Privacy Notice 

 

 

Introduction

At MGA Entertainment Ltd, we respect your personal data. This Fair Processing Notice explains how we will use your personal data when you visit our website.

 

Our contact details

Our head office address is:

Regent Business Park
50 Presley Way
Crownhill
Milton Keynes
Buckinghamshire
MK8 0ES                                           

Our Data Protection Officer is Kristy Gouldsmith and she can be contacted by emailing gdpruk@mgae.com

 

 

What personal data do we collect about you?  How will we use that personal data?

At MGA Entertainment, we value each and every one of our clients and we take your data privacy very seriously.  When you are a client contact of ours, we will collect and process your personal data in order to further our relationship with you. We start by collecting your name, address, phone, and email. These may be business or private or both.

We also like to learn more about you in order to understand better how we can work together. To further this aim, we may view your Linkedin and Twitter profiles.

The data we have about you is entered into our systems to avoid having stacks of business cards on our desks.

If we are lucky enough to welcome you to one of our premises in person, then please take a look at the separate Fair Processing Notice aimed at our visitors as we may treat your data slightly differently.

 

Website account

In order for you to create an account, we need your name and email address. This data is only used to create an account for you.  You consent to create an account with us when you put in your details. Once you have created an account, we are permitted to send you marketing information under the legal basis of legitimate interest. You can opt out of receiving our marketing emails at any time.

 

Purchases and Delivery

When you purchase something through our website, your payment data are sent directly to our payment handler (WorldPay) and your delivery details are sent directly to our delivery partners.  We don’t ever handle your payment card details.  Worldpay is a data controller for all of the personal data that you input when paying for an item. Worldpay’s Privacy Notice can be found here: https://online.worldpay.com/terms/privacy

We keep a copy of your delivery data to ensure we can find your details in the case of an issue. We also share this with our customer management partner and this is a legitimate interest for us.

For billing, we require your first name, last name, address, phone and email. For an alternative shipping address, we require the first name, last name and address.

We process your personal data for a purchase and delivery because we have a contract with you.

Once you have put an item into your basket or purchased an item, we are permitted to send you marketing information under the legal basis of legitimate interest. You can opt out of receiving our marketing emails at any time.

 

What is our legal basis for processing your personal data?

We need a legal basis in order to process your personal data.  In this case, our legal basis is legitimate interest:

• - your personal data provided when you give us your business card or email one of our employees or inboxes. Our legitimate interest is furthering our business relationship.
• - data from your social media pages such as Twitter or LinkedIn. Again, our legitimate interest is in furthering our business relationship.

We will also process your data under the legal basis of contract if you or your company purchase products from us as we need this data in order to fulfil your order.

You have the right to object to our processing your data using legitimate interest.  Please speak to us if you have any concerns.

 

Do we use any automated decision making?

We do not use any automated decision making.

 

Who do we share your personal data with?

We share your data with our software providers, (eg our CRM provider), our distributors and our head office in the United States

 

 

How long do we keep your personal data for?

We will hold your data for as long as you remain a contact for our mutual or future business, plus three years. If you are no longer the most appropriate contact then please let us know. We hold all invoices and other financial records for seven years.

 

Do we transfer your personal data outside of the UK?

Our head office is in the United States and customer data is transferred there for administrative purposes. This is a legitimate interest for us as an international business.

 

We use the International Data Transfer Agreement as our transfer safeguard for personal data.

 

Your rights as a data subject

You have rights in respect of our processing of your personal data which are:

• To access to your personal data and information about our processing of it.  You also have the right to request a copy of your personal data (but we may need to remove information about other people).
• To rectify incorrect personal data that we are processing.
• To request that we erase your personal data if:
  • we no longer need it;
  • if we are processing your personal data by consent and you withdraw that consent;
  • if we no longer have a legitimate ground to process your personal data; or
  • we are processing your personal data unlawfully
• To object to our processing if it is by legitimate interest.
• To restrict our processing if it was by legitimate interest.
• To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.

 

If you want to exercise any of these rights, please contact our Data Protection Officer Kristy Gouldsmith by emailing gdpruk@mgae.com