Privacy Policy
Privacy Policy - Bath Go Scheme
Privacy & Cookies
Introduction
Where the words "we", "us" or "our" are used in this document, they are all references to The University of Bath, Claverton Down, Bath, BA2 7AY, Registered Number 000644.
We treat your information very carefully and we have written this document to help you understand what information we collect, who has access to it and for what purposes.
If you are creating an account with us, or have already done so, you should read this document in connection with our Terms & Conditions.
We summarise below:
- the types of information about you that we might process;
- how and why we process it;
- who we share it with;
- how long we process it for;
- your rights in relation to the information we hold about you; and
- what to do if you have any questions or complaints.
You can withdraw your consent to us processing your information by closing your account or by emailing BathGoHelp@groups.bath.ac.uk. However, we may have other lawful grounds for processing your information (for example, to comply with our statutory or regulatory duties or the orders of a court).
We encourage you to read the remainder of this policy to understand more about how your information is used.
1. How do we collect information about you?
We collect information about you when you access our website, register to open an account with us, use our app or services, make transactions using our app or services and when you contact us.
2. What information do we collect?
We may process the following types of information about you:
(a) information that may be used to identify you - this might include your title, name, postcode, email address, mobile phone number, date of birth and any other data you use to set up your account, to log-in or to use our services.
(b) information about how you transact using our app or services - this might include the goods or services you purchase, the rewards and gifts you earn and redeem (and when and where you do so), the transaction ID, the price paid or discount given, the location and time of the transaction; it might also include information about prize draws and promotions you participate in and your preferences including language preferences, notification settings and favourite outlets;
(c) network, hardware and website - information that we obtain from your device or browser when you connect to the website or use our app (such as IP address, operating system and device identifiers). This also includes the use of cookies which we may place on your browser or device to help collect this information or improve your experience on our website. For more information on cookies, please see our university Cookie Policy.
(d) payment information - small amounts of information about your payment card (the last four and first four digits of the card number, the card type and the expiry date); and
(e) surveys - information that you have opted to provide to us in response to customer research and satisfaction surveys.
3. What do we use your information for?
We use your information:
(a) to provide our services, including:
- processing and managing your application for and use of our services and participation in any reward or offer programmes;
- processing transactions that you initiate using our services;
- communicating with you about your orders or purchases, our services, your account with us and to provide support where you contact us;
- communicating with you about any prize draw, reward or offer programmes you participate in using our services;
- recommending things we think you’ll like such as nearby outlets (where you have switched on your location settings), places you like to shop and the things you like to buy; and
- providing electronic receipts;
(b) to improve our services, including:
- measuring the performance of our app and services;
- conducting statistical analysis about how you and other users of our services make use of those services. We might do this to make improvements to our services or to develop new services, but we will not share statistical analyses about you individually with anyone else;
- providing software updates so that they deliver improved features and functionality (to make our services better) or fixing bugs in our software;
- changing how we run our business, organise ourselves and deliver the services to you; and
- personalising parts of the service to your tastes and preferences, including the places you like to shop and the goods you like to buy;
(c) to communicate with you about marketing or promotional campaigns (but only where you have told us you want to receive these communications and you have not told us to stop sending you messages), including:
- sending you messages about sales, promotions or prize draws offered by us;
- personalising parts of the service to your tastes and preferences, including the places you like to shop and the goods you like to buy; and
- creating personalised promotions based on your purchasing preferences and behaviour;
(d) for business, regulatory, and legal purposes, including:
- dealing with any requests you make or content you submit;
- getting in touch if we need to tell you about something, like a change to our policies or issues with our apps or services;
- complying with any court order or applicable law, regulation or governmental request (e.g. tax authorities) and to protect our rights or property, or the security or integrity of our business or services.
4. How do we protect your information and who do we share it with and why?
4.1 We hold personal data about you at The University of Bath and with the assistance of third-party service providers. We use third party service providers to perform a number of functions on our behalf including to host our platform, to send messaging on our behalf, to provide support services to you and to process transactions for the purchase of goods and services.
4.2 Your personal data will not be processed outside the UK by our staff or the staff of our third-party service providers.
4.3 Whenever we share your personal data with third parties, we will take all reasonable steps to ensure that your privacy rights continue to be protected under the applicable data protection legislation. By sharing your personal data with us and interacting with the services, you consent to the storing, processing and/or transfer described in paragraphs 4.1 and 4.2 above.
4.4 We take reasonable measures, including administrative, technical and physical safeguards, to protect your personal data from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction.
4.5 We do not store customer bank card details, and apply information security practices to keep card data safe as it is in transit through our app:
(a) Whenever you enter your card information into our app, those details are encrypted and passed directly to our payment service provider ("PSP").
(b) Upon receiving your information, our PSP sends us a token (consisting of random letters and numbers) and small amounts of information about your payment card (the last four digits of the card number, the card type and the expiry date).
(c) The token (not your card details) is then used to effect payments for the products or services you purchase through our app.
(d) To ensure the required level of payment security, we will always use a PCIDSS compliant payment gateway to store, process and transmit your payment card data.
(e) We reserve the right to change our payments gateway at our sole discretion, provided any such payment gateway meets this security compliance level.
4.6 We will not use your information for any other purpose than to provide the agreed services to you and we will not share, sell or otherwise pass on your data to any other person, except the third party service providers necessary to enable the services to be provided to you.