MyBag is committed to protecting our customer's privacy. Please take the time to review this policy which explains what information we collect about you, how we use it, and your rights. SportsDirect.com Retail Ltd ( “we” or “us”) is the data controller of the personal data collected via or in connection with MyBag and any associated App (the “Site”).
-
What personal data we collect and how
Personal data, or personal information, means any information about an individual from which that person can be identified.
Personal data we collect directly. We collect personal data from you when you provide it to us directly and through your use of the Site, including:- Registration and profile information, such as information you provide to us when you use our Site e.g. your name, contact details, gender, and any information which you add to your account profile.
- Transaction and billing information, if you make any purchases from us or using our Site e.g. credit/debit card details and delivery and shipping information.
- Records of your communications and interactions with us, such as when you email, call, or otherwise contact us, we collect and maintain a record of your contact details, communications and our responses. We also maintain records of communications and information that you post in chat sessions, forums and in other areas of the Site, and on our social media channels.
- Sweepstakes, contests and promotions information, such as information you provide us when you participate in a competition or promotion.
- Surveys and product reviews, e.g. if you participate in one of our surveys or provide information to us as part of product or service reviews.
- Events e.g. if you register for or attend an event that we host or sponsor, we may collect information related to your registration for and participation in such event.
- Marketing and communications data e.g. records of your preferences about receiving marketing and communications from us.
Personal data collected automatically. We automatically collect personal data related to your use of our Site and interactions with us and others, e.g. using cookies and pixel tags, as well as information we derive about you and your use of the Site. This includes:
- Device and browsing information. We use cookies, log files, pixel tags and other tracking technologies to automatically collect information when users access or use our Site. This can include IP address, general location information, domain name, page views, a date/time stamp, browser type, device type, device ID, Internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, see Section 4 “Cookies and Personalisation” below.
- Activities and usage information related to your use of the Site, such as links clicked, searches, features used, items viewed, time spent within the Site, files uploaded, products and items you view and items you add to your basket.
- Location information. We may collect or derive location information about you, such as through your IP address. With your permission, we may also collect geolocation information from your device. You may turn off location data sharing through your device settings.
Personal data we receive from other sources. In some circumstances, we may receive personal data from third parties, including:
- Verification data:e.g. data collected from third party service providers used to verify your identity and prevent fraudulent activity.
- Social media monitoring: If you visit our pages on social media sites, we collect information such as what you click on and view, your comments, likes and reactions, your location (country/region), details of your device and internet connection, your social media profile details and user ID.
- Operators of other websites: We may receive product reviews from operators of other websites and display such reviews on our own Site.
- Demographic information: We may receive demographic information from third party advertising partners to help us better personalise ads. See section 4 “Cookies and Personalisation” for more information.
-
How we use personal data
Depending on how you use our Site, your interactions with us, and the permissions you give us, the purposes for which we use your personal data include:
- Online accounts. To register you as a customer and maintain your online account.
- Fulfil orders. To fulfil your order, including managing payments, charges, refunds and returns.
- Respond to your requests. To manage and respond to any queries or complaints to our customer service team.
- Manage our relationship with you. To notify you of service-related matters such as changes to our terms or privacy policy.
- Personalise content and experiences. To personalise the Site and show you content we think you will be most interested in, based on your account information, your purchase history and your browsing activity.
- Operate and improve the Site and our business. To display the Site and its fonts (which may include Google Fonts), improve and maintain the Site, and monitor its usage, to better understand how users access and use the Site, and our other products and offerings, and for other research and analytical purposes, such as to evaluate and improve our business operations, to develop services and features, and for internal quality control and training purposes.
- Events. If we run or sponsor events we may collect personal data in connection with your attendance.
- Research and customer satisfaction. For market research and surveys, e.g. we may contact you for feedback about our products or for customer satisfaction purposes.
- Marketing and advertising. To send you marketing messages and show you targeted advertising, where we have your consent or are otherwise permitted to do so.
- Security and protection of rights. For security purposes, to prevent, detect, and investigate fraud and other unauthorised activities and access, and where necessary to protect ourselves, our business and third parties.
- Compliance with law and legal process. To comply with the law and our legal and regulatory obligations, to respond to legal process and in relation to legal proceedings.
- Internal business operations. For general business and operational support, e.g. to consider and implement mergers, acquisitions, reorganisations, bankruptcies, and other business transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, record keeping, and legal functions.
We can only use your personal data if we have a proper reason for doing so, e.g.:
- to comply with our legal and regulatory obligations.
- for the performance of our contract with you or to take steps at your request before entering into a contract.
- for our legitimate interests or those of a third party; or
- where you have given consent.
-
We may share your personal data with third parties, for the purposes described above, in the following circumstances:
- With other companies in our group of companies.
- With our suppliers and service providers who process the data on our behalf, e.g., payment processors and delivery companies.
- With our professional and legal advisors.
- With third parties engaged in fraud prevention and detection.
- With third party platforms, providers and networks. We may disclose or make available personal data to third party platforms and providers that we use to provide our Site and its features. We may also make personal data available to third parties in support of our marketing, analytics, advertising and campaign management. See Section 4 “Cookies and Personalisation” for more information.
- With operators of other websites. We share product reviews submitted to our Site with other website operators who display these reviews on their own websites.
- With law enforcement or other governmental authorities, e.g., to report a fraud or in response to a lawful request.
- In relation to mergers, acquisitions, investments and asset transfers, personal data will be transferred to the other party to the transaction. We may also share certain personal data as part of the preparation for the transaction with lenders, auditors, and third-party advisors, including lawyers and consultants.
- To comply with legal obligations. We may share personal data with third parties to comply with our legal and compliance obligations and to respond to legal process e.g. in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement and government bodies. This may include responding to national security or law enforcement disclosure requirements and disclosures that we are required to make under applicable laws, such as the names of sweepstakes and contest winners.
- In certain cases where we have your consent or are legally permitted to do so.
-
Cookies and Personalisation
Cookies and tracking technologies. We and our third party service providers use cookies, pixels, local storage objects, log files, APIs, and similar technologies to automatically collect browsing activity, device and similar information within our Site.
We use this information to provide functionality on the Site, to understand and measure Site performance, to understand how users access, use and interact with others, and to deliver targeted advertising and content on our Site and third party sites.
We also use it to identify and resolve bugs and errors in our Site and to assess, secure, protect, optimise and improve the performance of our Site.
Personalised advertising. We work with third parties, such as ad networks, social media platforms, analytics and measurement services and others to personalise content and display advertising within our Site, and to manage our advertising on third party sites, mobile apps and online services.
For example, you may see ads for our Site on third party websites, including on social media. These ads may be tailored to you using cookies and similar technologies which track your web activity on our Site and across other websites and online services, to enable us to serve ads to customers who have visited our Site.
We may also engage third parties, including social networks to show ads to our customers, or users who match the demographic profile of our customers. This may involve sharing information, such as your name, email address, and other contact and purchase information with these third parties so that we can better target ads and content to you across third party sites, platforms and services. These third parties may also help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns.
If you do not want to see personalised ads you can change your cookie preferences using the tool available on our Site, as explained below, and by adjusting your privacy settings on third party websites and platforms.
Manage your preferences. You can manage your preferences for cookies and personalisation used by us as explained below.- Cookie preference tool. You can review and update your cookie preferences for our Site and opt out of most cookies and trackers on our Site (other than those that are strictly necessary) within our Cookie Preference Tool accessible via the cookie icon at the bottom left hand corner of the webpage. Your preferences are browser and device specific so you need to set the preference for each browser and device you use to access our Site. If you delete or block cookies, you may need to reapply these preferences.
- Industry ad choice programs. You can get more information about personalised advertising and opt out of personalised advertising by participating third party ad companies through industry ad choices programs, including:
- UK/EU http://youronlinechoices.eu
- US http://aboutads.info
- Canada http://youradchoices.ca
Please note that opting out of cookies and trackers on our Site does not mean that you will no longer see ads from us. You may continue to see generic or “contextual” ads.
Please see our Cookie Policy here for further information about the use of cookies on our Site and the choices you have. -
Marketing
We love to communicate with our customers. Depending on your marketing preferences, we may use your personal data to send you marketing messages by email. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.
If you no longer want to receive marketing communications from us (or would like to opt back in), you can change your preferences at any time by contacting us (details below), clicking on the ‘unsubscribe’ link in any email, or updating your settings in your account. If you unsubscribe from marketing, please note we may still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights). -
Where we store your personal data
The personal data that we collect from you may be transferred to and stored outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, third party providers, including, Direct Supply partners and middleware providers. Where we do so, the third country's data protection laws will have been approved as adequate by the European Commission, or other applicable safeguards are in place.
-
Retention
We will not keep your personal data for any purpose(s) for longer than is necessary and we will only retain the relevant personal data that is necessary in relation to the purpose. We will retain the personal data you provided on registering an account on our Website or App so long as that account remains in existence. In the case of any contact you may have with our customer experience team, we will retain those details for as long as is necessary to resolve your query and for a short period after the query is closed. If we are legally required or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also retain some of your personal data for a limited period of time, even after you have closed your account.
-
Security
We take appropriate technical and organisational measures to protect against unauthorised or unlawful processing of your personal data, including encrypting your data to applicable industry standards.
-
Children
Our Site is not intended for, and should not be used by, children under the age of 18. We do not knowingly collect personal data from children under 18.
-
Your Rights
Under the UK GDPR, you have the following rights which, in most cases, you can exercise free of charge:
Right of Access
This is commonly referred to as a Subject Access request or ‘SAR’.
The right to be provided with a copy of your personal data and to certain other supplementary information that this Privacy Policy is already designed to address.
Right to Rectification
The right to have inaccurate personal data rectified e.g., if you consider that your personal data is incorrect, out of date or incomplete.
Right to Erasure
This right is also known as ‘the Right to be Forgotten’.
The right to require us to delete your personal data.
This right is not absolute and only applies in certain circumstances.
Right to Restrict Processing
The right to restrict the processing of your personal data where you may have a particular reason for wanting the restriction.
This right is not absolute and only applies in certain circumstances.
Right to Data Portability
The right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format. It also gives you the right to request that we transmit this data directly to another data controller.
Right to Object
The right to object to the processing of your personal data at any time. This effectively allows you to stop or prevent us from processing your personal data.
The right to object only applies in certain circumstances.
You have the absolute right to object to the processing of your personal data if it is for direct marketing purposes (refer to section below).
Rights related to automated decision-making including profiling
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
Your right to withdraw consent
Where you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent
If you would like to exercise any of these rights, please write to the Customer Experience, Meridian House, Gadbrook Park, Northwich, CW97RA or email customer.experience@thehutgroup.com
If we choose not to action your request, we will explain the reasons for our refusal.
To maintain the security of our customers' personal details, we may need to request proof of identity before we disclose personal data to you in response to any of the above requests.
- How can you stop the use of your personal data for direct marketing? There are several ways you can stop direct marketing communications from us:
- Click the ‘unsubscribe’ link in any email communication that we send you. We will then stop any further emails from us.
- If you have an account, log in into your account, visit the ‘My Account’ area and change your preferences.
- In our apps, you can manage your preferences and opt out from one or all of the different push notifications by selecting or deselecting the relevant options in the ‘Settings’ section.
- Write to the Customer Experience, Meridian House, Gadbrook Park, Northwich, CW97RA or email customer.experience@thehutgroup.com
We hope that the Customer Experience team can resolve any query or concern you may raise about our use of your personal data.
However, if you feel that your personal data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or any other competent supervisory authority in the country of residence.
You can contact the ICO by calling 0303 123 1113 or go online to www.ico.org.uk/concerns (opens in a new window; please note we can't be responsible for the content of external websites)
If you have any queries on any aspect of our Privacy Policy, please contact us on the details below:
- Email: customer.experience@thehutgroup.com.
- Address: Customer Services, Meridian House, Gadbrook Park, Cheshire, CW9 7RA
- Our EU representative is The Hut.com (Poland) sp. z o. o.
- The Hut.com (Poland) sp. z o. o. can be contacted at EURep@thehutgroup.com.
Last Revised: 01 October 2024