![NAX logo long [OW]](https://nerfax.co.uk/wp-content/uploads/2023/10/NAX-logo-long-OW.svg){kind=logo}
PRIVACY POLICY
NERF ACTION XPERIENCE - Privacy Policy
We have taken steps to ensure that we adopt best practice under General Data Protection Regulation (GDPR) to protect the privacy of individuals. Our goal under GDPR is to maintain and, whenever possible, improve on the minimum standards for the assurance of your rights to data privacy and protection.
On this page you can find out how to contact us to find out more about your data and also your privacy Rights and how we will act.
ACCESSING YOUR DATA
We recognise our responsibility in looking after your data. You can ask Us for a copy of the data We hold, have it corrected, sent to a third party or deleted (subject to Our need to hold data for legal reasons). We manage this process by executing a ‘Data Subject Access Request’ (DSAR) procedure in line with GDPR requirements when you contact us. You can request a Data Subject Access Request Form by contacting us:
By Post:
Data Protection Officer,
Nerf Action Xperience,
Unit C2-C6 Trafford Palazzo,
Manchester
M17 8AS
By Email:
We will respond within one calendar month of receipt of this DSAR. We also reserve the right to increase the response time to three months if we consider the request to be complex and time consuming. If you are not satisfied you have the right to contact the Information Commissioner’s Office (ICO).
YOUR DATA PRIVACY RIGHTS
The right to be informed We will inform you through privacy statements whenever we collect personal data from you. A privacy statement will tell you what we collect, the purpose for collecting it, the data items that we need to process, how long we will keep your data for, and how you can access your data.
In the event of any data breach, including the hack, loss, destruction, alteration or unauthorised disclosure of personal data, we will inform you within 72 hours of us first becoming aware of the data breach. The right to rectification
We have implemented processes that ensure your personal data remains accurate and up to date. In the event data is deemed not accurate and you wish this data to be amended, you must contact us. You must specify which records you wish to be updated.
The right to erasure At any time you may request that your personal data is erased from our records. We will erase all records in accordance with our storage and retention policy. You must provide details of the record you wish to be erased.
The right to restrict processing You have the right to block or restrict the processing of your personal data. This means that we will store your personal data, but will not process it for further use in our marketing services. We will restrict processing under the following circumstances:
Where you contest the accuracy of the personal data, we will restrict processing until we have verified the accuracy of the personal data with you.
Where you object to the processing (where it was necessary for the performance of a public interest task or purpose of legitimate interests) we will consider whether our businesses lawful basis override those of you as the individual. We will store the data, but will not undertake any further processing until both parties have agreed that our business use is within our lawful basis.
When processing is unlawful, and the individual opposes erasure and requests restriction instead, we will store the data and will not undertake further processing. We refer you to the right to erasure policy, and will implement our erasure policy upon receiving your request. Where we no longer need the personal data but you require the data to be retained to establish, exercise or defend a legal claim, you must state details of the record you wish to be retained. We will automatically delete personal data records in accordance with the consent policy. However, should you wish this data to be retained in order to establish, exercise or defend a legal claim, then we will store and retain this data until the legal claim has been resolved. We will inform you when we decide to lift a restriction on processing.
The right to data portability*
You have the right to obtain and reuse your personal data for your own purpose. We will provide you with your personal data or move, copy or transfer that data to another business in a safe and secure way.
The right to data portability only applies:
* to personal data you have provided us;
* where the processing is based on your consent or for the performance of a contract.
We will provide this data to you or the business to which you require your personal data to be transferred, within one month of receiving instruction from you. However, if we decide that the data request is complex, we reserve the right to increase the response time to three months. Where this is the case, we will provide an explanation.
Should you wish your data to be sent to you or transferred to another business, then you must contact the Data Controller to obtain a copy of a Data Subject Access Request form. We will provide the personal data in a structured, commonly used and machine readable format. Examples of appropriate formats include CSV and XML files. Where we are unable to transfer the data to another business due to technicalities or restrictions, then we will send the personal data to you for you to complete the transfer. This service will be provided free of charge.
The right to object
You have the right to object to any processing undertaken for the purposes of direct marketing (including profiling). We will stop processing for direct marketing as soon as we receive your objection. We will stop processing from the date of receipt of your objection.
The right not to be subject to automated decision-making including profiling
We do not perform automated decision-making using your personal data to profile, nor do we supply the information we hold to third parties for use in analysis or prediction.
Using your data for marketing purposes
This policy outlines how we (Nerfax Barton Ltd) collect, use, and share data with third parties for retargeting purposes. These third parties include marketing platforms such as Klaviyo, Google Ads and Meta (Facebook and Instagram ads).
Personal data is any information such as a name, email address, or postcode. Data from your booking, should you choose to opt into marketing, is used for advertising purposes. This is done via social media platforms and analytics providers.
Purposes of using your information include to improve our services, personalising the content and ads that we show, and to better understand the demographics and interests of our customers.
We do not sell or rent the personal data we collect to any third parties for their own marketing purposes. We may share personal data with third parties for the purpose of providing our services, such as hosting our website or advertising. However, we only share the minimum amount of personal data necessary for these purposes and require that these third parties protect the personal data in accordance with this policy.
We take reasonable measures to protect the personal data we collect from unauthorised access, use, or disclosure. However, we cannot guarantee the security of personal data, and you provide your personal data at your own risk.
If you have any questions or concerns about our use of personal data, please contact us at
SMS Terms of Service
Mobile Message Service Terms and Conditions
Last updated: January 2023
The NERF Action Xperience mobile message service (the "Service") is operated by Nerfax Barton Ltd, (“NERF Action Xperience”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes. We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your contract provider. Message and data rates may apply. Text messages may be sent using an automatic telephone dialling system or other technology. Your consent to receive autodialed marketing text messages is not required as a condition of purchasing any goods or services. If you have opted in, the Service provides updates, alerts, reminders (e.g., booking and waiver form reminders) and information (e.g., order updates, account alerts, etc.), as well as promotions, specials, and other marketing offers (e.g., cart reminders) from NERF Action Xperience via text messages through your provider to the mobile number you have given. Message frequency varies. Text STOP or click the unsubscribe link in any text message to cancel at any time. You'll receive a one-time opt-out confirmation text message. If you have subscribed to other NERF Action Xperience mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms. For Service support or assistance, reply to any text from NERF Action Xperience with HELP, or email info@nerfax.co.uk. We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honouring requests made in such messages. The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. You agree to maintain accurate, complete, and up-to-date information with us related to your receipt of messages. To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.
Cookies
Cookies record certain information stored on your hard drive. This information enables us to generate statistics based on data from visitors to our site and suggest products that might interest you according to the items that you selected when you previously visited the site. Cookies do not contain any confidential information about you.