- What Personal Data the Company might collect on you.
- How long might the Company hold on to your Personal Data.
- How the Company might collect your Personal Data.
- The grounds on which the Company may store and use your Personal Data.
- The way(s) in which the Company might use your Personal Data.
- The measures the Company has in place to protect your Personal Data.
- Your rights.
- How you can contact the Company.
Eltonjohn.com Limited (the “Company”) is a company registered in England and Wales under registered company number 03910174. The Company’s registered office is: 1 Blythe Road, London, W14 0HG.
The GDPR defines “Personal Data” as any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This includes, but is not limited to, name, email address, postal address location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The Personal Data that the Company may collect from you is listed in section 2 below.
The Company is committed to protecting and respecting your privacy, and would welcome any feedback you have to: firstname.lastname@example.org.
2. What Personal Data the Company might collect on you.
2.1 The Company might collect the following Personal Data from you:
i) Your name, age/date of birth and gender;
ii) Your contact details, including: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
iii) Details of purchases and/or orders made by you;
iv) Details of events attended by you;
v) Your communication and marketing preferences;
vi) Your interests, preferences, feedback and survey responses;
vii) Your correspondence and communications with the Company;
viii) Other publicly available Personal Data, including any which you have shared via a public platform (such as a Twitter feed, public Facebook page or a company website).
2.2 The Company’s website is not intended for children and the Company does not knowingly collect data relating to children.
2.3 This list is not exhaustive and, in specific instances, the Company may need to collect additional data for the purposes set out in this Policy. The Company may also collect Personal Data from third parties who have your consent to pass your details to the Company, or from publicly available sources.
2.4 The Yellow Brick Road. In the specific instance of the Elton John Yellow Brick Road website, hosted exclusively at https://yellowbrickroad.eltonjohn.com the Company may need to collect additional data for the purposes set out in this Policy. The Company may also collect Personal Data from third parties who have your consent to pass your details to the Company, or from publicly available sources at the point of registration, these external companies comprise one or more of the following; Meta Platforms, Inc (aka Facebook, Inc), Google LLC (aka Alphabet, Inc) and Spotify AB exclusively. The data stored at the point of submission (referred to throughout the interface as both [Claim] or [Add] Your Brick) is replicated and publicly represented within the aforementioned website in the form of an individual interactive asset containing both your First Name and Surname. No other submission data is publicly available. You consent to the Company aggregating this information and subsequently storing this data as part of the Rocket Club Email Subscription process. In the event that you would wish to withdraw your submission and/or remove your asset from the ‘Yellow Brick Road’, we would welcome any requests of removal via email only at email@example.com.
3. How long might the Company hold on to your Personal Data.
The Company will not retain your Personal Data for longer than necessary for the purposes set out in this Policy.
4. How the Company might collect your Personal Data.
The Company may collect your Personal Data in the following ways:
i) Via the Company’s website (e.g. when you opt-in to join the Rocket Club);
ii) Via ticketing agents who sell tickets to Elton John shows, and you opt-in to receive communication direct from the Company;
iii) Via any additional means the Company deems reasonable.
5. The grounds on which the Company may store and use your Personal Data.
The Company might store and use your Personal Data on the following legal grounds:
– for example, if you have opted in to receive marketing communications and/or news from the Company, the Company might store your data and contact you with a roundup of Elton John’s recent news and events.
5.2 Fulfilment of a Contractual Obligation
– for example, if you have purchased an item via the website, the Company will store and process your data insofar as it is necessary to fulfil such order.
5.3 Legitimate Interest
– for example, if you have previously provided the Company with your contact details in the course of sale of goods/services (for example a ticket to an Elton John concert), the Company may send you electronic communications relating to similar upcoming event ticket sales. You will always be given the opportunity to opt-out of this form of communication. If relying on legitimate interest as a lawful ground for processing your Personal Data, the Company will always take into account your rights and interests prior to sending any such communications.
6. The way(s) in which the Company might use your Personal Data.
The Company (and trusted partners acting on our behalf) might use your Personal Data:
i) to provide goods and services to you;
ii) to make a tailored website available to you;
iii) to manage any registered account(s) that you hold with us;
iv) to verify your identity;
v) for crime and fraud prevention, detection and related purposes;
vi) to contact you electronically about news/events and/or products which the Company thinks may interest you;
vii) for market research purposes – to better understand your needs;
viii) where the Company has a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).
The Company might use your Personal Data for electronic marketing purposes (with your consent) and may send you postal mail to update you on the latest events/ work of Elton John.
The Company aims to update you about items which are of interest and relevance to you as an individual.
You have the right to opt-out of receiving communications at any time, by:
i) making use of the simple “unsubscribe” link in emails; or
ii) contacting the Company via email to firstname.lastname@example.org or via post to the registered office (listed in section 1 above).
6.3 Sharing data with third parties
i) Our service providers and suppliers
In order to make certain services available to you, the Company may need to share your Personal Data with some of our service providers/partners. These could include IT, delivery and marketing service providers.
The Company only allows its service providers/partners to handle your Personal Data when the Company has confirmed that they apply appropriate data protection and security controls. The Company also imposes contractual obligations on service providers/partners relating to data protection and security, which mean they can only use your Personal Data to provide services to the Company and to you, and for no other purposes.
ii) Other third parties
Aside from our service providers/partners, the Company will not disclose your Personal Data to any third party, except as set out below. The Company will never sell or rent your Personal Data to other organisations for marketing purposes.
We may share your data with:
– credit reference agencies where necessary for card payments;
– governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where the Company is required to do so: –
— to comply with our legal obligations;
— to exercise our legal rights (for example in court cases);
— for the prevention, detection, investigation of crime or prosecution of offenders; and
— for the protection of our employees and customers.
7. The measures the Company has in place to protect your Personal Data.
The Company strives to maintain the highest standards of data privacy and security to protect your personal details and other information about you.
The Company shall ensure that Personal Data is stored securely using modern software that is kept-up-to-date.
Access to Personal Data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.
When Personal Data is deleted this should be done safely such that the data is irrecoverable.
Appropriate back-up and disaster recovery solutions shall be in place.
The Company regularly reviews our processes and procedures to protect your information from unauthorised access and use, accidental loss and/or destruction.
8. Your rights
You have the following rights in respect of the Personal Data that the Company holds:
8.1 the right to ask for a copy of Personal Data that the Company holds about you (the right of access);
8.2 the right (in certain circumstances) to request that the Company deletes Personal Data held on you; where the Company no longer has any legal reason to retain it (the right of erasure or to be forgotten);
8.3 the right to ask the Company to update and correct any out-of-date or incorrect Personal Data that the Company holds about you (the right of rectification);
8.4 the right to opt out of any marketing communications that the Company may send you and to object to the Company using / holding your Personal Data if the Company has no legitimate reasons to do so (the right to object);
8.5 the right (in certain circumstances) to ask the Company to ‘restrict processing of data’; which means that the Company would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing); and
8.6 the right (in certain circumstances) to ask the Company to supply you with some of the Personal Data that the Company holds about you in a structured machine-readable format and/or to provide a copy of the data in such a format to another organisation (the right to data portability).
The Company may update this Policy to reflect changes in how it collects, stores and/or uses your Personal Data. The most recent version of the Policy will always be available via the Company’s website. Where appropriate, the Company will provide you with notice of any significant changes to how it uses your information.
11. How you can contact the Company.
If you have any questions on the contents of this Policy please contact email@example.com or if you would rather get in touch by post, please write to:
Website Team, Eltonjohn.com Limited, Hythe House, 200 Shepherd’s Bush Road, W6 7NL, UK.