Privacy Policy

Last Updated 21 February 2024

Introduction

This is our privacy policy. It tells you how we collect and process data received from you on our site. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

If you have any comments on this privacy policy, please contact us

Who We Are

Your data is governed by the Data Protection Act 2018 (UK GDPR) referred to generally as "GDPR". This is the information we have to give you as a ‘Data Controller’:

  • Our legal entity is Munro Consultants Ltd trading as Toxik Software. Registered in England and Wales – number 07389338
  • Our registered address is 44c High Street, Chippenham, Ely, CB7 5PR
  • The Data Protection Officer is A J Munro and they can be contacted at contact us.
  • We are registered in the UK with the Information Commissioners Office as a Data Controller details.

What We May Collect

We may collect and process the following data about you:

  • Information you put into forms on our site at any time
  • A record of any correspondence between us
  • Details of your visits to our site and the resources you use
  • Your IP Address for auditing purposes

Under GDPR we will ensure that your personal data is processed lawfully, fairly, and transparently, without adversely affecting your rights. We will only process your personal data if at least one of the following basis applies:

  • you have given consent to the processing of your personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract;
  • processing is necessary for compliance with a legal obligation to which we are subject;
  • processing is necessary to protect the vital interests of you or of another natural person; and/or, processing is necessary for the purposes of the legitimate interests pursued by us or by a third party such as credit card payment processing, except where such interests are overridden by the fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

What We Hold

In your user account we hold your name, your postal address, and your email address For auditing purposes activity on the site is logged against the IP Address of the browser, the Country of origin, and User ID. This data is held for a maximum of 90 days. Data held on behalf of archery clubs includes name, date joined, date of birth, address, membership number, and email address. This data is not processed in any way, and is in a separate database. We hold this data only to provide a service to archery clubs.

Data Processing

We do not process any data except in so far as necessary to provide you with the service. Such processing falls under the provisions of the Data Protection Act 2018 (UK GDPR) relating to lawful purposes of a Data Controller meaning a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Organisations who act as Data Processors under the Data Protection Act 2018 (UK GDPR) on behalf of the Data Controller are:

  • Microsoft Inc operating within the UK who provide cloud database services. The scope of processing is limited to data storage and security and logging of database activity. More Information
  • Google Inc operating within the UK who provide cloud storage and logging. The scope of processing is limited to legacy storage of documents such as scoresheets and logging of website activity and errors. More Information
  • Bunny.Net operating within the UK who provide cloud storage and content delivery services. The scope of processing is limited to storage of documents such as scoresheets.  More Information
  • Chargebee Inc operating within the EU who provide subscription management and payment services. The scope of processing is limited to managing Subscriptions to and Payments for Golden Records Online. More Information

Where Munro Consultants Ltd trading as Toxik Software acts on behalf of Archery Clubs or Organisations (the Club) in storing personal data for the lawful purposes of the Club or Organisation it does so as a Data Processor under the Data Protection Act 2018 (UK GDPR) and organisations employed to provide the service are sub-processors under the Data Protection Act 2018 (UK GDPR). The Club acts as Data Controller on behalf of its members. Consent for Data Processing is given under our general terms and conditions which you agree to by subscribing to the service.

Cookies

All Cookies used by and on our website are used in accordance with current UK Cookie Law. The site uses cookies or similar technology to control your access to the site. Cookies are pieces of information that include a unique reference code that a website transfers to your device to register you as an authenticated user. All cookies used on our site are set by us, and used only for essential session management.

How We Use What We Collect

We use information about you to:

  • Present site content to you that applies only to you
  • Carry out our contractual obligations to make the service available to you
  • Allow you to use our services
  • To contact you about the service should we need to

In addition, if you don’t want us to use your personal data for any purpose, you can let us know at any time by contacting us, and we will delete your data from our systems. However, you acknowledge this will make it impossible to provide a service to you.

Securing Your Data

We store your data within the UK and/or EU. By giving us your personal data, you agree to this arrangement. We will do what we reasonably can to keep your data secure. We do this by using encryption at rest and encrypting data in transit. You must keep your password confidential. Please don’t share it. Although we try to provide protection, we cannot guarantee complete security for your data, and you take the risk that any sending of that data turns out to be not secure despite our best efforts. We only keep your personal data for as long as we need to in order to use it as described above, and/or for as long as we have your permission to keep it. In any event, we will conduct an annual review to ascertain whether we need to keep your personal data. Your personal data will be deleted if we no longer need it.

Disclosing Your Information

We are allowed to disclose your information in the following cases:

  • If we want to sell our business, or our company, we can disclose it to the potential buyer.
  • We can disclose it if we have a legal obligation to do so, or in order to protect other people’s property, safety or rights.
  • We can exchange information with others to protect against fraud or credit risks.

Nothing in GDPR prevents the disclosure of anonymous data that contains no personally identifiable information for legitimate research purposes.

Your Rights

Under GDPR, you have the right to:

  • request access to, deletion of or correction of, your personal data held by us at no cost to you;
  • request that your personal data be transferred to another person (data portability);
  • be informed of what data processing is taking place;
  • restrict processing;
  • to object to processing of your personal data; and
  • complain to a supervisory authority.

None of your data is used for automated decision making and profiling To enforce any of the foregoing rights or if you have any other questions about our site or this Privacy Policy, please contact us.

How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us via our contact page.

You can also complain to the Information Commissioner (ICO) if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office, Wycliffe House. Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.

Changes

If we change our Privacy Policy, we will post the changes on this page. If we decide to, we may also email you.

Dispute Resolution

The Parties will use their best efforts to negotiate in good faith and settle any dispute that may arise out of or relate to this Privacy Policy or any breach of it.