift card related products, services and promotions, however we will only do so if you provide your consent. You have the right to withdraw consent to receive marketing at any time and can do so by clicking the unsubscribe button which appears at the bottom of marketing emails or by contacting email@example.com. Please note that it may take up to three working days for your withdrawal to take effect.