Privacy Policy

Last updated on: 21 May 2018

How we use your personal information

Your information will be held by Book247, which is part of Rankedin AS group. This privacy notice is to let you know how companies within the Group promise to look after your personal information. This includes what you tell us about yourself and what we learn by having you as a customer. This notice also tells you about your privacy rights and how the law protects you.

Our Privacy Promise

We promise:

  • To keep your data safe and private. 
  • Not to sell your data. 
  • To give you ways to manage and review your personal data and sharing choices at any time.

Personal information and the law
This section tells you who we are, what your personal information is, and how we get it. It explains how the law protects you by controlling what is allowed to happen to it.

1. Who we are
2. How the law protects you
3. Groups of Personal Information
4. Where we collect personal information from
5. How long we keep your personal information
6. If you choose not to give personal information
7. Cookies

The control you have
This section covers how to complain or withdraw your consent. It also tells you how you can get a copy of your personal information, or ask for it to be changed or removed.

8. How to complain
9. How to withdraw your consent
10. Letting us know if your personal information is incorrect
11. How to get a copy of your personal information
12. What if you want us to stop using your personal information?

How personal information is used
This tells you who we share personal information with. It explains what it's used for in identification and user authentication across our Group services.

13. Who we share your personal information with
14. Sending data outside of the EEA

Who we are

This section gives you the legal name of the company who holds your personal information – known as the ‘legal entity’ – and tells you how you can get in touch with us.

Rankedin AS Group is made up of two services - Book247 and Rankedin, set up on a single legal entity. You can find out more about us at www.book247.com and www.rankedin.com.

Contacting us about data privacy

Please use these details to contact us about any of the topics set out in this Privacy notice.

If you have any questions, or want more details about how we use your personal information, you can ask us using our secure online contact form.

How the law protects you.

This section sets out the legal reasons we rely on, for each of the ways we may use your personal information.

As well as our Privacy Promise, your privacy is protected by law. This section explains how that works.

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside Rankedin AS Group. The law says we must have one or more of these reasons:

  • To fulfil a contract we have with you, or
  • When it is our legal duty, or
  • When it is in our legitimate interest, or
  • When you consent to it.

When we have a business or commercial reason of our own to use your information, this is called a ‘legitimate interest’. We will tell you what that is, if we are going to rely on it as the reason for using your data. Even then, it must not unfairly go against your interests.

The law and other regulations treat some types of sensitive personal information as special. This includes information about racial or ethnic origin, sexual orientation, religious beliefs, trade union membership, health data, and criminal records. We will not collect or use these types of data without your consent unless the law allows us to do so. If we do, it will only be when it is necessary:

  • For reasons of substantial public interest, or
  • To establish, exercise or defend legal claims.

Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.

What we use your personal information for Our reasons Our legitimate interests
Serving you as a customer
To manage our relationship with you or your business
• To develop and carry out marketing activities
To communicate with you about our products and services
Your consent
Fulfilling contracts
Our legitimate interests
Our legal duty
Keeping our records up to date, working out which of our products and services may interest you and telling you about them
Developing products and services, and what we charge for them
Defining types of customers for new products or services
Seeking your consent when we need it to contact you
Being efficient about how we fulfil our legal and contractual duties
Business improvement
To test new products
To manage how we work with other companies that provide services to us and our customers
• To develop new ways to meet our customers' needs and to grow our business
Fulfilling contracts
Our legitimate interests
Our legal duty
Developing products and services, and what we charge for them
Defining types of customers for new products or services
Being efficient about how we fulfil our legal and contractual duties
Managing our operations
To deliver of our products and services
To make and manage customer payments
To collect and recover money that is owed to us
Fulfilling contracts
Our legitimate interests
Our legal duty
Being efficient about how we fulfil our legal and contractual duties
Complying with rules and guidance from regulators
Managing security, risk and crime prevention
To manage risk for us and our customers
To obey laws and regulations that apply to us
To respond to complaints and seek to resolve them
Fulfilling contracts
Our legitimate interests
Our legal duty
Complying with rules and guidance from regulators
Being efficient about how we fulfil our legal and contractual duties
Business management
To run our business in an efficient and proper way. This includes managing our business capability, planning, adding and testing systems and processes, managing communications, corporate governance, and audit
Our legitimate interests
Our legal duty
Complying with rules and guidance from regulators
Being efficient about how we fulfil our legal and contractual duties
To exercise our rights set out in agreements or contracts
Fulfilling contracts

For processing special categories of personal data
• Legal claims • Using any special categories of data as needed to establish, exercise or defend legal claims
• Consent • Telling you that we need your consent to process special categories of personal data, when that is what we rely on for doing so

Groups of Personal Information

This explains what all the different types of personal information mean, that are covered by data protection law.

We use many different kinds of personal information. They are grouped together like this. The groups are all listed here so that you can see what we may know about you. We don’t use all this data in the same way. Some of it is useful for marketing, or for providing services to you. But some of it is private and sensitive and we treat it that way.

Type of personal information Description
Financial Your financial position, status and history
Contact Your full name, address of your business and how to contact you
Socio-Demographic This includes details about your nationality
Transactional Details about payments you make to us
Contractual Details about the products or services we provide to you
Consents Any permissions, consents or preferences that you give us. This includes things like how you want us to contact you, whether you get paper statements, or prefer large-print formats
Other Identifier Your personal phone number and personal email address

Where we collect personal information from

This section lists all the places where we get data that counts as part of your personal information.

We may collect personal information about you (or your business) from other Rankedin AS Group services:

Data you give to us

  • When you apply for our products and services
  • When you talk to us on the phone or in branch, including recorded calls and notes we make
  • When you use our websites or mobile device apps
  • In emails and letters

Data we collect when you use our services
This covers two things: details about how and where you access our services, and account activity that is shown on your account history and logs.

  • Payment and transaction data
    This includes the amount, frequency, type, location, origin and recipients.
  • Profile and usage data
    This includes the security details you create and use to connect to our services. It also includes your settings. We also gather data from the devices you use (such as computers and mobile phones) to connect to our web and mobile services. We also use cookies to collect data while you are using our websites or mobile apps. You can find out more about this in our Terms of Use.

Data from outside organisations

  • We do not collect data about you from outside the organisation

How long we keep your personal information

This section explains how long we may keep your information for and why

We will keep your personal information for as long as you are a customer of Rankedin AS Group.

We may keep your data for up to 7 years after you stop being a customer. The reasons we may do this are:

  • To respond to a question or complaint, or to show whether we gave you fair treatment
  • To study customer data as part of our own internal research
  • To obey rules that apply to us about keeping records

We may also keep your data for longer than 7 years if we cannot delete it for legal, regulatory or technical reasons. As an example, we have to hold payment transfer information indefinitely;

We will only use your personal information for those purposes and will make sure that your privacy is protected.

If you choose not to give personal information

You can choose not to give us personal information. In this section we explain the effects this may have.

We may need to collect personal information by law, or to enter into or fulfil a contract we have with you.

If you choose not to give us this personal information, it may delay or prevent us from fulfilling our contract with you, or doing what we must do by law. It may also mean that we cannot run your accounts or policies. It could mean that we cancel a product or service you have with us.

We sometimes ask for information that is useful, but not required by law or a contract. We will make this clear when we ask for it. You do not have to give us these extra details and it won't affect the products or services you have with us.

Cookies

This section contains a link to our Cookies Policy

Cookies are small computer files that get sent down to your PC, tablet or mobile phone by websites when you visit them. They stay on your device and get sent back to the website they came from, when you go there again. Cookies store information about your visits to that website, such as your choices and other details. Some of this data does not contain personal details about you or your business, but it is still protected by this Privacy notice.

To find out more about how we use cookies, please see our Cookie Policy.

How to complain

This section gives details of how to contact us to make a complaint about data privacy. It also shows you where you can get in touch with the government regulator.

Please let us know if you are unhappy with how we have used your personal information.

You can contact us using our secure contact form. You also have the right to complain to the regulator, and to lodge an appeal if you are not happy with the outcome of a complaint.

In the UK this is the Information Commissioner’s Office. Find out on their website how to report a concern .

How to withdraw your consent

This section explains what to do if you no longer want us to hold or use your personal information.

You can withdraw your consent at any time. Please contact us using our secure contact form if you want to do so.

This will only affect the way we use information when our reason for doing so is that we have your consent. See the section 'Your Rights' about more generally restricting use of your information.

If you withdraw your consent, we may not be able to provide certain products or services to you. If this is so, we will tell you.

Letting us know if your personal information is incorrect

Here you can find out how to contact us if you think the information we hold for you is wrong, incomplete or out of date.

You have the right to question any information we have about you that you think is incorrect. We’ll take reasonable steps to check this for you and correct it.

If you want to do this, you can use the personal profile page in the sub-domain created for your business. You can also contact us using our secure contact form.

How to get a copy of your personal information

This section tells you where to write to us to get a copy of your personal information, and how to ask for a digital file you can use yourself or share easily with others. You can do this online or by writing to us.

You can get a copy of all the personal information we hold about you by filling in secure contact form or by requesting it from the personal profile page in the sub-domain created for your business.

When you want to share your data with outside companies

You also have the right to get certain personal information from us as a digital file, so you can keep and use it yourself, and give it to other organisations if you choose to.

If you wish, we will provide it to you in an electronic format that can be easily re-used. If you want to do this, please contact us using our secure contact form. Or by requesting it from the personal profile page in the sub-domain created for your business.

Your rights

What if you want us to stop using your personal information? This section explains about your right to object and other data privacy rights you have – as well as how to contact us about them.

You can object to us keeping or using your personal information. This is known as the ‘right to object’.

You can also ask us to delete, remove, or stop using your personal information if there is no need for us to keep it. This is known as the ‘right to erasure’ or the ‘right to be forgotten’.

There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.

We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights.

You can ask us to restrict the use of your personal information if:

  • It is not accurate
  • It has been used unlawfully but you don’t want us to delete it
  • It is not relevant any more, but you want us to keep it for use in legal claims
  • You have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it

If we do restrict your information in this way, we will not use or share it in other ways while it is restricted.

If you want to object to how we use your data, or ask us to delete it or restrict how we use it or, please contact using our secure contact form. Or by requesting it from the personal profile page in the sub-domain created for your business.

How personal information is used

Who we share your personal information with

We may share your personal information with outside organisations such as credit card providers. This is so that we can provide you with products and services, run our business, and obey rules that apply to us. Here we list all the types of organisation that we may share your personal information with.

Rankedin AS Group
We may share your personal information with other companies in Rankedin AS Group.

Authorities
This means official bodies that include:

  • Central and local government
  • Law enforcement and fraud prevention agencies.

Banking and financial services
Outside companies we work with to provide services to you and to run our business.

  • Agents who help us to collect what is owed to us
  • Other financial services companies (to help prevent, detect and prosecute unlawful acts and fraudulent behaviour)

Other services and schemes
These are organisations that we may need to share your personal information with, because of what you can do with the product or service you have with us.

  • If you are a player of a sport that is linked to a tournament and you registered to that tournament, information will be shared with the organizer and the ranking entity

General business
Outside companies we use to help grow and improve our business.

  • Organisations that introduce you to us
    This might be a club or a sport organisation for a sport that you practice

Company mergers and takeovers
We may also share your personal information if the make-up of Rankedin AS Group changes in the future:

  • We may choose to sell, transfer, or merge parts of our business, or our assets. Or we may try to bring other businesses into Rankedin AS Group.
    This is sometimes called Mergers & Acquisitions or ‘company takeovers’.
  • During any such process, we may share your data with other parties involved. We’ll only do this if they agree to keep your data safe and private.
  • If the change to our Group happens, then other parties may use your data in the same way as set out in this notice.

Sending data outside the EEA

This section tells you about the safeguards that keep your personal information safe and private, if it is sent outside the EEA.

We will only send your data outside of the European Economic Area (‘EEA’) to:

  • Follow your instructions
  • Comply with a legal duty

Please wait...