Last updated 4 February 2022
This privacy notice explains how we, Badminton Association of England Limited of National Badminton Centre, Bradwell Road, Milton Keynes MK8 9LA (Badminton England), process your personal data when you use our services such as our website, app and content or otherwise engage with us online or offline.
If you are under 13 years old, you must not access our services without your parent or guardian. If you are older, you should speak to them or to us if you do not understand anything explained in this notice.
If you have any question about your data protection rights or if you do not understand anything explained in this notice, please contact us by email to DPO@badmintonengland.co.uk.
1.WHAT IS BADMINTON ENGLAND?
We are the National Governing Body for the sport of badminton in England.
We are for everyone who wants to get involved in badminton whatever age, ability or gender. We love playing, watching and supporting badminton. We want everyone in England to do the same and become part of the badminton community, whether as a player, coach, volunteer or fan.
The unique qualities of badminton make it accessible and enjoyable for anyone and everyone. We work collaboratively with our partners and stakeholders to provide traditional and innovative opportunities for all to be involved; from primary school programmes to adult social badminton, from clubs to counties, and from our world class coaching development to our major events delivery.
We value and represent every single one of our members and fans as one collective voice for badminton in England. As our membership grows, so will our influence as badminton’s National Governing Body, allowing us to invest more back into the core of the sport.
2.WHO DOES THIS PRIVACY NOTICE APPLY TO?
This notice applies to:
This notice applies to you if you act in your personal capacity, for example, as our customer, and if you act in your professional capacity, for example, as an employee or agent of our supplier.
3.WHAT TYPES OF PERSONAL DATA DO WE PROCESS?
Generally, “personal data” means any information that identifies you or relates to you, except for anonymised information that cannot reasonably be linked back to you.
Personal data will include your name, login details, booking or transaction details, the details of your enquiry and other information that is obviously about you. However, it will also include technical device, browser or app data, such as your IP address, your movement on the website, information about how you engage with our services and similar information. Based on your online visits, we may observe or infer information about your preferred content, features, trading style and other interests, even without you telling us.
For more on personal data, please see the categories of personal data below. You can exercise your rights in relation to all such personal data about you as set out below.
4.YOUR RIGHTS
All requests will be processed without undue delay and no later than within one month. If we cannot process your request within this period, we shall explain why and process it as soon as possible thereafter.
5. WHY DO WE PROCESS YOUR INFORMATION?
Organisations should only process personal data that is needed for their activities. The section below explains what personal data is necessary for each purpose. We keep our processes and data collection under review and will update this notice should any personal data no longer be necessary for the given purpose.
| Purpose & description | Personal data | Lawful basis for processing |
| To assist with your enquiries or when you visit our premises. For example, we may respond to questions about membership or our compliance team may respond to your complaint. |
| Necessary for our legitimate interest in responding to enquiries, complying with the law and best practices or, as the case may be, necessary for taking steps prior to entering into a contract or the performance of our contract with you. |
To provide our services to you, such as our online services including website, app, booking platform, tournament portal or content as well as our offline services, such as hosting YONEX All England Championships, English National Championships and other events, performance pathway programme, and other services. For example, when you visit our website, your browser will provide your browser type and other technical information to enable us displaying our content in a compatible manner. If you log in we will verify your account name and password before granting access. If you visit our event, we may scan your ticket and record your attendance. |
| Necessary for our legitimate interest in providing our services to the public and our customers, complying with the law and best practices or, as the case may be, necessary for performance of our contract with you as our customer and compliance with our legal obligations. |
To enable you to set up and maintain your user account. For example, we will verify your email when you register on our website and monitor access to your account for suspicious activity. |
| Necessary for the performance of our contract with you, compliance with our legal obligation and to satisfy our legitimate interest in keeping our users' data safe, complying with best practice or applicable laws. |
To enable you to purchase products and services. For example, our third party payments vendor will collect your payment card information if you make a purchase. |
| Necessary for the performance of our contract with you. |
| To send you service communications about matters relevant to your use of our services and your engagement with us, such as surveys or other forms of active engagement, prize draws, availability of our services, changes in our terms, transaction records, etc. |
| Service communications are necessary for the performance of our contract with you or, as the case may be, necessary for our legitimate interest in facilitating our services and organising related activities. |
6. WHO ELSE GETS TO SEE YOUR DATA?
Where required in connection with the purposes set out above, we will share your personal data with third parties, including (i) our third parties that provide services or advice to us, (ii) our marketing, advertising and analytics partners including Google, Adobe, Facebook and others, (iii) third parties who provide additional services to you, such as County Badminton Associations, ticket agencies, (iv) persons or authorities where we are compelled by law or responsible practices or for legal claims, (v) the relevant entity in case of a merger, acquisition or collaboration, and (vi) other third parties where you have provided your consent.
7. THIRD PARTIES MAY PROCESS YOUR PERSONAL DATA
Our services may contain links to other websites, third party services, such as Twitter, Facebook, LinkedIn, Instagram, YouTube and plugins. Some of the third parties who we share your personal data with, such as payment services providers or public authorities, process your personal data for their own purposes.
You should check the privacy statements of these third parties and we are not responsible for how they may process your personal data. Some of our third party service providers may use your anonymised personal data for business administration purposes.
Please note that all payments made when booking a facility on this website are made through a third party provider, IMIN LTD, a company registered in England and Wales with Company Number 07716450, whose trading address is 14-22, Elder Street, London, E1 6BT. By proceeding with a booking, you hereby agree to comply with IMIN LTD’s terms and conditions, a copy of which can be found here http://www.imin.co/terms/consumer. At no time will a contract come into existence between you and IMIN LTD as it is only acting as a booking payment portal as between you and the leisure facility provider.
8. HOW LONG IS YOUR PERSONAL DATA KEPT?
We will keep your personal data for as long as is necessary for the purposes listed above or longer, as may be required by law or for legal claims. You may contact us for further details or request deletion of your personal data at any time.
The table below sets out general retention periods for specific categories of personal data.
Category of personal data | Retention period |
account details, general details | 2 years after account closure/last interaction |
CCTV data | 30 days from capture |
device and browser details, engagement information, preferences and interests, third party data, usage data | 2 years from collection |
professional opportunity records | 6 years from collection |
payment details | Processed by our payment provider. Direct debit details will be kept for the duration of the mandate. |
special categories data | Generally, not retained or only kept for the duration of the relevant event. |
9. HOW DO WE SECURE YOUR PERSONAL DATA?
We maintain appropriate organisational and technological safeguards to help protect against unauthorised use, access to or accidental loss, alteration or destruction of the personal data we hold. We also seek to ensure our third-party service providers do the same.
We will endeavour to use the least amount of personal data as is required for each purpose. We will employ pseudonymisation and anonymisation techniques, where appropriate.
Where appropriate, we apply security measures such as encryption or hashing when sharing your personal data with third parties.
Our staff will access your personal data on a “need to know” basis.
10. WHERE IS YOUR PERSONAL DATA PROCESSED?
Your personal data will be held in the UK. However, we use suppliers, business partners and other third parties in countries, such as the European countries or the United States.
Each of our recipients is subject to appropriate safeguards such as due diligence and the standard contractual clauses for international transfers of personal data.
11. OPT-OUT
If you would like us to stop sending you marketing communications and to process your personal data for direct marketing purposes, please contact us.
You can request to stop receiving our marketing communications at any time by clicking on the unsubscribe link at the bottom of each marketing message and we will add you to a suppression list or otherwise arrange that you no longer receive marketing communications.
12. CATEGORIES OF PERSONAL DATA
| Category of personal data | Description |
| User account details | Username, password, and similar information. |
| CCTV data | Image data recorded by our CCTV. |
| details of your query | Information in your query, complaint, job application or other communication. |
| device and browser details | Information automatically provided by your device and browser including mobile device ID, internet protocol (IP) address, cookie ID, online identifiers, operating system, browser type, language, time zone setting, location and date and time of access. |
| payment details | Processed by our payment provider. Direct debit details will be kept for the duration of the mandate. |
| engagement information | Information about your engagement with our emails and other communications or with our content on the Internet including open rates, click rates, view rates, active time spent, survey data, feedback data and similar information. |
| general details | Your name, date of birth, address, email, telephone number, email address, and role and employer details if you are acting in your professional capacity and similar information. |
| identity details | Your passport details, image, social insurance number, tax payer ID and similar information. |
| professional opportunity records | Your personal and professional details as business customer and other opportunity records. |
| payment details | Payment card, bank account details and similar information. |
| preferences and interests | Information about your preferences and interests known, observed or inferred from various sources. |
| public data | Publicly available information about you. |
| special categories data | Except for health and safety, diversity monitoring or for other important reasons, we do not process information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. |
| third party data | Information provided by third parties about your interaction with our posts and content and ‘likes’ on social media platforms, such as Twitter, Facebook, Instagram, LinkedIn or YouTube, online reviews, comments, your preferences and interests received from our advertising and analytics partners, references from your previous employer, referees, membership organisations and other third parties. |
| transaction data | Information about your purchases and transactions in our services. |
| usage data | Information about how you navigate and engage with our online services, features including online activity data such as downloads, clickstream data with URLs visited previously, page interaction, such as scrolling, clicks, and mouse-overs, methods used to browse away from our website, information in security logs and similar information. |
13. UPDATES
If we make any changes to our notice, you will be able to see them on this page. You should regularly check for updates, as indicated by the “Last updated” date at the top.
If you do not agree with the changes, please do not continue to use our website or services. Of course, if any such changes significantly affect you, we will ask for your prior consent where we are required to do so by law.