Making contact

When you contact us via email, we will collect and store the details you give us, which may include your first name and surname, email address, and any other information you choose to provide us. We collect this data directly from you when you contact us.  

We use the data you provide us to communicate with you, answer your queries, and to respond to your requests. Your data is stored in the UK or the Netherlands, and we keep it for up to 2 years and it is not shared with any third parties, except on occasion with service providers (listed in 'Part 4' of this notice) to ensure that our services are maintained.  

Our legal basis for processing your data is legitimate interest, and we process your data to respond to you contacting us. 

When you use ITV Kerching

Information sent to us by your computer, mobile phone, or other device (such as a tablet) including:

Randomly assigned anonymous click IDs for each visit to an online retailer that we have a deal with or a discount code is available which is used-

Pseudonymised randomly assigned user ID (Kindred ID)

- Website URL where you activate an available deal and/or discount code as well as the domains you have visited in the previous 24 hours to check against the list of domains that ITV Kerching supports

- Your device type and model, your carrier, operating system, & browser. 

- Whether a transaction has happened, purchase history within affiliated retailers and the basket value if you use one discount codes surfaced by ITV Kerching

-Your interactions with ITV Kerching, such as, your preferences for having deals automatically activated or not, showing the discounts pin, keep track of the progress of the coupon process if there is a site refresh, whether you have interacted with a deal before, the permissions you have granted on the ITV Kerching extension

We collect this data directly from you.

We use your data to:

- Administer ITV Kerching, 

- Report to ITV about the operation of ITV Kerching, 

- Monitor the security and stability of the service and assist us to fix errors, 

 - Disable access to our systems to keep them secure or if we detect an abuse of our service in breach of our terms and conditions, record and receive the affiliate commissions where we have an affiliate relationship with retailers or through affiliate networks (the commission does not cost you anything on any discount or offer that you may receive using ITV Kerching) and to provide you with support. 

We use legitimate interest to process your data to provide ITV Kerching and to administer our affiliate relationships

Data Protection law requires that we process your personal data in accordance with established data protection principles

Lawfulness, fairness, and transparency

We must only process your personal data lawfully, fairly and in a transparent manner.

Purpose limitation

We collect your personal data only for specified, explicit and legitimate purposes.

Data minimisation

We ensure that your personal data is adequate, relevant, and limited to what is necessary in relation to the service that we are providing you.

Accuracy

We ensure that your personal data is accurate and where necessary, kept up to date.

Storage limitation

We ensure that your personal data is not kept in a form which allows for you to be identified for longer than is necessary.

Integrity and confidentiality

We process your personal data in a manner that ensures its security using appropriate technical and organisational measures to protect it against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

You have several rights under data protection law, that Kindred is required to uphold. It is important to recognise that not all rights apply all the time, which means some rights are dependent on our relationship and interactions with you.

Access

You have the right to ask us for copies of your personal data.

This right always applies, however there may be some exemptions, which means you may not always receive all the personal data we process.

Rectification

You have the right to ask us to rectify any of your personal data that you think is inaccurate or incomplete.

This right always applies.

Erasure

You have the right to ask us to erase your personal data:

Where it is no longer required for the purpose for which it was collected, or

Where you withdraw your prior consent to us processing it and we have no other legal ground for processing it, or

Where it is being processed unlawfully, or

When it must be erased to comply with a legal obligation, or

Where you object to direct marketing, or

Where you make a justified objection and we have no legitimate grounds for overriding your objection. 

Restriction

You have the right to ask us to restrict the processing of your personal data:

Where it is inaccurate (allowing us to verify the accuracy), or

Where it is being processed unlawfully (and you want us to stop processing rather than erasing it), or

Where you have objected to us processing it while we’re verifying whether we have legitimate grounds for processing, or

Where it is no longer required for the purpose for which it was collected, and you want us to keep it for the establishment, exercise, or defence of legal claims.

Portability

You have the right to ask us to transfer the information you provided us from one organisation to another or give it to you.

This only applies if we are processing personal data based on your consent or as part of a contract, or are in talks with you about entering into a contract and the processing is automated.

This only applies to personal data you have given us.

Objection

You have the right to object to processing your personal data if:

We are using legitimate interests as our lawful basis for processing, or

It is being used for direct marketing.

Withdraw consent

You have the right to withdraw your consent that you have previously given to us for one or more specified purposes to process your personal data.

This will not affect the lawfulness of any processing carried out before you withdraw your consent.

We will advise if withdrawal of consent means that we cannot provide the service to you.  

We are required to tell you about a few other things

Complaints

You have the right to complain to a Supervisory Authority, in the UK that is the Information Commissioner’s Office.

We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please consider contacting us first.

Automated decision-making and profiling

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless you have given us your consent to do so, or it is necessary for entering into or the performance of a contract.

Change of purpose

We will only use your personal data for the purposes for which we have collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at itvkerching@kindredteam.com.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by UK law.

Disclosure of your data

Kindred shares your data to support its relationship and interactions with you, with those identified in ‘Part 4: Other Processors’

Breaches

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Dealing with your requests

We will deal with your requests as soon as possible which may take up to 1 (one) month and if this is likely to take longer, we will contact you and explain the situation (possibly extended to 3 months where the law permits). Normally there is no charge, however we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive or we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that your personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Security

Kindred is ISO27001 certified, and we have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, destroyed, or accessed without authorisation. This includes consideration of security during the design and development of our services and products.

While no data transmission or storage can be guaranteed to be secure, we implement a range of commercially reasonable physical, technical, and procedural measures to help protect personal data. These measures include policies, confidentiality agreements with third parties, secure development practices, security due diligence of service providers, products and services that may be used.

Azure

Cloud storage provider which stores Kindred data you provide and provides disaster recovery

All users and partners.

EU   

https://azure.microsoft.com/en-us/overview/trusted-cloud/privacy/ 

Freshdesk

Customer relationship management information    

All users who choose to contact Kindred

EU