PRIVACY POLICY: THE WILDER COLLECTIVE LTD
Effective date: 1st May 2024
1. Introduction
The Wilder Collective Ltd ("Company," "we," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information when you use our website, located at https://thewildercollective.co.uk/, and the associated online community and services (collectively the "Service"). Please read this policy carefully.
2. Data Controller
The Wilder Collective Ltd is the data controller responsible for the processing of your personal data. You can contact us regarding data privacy matters at:
Email: info@thewildercollective.co.uk
3. Types of Data Collected
We may collect the following types of information when you use the Service:
Personal Identifiers: Name, email address, and potentially your business name.
Profile Information: Any additional details you choose to provide within your member profile, such as areas of expertise or interests.
User Content: Text, images, or other content you post within the community areas of the Service.
Usage Data: Information about how you interact with our website, such as pages visited, features used, and time spent on the site. This may include IP addresses and device information for analytics and security.
Payment Information: Payment details are processed securely by our third-party payment provider [Name of Provider]. We do not directly store full credit card information.
Communications: If you contact us, or if (within the service) you choose to message other members, records of these communications may be retained.
4. Purposes of Data Processing
We process your personal data to:
Provide the Service: Create and manage your membership account, and facilitate online interactions within the community.
Communicate with You: Send service-related updates, newsletters (only with your explicit consent), and respond to your inquiries.
Improve the Service: Analyze usage patterns (often anonymized) to understand how to enhance the website and offerings.
Process Payments: Facilitate subscription fee transactions.
Personalize Your Experience: Potentially tailor recommendations or displayed content (if such features are implemented).
Security and Fraud Prevention: Detect and mitigate unauthorized activity or security breaches.
Legal Compliance: Fulfill obligations where required by law, such as tax reporting or responding to valid requests from authorities.
5. Lawful Basis for Processing
We process your data primarily based on:
Consent: You will be asked to explicitly consent to data uses like marketing emails.
Contract Performance: Processing necessary to provide the Service you've subscribed to.
Legitimate Interests: In limited cases, such as website analytics or security measures, we have a legitimate interest in processing, balanced against your privacy rights.
6. Data Sharing
We limit data sharing to the minimum necessary to operate the Service effectively. This may include:
Website Hosting Providers: To store website data and enable functionality.
Payment Processors: To securely handle subscription billing.
Email Marketing Services: If used, and only with your opt-in consent.
Legal or Regulatory Reasons: We may be obligated to disclose data if required by law or to defend our legal rights.
We carefully vet third-party service providers to ensure their compliance with data protection standards.
7. International Data Transfers
Our Service is primarily operated in the United Kingdom. If you access the Service from outside the UK, please be aware that your information may be transferred to, stored, and processed in the UK or where our third-party service providers are located. We ensure appropriate safeguards are in place, such as using providers in countries deemed "adequate" by the EU Commission or employing Standard Contractual Clauses.
8. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal or tax obligations. Generally, this means:
Active Account: Your data is retained while your membership is active.
Inactive Account: If your account becomes inactive, we may maintain basic profile information and anonymized usage data for analytical purposes.
Account Closure: Upon your request, we will delete your account and associated data, except where retention is required by law or for legitimate business purposes (e.g., billing records).
9. Data Security
We maintain appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, misuse, or loss. These measures include, but are not limited to:
Encryption: Data at rest and in transit may be encrypted.
Access Controls: Limiting staff access to data on a need-to-know basis.
Secure Systems: Using reputable service providers with strong security practices.
Incident Response: Having procedures in place in the event of a data breach.
While we strive to protect your information, please note that no system is entirely immune to security risks.
10. Your Data Subject Rights
Under the General Data Protection Regulation (GDPR) and related UK laws, you have the following rights regarding your personal data:
Right to be Informed: This Privacy Policy informs you about our data practices.
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request corrections if your data is inaccurate.
Right to Erasure (Right to be Forgotten): You may request deletion of your data within limits, such as those related to legal obligations.
Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
Right to Data Portability: You can request to receive your data in a structured, machine-readable format.
Right to Object: You have the right to object to certain types of processing, including direct marketing.
Rights Related to Automated Decision-Making: We confirm that we do not use automated decision-making systems with significant effects on you.
11. Children's Data
Our Service is not designed for individuals under 18 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us immediately.
12. Cookie Policy
We use cookies and similar technologies to improve your experience on our website. Cookies are small text files stored on your device. Our Cookie Policy provides details on:
Types of cookies used (e.g., essential, analytics, preferences).
How to manage or opt-out of non-essential cookies.
Please refer to the Cookie Policy for more information.
13. Complaints Procedure
If you have any concerns or wish to exercise your data subject rights, please contact us using the details provided in Section 2. We strive to address your request promptly and fairly.
You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO): https://ico.org.uk/concerns/
14. Policy Updates
We may update our Privacy Policy periodically to reflect changes in our practices or legal requirements. If we make significant changes, we will notify you via email or a prominent notice on our website.
15. Direct Marketing
We may, with your explicit consent, use your email address to send newsletters or occasional promotional content about The Wilder Collective. You will always have the option to unsubscribe from these communications with clear opt-out instructions in each message.
16. Third-Party Websites
The Service may contain links to other websites. These third-party sites have their own privacy policies, which we are not responsible for. Please review their policies before providing personal information to those websites.
17. US Privacy Laws
The California Consumer Privacy Act (CCPA) grants certain rights to California residents regarding their personal information. These rights include:
The right to know what personal information we collect, use, and disclose.
The right to delete your personal information, subject to certain exceptions.
The right to opt-out of the sale of your personal information (we do not currently sell personal information).
If you are a California resident, you can exercise your rights by contacting us using the information provided in Section 2.
18. Automated Decision-Making
We do not use automated decision-making processes that produce legal effects or have a similarly significant impact on you as a user.
19. Data Protection Officer
[If Applicable:] We are required by law to appoint a Data Protection Officer (DPO). Their contact information is:
Name:
Email:
The DPO can be contacted for any questions or concerns related to this Privacy Policy and your data processing rights.
20. Legal Basis for Processing Under Specific Laws
Depending on where your users are located, it may be beneficial to include brief summaries regarding data rights as explained by relevant laws such as:
UK Data Protection Act 2018: The main law governing data protection in the UK complying with the GDPR.
21. Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. We will notify you of any changes via email or a prominent notice on our website. Your continued use of the Service following such notice constitutes your acceptance of the amended Privacy Policy.