1 What information do we collect from you?
1.1 In order to provide a better service to you, we may collect and process the following data about you: • Information that you provide by filling in forms on our main website or associated white label sites. This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information at other times, for example in connection with a promotion or if you report a problem with our site. • If you contact us, we may keep a record of that correspondence. • We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them. • Details of transactions you carry out through our site and of the fulfilment of your orders. • Details of your visits to our site and the resources that you access. 1.2 We only retain personal data for so long as it is necessary. Data may be archived as long as the purpose for which the data was used still exists. This is currently 3 years from the date your membership or booking expires.
2 Why do we collect this information?
2.1 The purposes for which information may be used by us inside and outside of the European Economic Area include: • In order for us to be able to provide to you our service or product, which you have agreed to. • Ensuring that content from our site or App is presented in the most effective manner for you. • Providing you with alerts, newsletter, education materials or information that you requested or signed up to. • Allowing you to participate in interactive features of our service, when you choose to do so. • Complying with laws and regulations applicable to us or any of our affiliates inside or outside of the EEA. • Legal proceedings, including collecting overdue amounts and seeking professional advices. • Researching, designing and launching services or products including seminars/ events/ forums. 2.2 DragonPass International collects the minimum amount of personal data necessary in order to process the tasks described above. No irrelevant personal data is stored on the company’s systems.
3 Who might we share your data with?
3.1 We will keep the personal data we hold confidential but may provide information to: • Personnel, agents, advisers, auditors, contractors, financial institutions, and service providers in connection with our operations or services. • Our overseas offices, affiliates, business partners and counterparts (if any). • Persons under a duty of confidentiality to us. • Persons to whom we are required to make disclosure under applicable laws and regulations in or outside of the European Economic Area (EEA); or • Actual or proposed transferees or participants of our services in or outside the EEA. 3.2 As an entity, DragonPass operates businesses both inside and outside of the EEA. These other factions of our business are based in China, Hong Kong, Singapore and South Africa. We require all service providers to process your information in a secure manner which is in accordance with updated data protection regulations. We utilise standard means under EU law to legitimise data transfers outside of the EEA.
4 What do we do with your data?
5 How long to we keep hold of your information?
5.1 Once your data is held on our system we intend to hold this data for 3 years after the date of membership or booking expiry. Customers may request deletion of their personal data from DragonPass by contacting us on the phone number or email below.
6 How can you access the information DragonPass holds about you?
6.1 Under the General Data Protections Regulations (GDPR), individuals have the right: • To check whether we hold personal data about you and to access such data. • To require us to correct, as soon as reasonably practicable, any data relating to you that is inaccurate. • To ascertain our policies and practices in relation to personal data and the kind of personal data held by us; and • To object to the use of your personal data for marketing purposes. We shall not use your personal data for marketing purposes after you communicate your objection to us. • To request the deletion of any personal data which the company (DragonPass International Ltd) may hold for that specific person. 6.2 You may exercise your opt-out right by notifying us if you wish to object to the use of your personal data for direct marketing purposes. Please send requests for such objections, access to data, correction of data, information regarding policies and practices and kinds of data held, questions or complaints to the details found in the ‘how to contact us’ section. 6.3 In accordance with the terms of the GDPR, we have the right to and may charge a minimum fee for processing any data access request.
7 Payment information
7.1 When making a payment with DragonPass you do so through the Stripe Checkout Gateway. In order to make a payment you will be required to pass your card number, expiry date and CVV code through this gateway. None of your card details will be stored on the DragonPass systems. This information will be solely retained in an encrypted format by Stripe.
9 How to contact us
Email: firstname.lastname@example.org Telephone: +44 (0)161 929 8844 Write in: Data Protection Officer Address: 173a Ashley Road, Hale, Cheshire, United Kingdom, WA15 9SD If you are unsatisfied with our response, you can contact the Information Commissioner’s Office (ICO). Further information can be found at https://ico.org.uk/.