Privacy Notice

This privacy notice is provided to inform about how and why your personal data is used so that we can be as transparent as possible, and to ensure that you are aware of your rights under data protection legislation.

The Company

We are Clubcards 121, a trading name of Pass Sport Control Limited (PSCL). We are the Data Controller and our correspondence address is 43 Lambs Farm Road, Horsham, West Sussex, RH12 4DB. We can be contacted on 01403 230096 or cards@clubcards121.

The purpose for processing your data and our basis for doing so.

We process your personal data so we can provide our range of membership and identity cards and other associated services as well as provide you with information about our products.
We obtain your data in several ways, for example through our enquiry contact form on our website, through networking events, if you are referred to us or you contact us directly. We will process your full name, email address, postal address to provide you with information and a quote for our services. Should you accept our quotation, we will also process your business name and business address. We do this processing under Article 6.1.f UK GDPR – Legitimate Interest as we have a legitimate interest in expanding our business through growing our client base.
If you fail to provide the information required, we will be unable to provide the agreed services to you.
We may, from time to time conduct direct marketing by email so we can provide clients and potential clients with updates on services and products as well as special offers. We undertake this marketing in accordance with the Privacy and Electronic Communications Regulations 2003 and we will obtain your consent to process your data for this purpose. You can withdraw at any time by contacting us by any of the above means.

Recipients of your data

Generally, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this

Data processed by third parties on our behalf.

We use the services of other organisations in the processing your data. We use external accountants, cloud based email, document storage and accounting, video conference platforms and our website processes limited personal data such as through our contact form.
Those organisations that process personal data on our behalf are subject to a data processing agreement as required by Article 28 of the UK GPDR. This ensures that your data is handled securely in accordance with the UK GPDR.

Transferring your data outside of the UK

We transfer personal data outside of the UK / EEA by virtue of our cloud based platforms. This transfer is to the USA and this international transfer is undertaken using approved Standard Contractual Clauses.

Retention periods

We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation. We will retain the personal data for the duration of our commercial relationship and for 7 years subsequently.

Your rights

The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:
If you want to exercise any of these rights, please contact us using the above contact details.
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk