Privacy policy

1. About this privacy policy

This privacy policy explains how we collect, use, store and protect your personal data when you use our website.

The website www.rolley.io (the "Site") is operated by Rolley Ltd ("we", "us", "our"), a company incorporated in England and Wales under company number 13030695. Our registered office is DMC 01, County Way, Barnsley, S70 2JW.

We are committed to protecting your privacy and complying with our obligations under the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR) and any other applicable data protection legislation (together, Data Protection Law).

When you interact with us or use the Site, we act as the data controller of your personal data. This means we determine how and why your personal data is processed.

This policy explains:

• What personal data we collect
• How and why we use it
• How long we keep it
• The rights you have in relation to your personal data

Personal data means any information relating to an identifiable individual. Processing means any operation performed on personal data, including collection, use, storage, disclosure or deletion.

We may update this policy from time to time by posting an updated version on the Site. Any changes will take effect from the date they are published.

2. Contact information

If you have any questions, concerns or requests relating to this privacy policy or our use of your personal data, you can contact:

Daniel Barrow
Email: dan@rolley.io
Telephone: 01226 596967

3. What information do we collect?

We collect and process the categories of personal data set out in the table at the end of this policy. This may include information you provide directly to us and information collected automatically when you use the Site.

4. How do we use your personal data?

We use your personal data only where permitted by Data Protection Law and for the purposes described in the table at the end of this policy. These purposes include responding to enquiries, operating and improving the Site, and complying with legal obligations.

5. Third party links

The Site may contain links to third-party websites that are not operated or controlled by us. We are not responsible for the privacy practices or content of those websites.

We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal data.

6. Your rights

You have a number of rights under Data Protection Law in relation to your personal data. We will respond to all valid requests and may need to verify your identity before taking action.

Depending on the circumstances, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete personal data;
• Request erasure of your personal data;
• Object to our processing of your personal data;
• Request restriction of processing;
• Request portability of your personal data in a machine-readable format; and
• Withdraw consent where processing is based on consent.

These rights are subject to certain limitations under Data Protection Law, for example where we are legally required to retain your personal data.

Your right to object

You have the right to object to our processing of your personal data.

Where we process your personal data for direct marketing purposes, you can object at any time and we will stop processing your data for those purposes immediately.

Where we process your personal data based on our legitimate interests or in the public interest, we will stop processing unless we have compelling legitimate grounds that override your interests, or the processing is required for legal claims.

If you wish to exercise any of your rights, please contact us using the details set out in section 2.

If you have unresolved concerns, you have the right to complain to the UK data protection authority:

Information Commissioner's Office (ICO)
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

7. Data retention

We only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or reporting requirements.

Specific retention periods are set out in the table at the end of this policy. Once those periods expire, personal data will be securely deleted or anonymised unless we are legally required to retain it.

8. Data protection principles

We process personal data in accordance with the principles set out in Data Protection Law. This means that personal data is:

• Processed lawfully, fairly and transparently;
• Collected for specified, explicit and legitimate purposes;
• Adequate, relevant and limited to what is necessary;
• Accurate and kept up to date where required;
• Kept only for as long as necessary; and
• Processed securely to protect against unauthorised or unlawful processing, accidental loss, destruction or damage.

Where we request personal data from you, we will make clear whether the provision of that data is required by law or contract and explain the consequences of not providing it.

Any consent we request will be clear, specific and informed, and you may withdraw consent at any time.

9. Lawful basis for processing

We will only process your personal data where we have a lawful basis under the UK GDPR. The lawful basis applicable to each category of personal data is set out in the table below.

The lawful bases we rely on may include:

• Consent: where you have given clear consent;
• Contract: where processing is necessary for a contract with you or steps prior to entering into a contract;
• Legal obligation: where processing is required to comply with the law;
• Vital interests: where processing is necessary to protect life;
• Public interest: where processing is carried out in the public interest or official authority; and
• Legitimate interests: where processing is necessary for our legitimate interests and those interests are not overridden by your rights.

10. Attribution

This privacy policy was originally created using a template from Sparqa Legal and has been adapted for use by Rolley Ltd.

Table of personal information we use