Privacy Policy
Supercard is committed to keeping your information secure and take the privacy of all data extremely seriously.
This Privacy Notice covers how we collect, process, store, and use your data. It also covers your rights and who to contact with any queries relating to your data. This Privacy Policy applies to all websites and apps operated for myarsenalsupercard.co.uk.
By entering into the Membership Agreement with Supercard, you become a Member of the Supercard Programme. As a member, you gain access to numerous discounts and rewards. By using the service, accessing the service, or providing your information you acknowledge and consent to us collecting, processing, storing, and using your data in accordance with this Privacy Policy.
You can choose not to provide certain information, however, any data you do not share with us could prevent or limit the service or features available to you.
For the purpose of the Data Protection Legislation, the data controller is The Loyalty Marketing Group Trading as Supercard via myarsenalsupercard.co.uk myarsenalsupercard.co.uk and contactable at Supercard, P.O. Box 7450, LONDON, W1U 6TJ. The data subject is the individual whose data is being processed.
Should you have any queries regarding your data, please contact the Data Protection Officer on [email protected] or via our customer service 0330 174 2741.
How we collect your personal data
Personal data is obtained through the following communication channels:
- Telephone
- Form Submissions
- Online Chat
- Social Media
- Post
- Cookies
What personal data we collect
Supercard may collect the following personal data:
- Title
- Name
- Contact Telephone Number
- Contact Email Address
- Postal and/or Billing Address
- Billing details will be processed and stored with a third-party payment processing company.
- Redemption of Rewards
- Date of Birth (if a reward requires it)
- How you heard about us (for Marketing Analysis Purposes)
- Feedback
- Recommendations
Please note, personal data is defined as any data that can identify an individual.
You may be asked for additional information, to complete a form, to make a referral, or for a request for feedback. All additional information shared, will be processed, and stored securely.
With your consent, Supercard may use your first name, last name, initial and/or general location to publish reviews on our website, communications, media channels, or social media platforms. Any information we share with a broader audience will be agreed with you in advance, and we will not share any personally identifiable information unless you have agreed to do so.
The data collected through our websites and social media with the use of cookies may include Google analytics, Google remarketing, Facebook pixels, demographic data and browsing patterns. We also automatically receive details of your device location to monitor website traffic and customer journeys through our sites and channels.
For more information on the cookies we use, please see our Cookies Policy.
You can refuse at any time to provide information, however, refusing information that is deemed necessary for your membership may prevent or limit the use of any products and/or services.
Our legal basis for processing
We are processing your personal data to enter into a contract with you, and we have your consent to do so. We will collect, use, and process your information for the purpose of providing you with what you need to deliver the product and/or service as agreed with you. We may also contact you with relevant information or additional products and/or services. We may use this data for analytical purposes to better tailor or develop our products/services available or for marketing purposes.
All calls may be recorded for monitoring and training purposes. Emails and/or texts may also be stored. They may be produced to the data subject upon request or with regards to a query.
How we use this personal data
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- To provide, personalise, and/or improve our products and services
- To collect payment
- For marketing purposes
- To ensure the functionality of the website
- To analyse and tailor products and advertisement shown to you
- To resolve issues and queries
- Internal record keeping
- Prevent, detect, investigate, and respond to fraud, unauthorized access/use, breaches of terms and policies, or other wrongful behaviour
- Comply with any procedures, laws, and regulations which apply to us, including those that set retention periods
We will share certain information with the third parties’ suppliers or sub-contractors to administer products and/or services to you. Any request to discontinue this, may prevent or limit the use or access to features, products, or information as part of your product and/or service.
How we store your data
We are committed to securing your data. To prevent unauthorised access or disclosure, we have put in place suitable procedures to safeguard the data we collect.
- Outer Building intercom and key only access
- Passcodes on all Devices
- All users have individual password access and limited access to only suitable files
- Group Policy determines and logs the use of IT equipment
- Firewall and Antivirus across all Devices
- Only administrator account can enable updates, software downloads and more
All data is stored in our UK Office, our servers are backed up at least twice a day.
How long we keep your data
We will keep your personal data from this campaign on our records for above mentioned reasons unless you exercise your right to request for its removal for the duration of your active membership with us. Memberships that do not have an active status, and that have not opted into marketing, will be anonymised automatically after 7 years.
Who your data is shared with
Your personal data may be shared with third parties. It will not be accessible to any unauthorised persons.
For the purpose of administering the product or service, we may share your information with other companies under common ownership or control with Us. These companies use your information as described in this Privacy Policy.
To complete purchases, we will share information about you as a purchaser with third party payment processors. This is required to complete the purchase and protect you as the consumer. It may include full name, email address, telephone number, and billing address. PCI sensitive card data is processed solely by the third party. The information shared with them is subject to their Privacy Policy.
We may choose to buy or sell assets and so we may share or transfer user information (including personally identifiable data) in connection with the evaluation of and entry into transactions or as part of the service. Your information could be part of the assets transferred or acquired by a third party if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control.
All customer service emails, and call recordings are stored with an external supplier. Click here to view their Privacy Policy.
All data may be exported or saved on our servers for review or analysis purposes.
Data Transfers
All of our data is processed and stored in the UK only. Should this change, you will be notified immediately. Your data may be used to pre-populate forms on partner websites that you click on from our website. This is done securely.
Some rewards, when you click redeem, will automatically transfer your name and email to the third-party administering the reward. This will be clearly stated in the reward description and/or how it works description.
Links to other websites
Our websites and/or apps may contain links to third-party websites including adverts. Once you have clicked these links, we do not have any control over the content on that site. Therefore, we are not responsible for the protection and privacy of your data, or any views, actions or information provided whilst visiting such sites. External sites are not governed by this privacy policy so please ensure to exercise caution and review their privacy policy.
Your rights as a data subject
Under data protection laws, you have the below rights. If you would like to exercise any of these rights, please contact us.
Your right of access
You have the right to ask us for copies of your personal information. This is called a Subject Access Request
You are entitled to receive confirmation that your data is being processed, have access to a copy of your personal data and information on how and why your data is processed.
Any Subject Access Requests can be sent in writing to [email protected] or Supercard, P.O. Box 7450, LONDON, W1U 6TJ. You can also request over the phone by calling our customer service team on 0330 174 2741.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances where there is no persuasive reason for its continued processing. You can request this by contacting our customer service team on 0330 174 2741 or in writing via [email protected] or Supercard, P.O. Box 7450, LONDON, W1U 6TJ.
Once we have received a request, we will acknowledge receipt and it will be forwarded to the DPO. The DPO will consider the deletion and ensure it will not affect any other data subject. If it is, the request will be rejected. Should the data not affect a further data subject, it is approved for deletion. Data is deleted from all databases from the stated time.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing
You have the right to object to the processing of your personal information in certain circumstances. This means that we are able to store your personal data, but not process it. We shall keep just enough information about you to make sure we can keep your restriction in place from this point on. You can request this by contacting our customer service team on 0330 174 2741.
Your right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Rights in relation to automated decision making and profiling
You have the right to request for reconsideration of any automated decision making.
The information above has been sourced from the Information Commissioner’s Office (ICO). For their full guide to rights for individuals under the GDPR, please visit: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
Marketing communication
All emails, from those who have consented, by way of opt-in, to receive communications that includes email as well as those who have later unsubscribed, are stored in an external mailing software and our internal system. We store these to keep track of status, statistics, and what has been sent. You can revoke consent at any time by clicking the unsubscribe button. For more information about the mailing software’s we may use, please contact us on 0330 174 2741. If you no longer wish to receive our emails, your email address will be kept in our systems in the form of a blacklist so that we do not contact you in the future.
We may contact you with member only offers, special promotions, or further offers from Supercard or a third parties products and/or services.
Push notifications may be sent via our mobile apps. We may also use the location of your device. You can stop or adjust these via your device settings.
You can opt-out of certain web beacons and cookies by amending your browser settings, further information on this can be found in our Cookies Policy.
Communications that are not related to your transaction or account will give you the option to unsubscribe or opt-out at the bottom of each email. Alternatively, you can contact our customer service team on 0330 174 2741
We may also communicate with you via text message. Should you wish to opt-out of receiving text alerts you can follow the instructions provided in those messages or reply “STOP.” Alternatively, you can contact our Customer Service Team on 0330 174 2741.
Retention Period
All data is automatically scrubbed after 7 years of inactivity. This means the customer has remained in a cancelled or suspended state for 7 years with no further account creation or any other activity. Other activity can include but is not limited to reactivating the existing account or signing up for an additional product or service provided by The Loyalty Marketing Group or any subsidiary of the holding company of The Loyalty Marketing Group. This does not impact your right for erasure which can still take place on request.
Changes to our Privacy Notice
This Policy may be updated to reflect changes for legal, regulatory, or operational purposes. We encourage you to review this page for the latest information on our privacy practices.
If there are any critical changes where we are required by law to contact you, then you will be notified prior to those changes becoming effective.
If you do not accept any changes made to this Policy at any time, please discontinue using any websites, applications, and/or services immediately and contact us. You may be required to return anything sent to you.
Complaints
If you have a complaint about the processing of your personal data or any other reason relating to your personal data, you have the right to complain with a supervisory authority. The Information Commissioner's Office is the UK supervisory authority, and you can contact them on 0303 123 1113 or via their other methods of communication: https://ico.org.uk/global/contact-us/.
How to contact us
We are happy to assist you with any request you may have. Contact us by:
Post:
Supercard
PO Box 7450
LONDON
W1U 6TJ
Email:
Telephone: