Privacy
Policy

1. Badminton England Privacy Notice

Last updated 4 February 2022

This privacy notice explains how we, Badminton Association of England Limited of National Badminton Centre, Bradwell Road, Milton Keynes MK8 9LA (Badminton England), process your personal data when you use our services such as our website, app and content or otherwise engage with us online or offline.

If you are under 13 years old, you must not access our services without your parent or guardian. If you are older, you should speak to them or to us if you do not understand anything explained in this notice.

If you have any question about your data protection rights or if you do not understand anything explained in this notice, please contact us by email to DPO@badmintonengland.co.uk.

1. What is Badminton England?

We are the National Governing Body for the sport of badminton in England.

We are for everyone who wants to get involved in badminton whatever age, ability or gender. We love playing, watching and supporting badminton. We want everyone in England to do the same and become part of the badminton community, whether as a player, coach, volunteer or fan.

The unique qualities of badminton make it accessible and enjoyable for anyone and everyone. We work collaboratively with our partners and stakeholders to provide traditional and innovative opportunities for all to be involved; from primary school programmes to adult social badminton, from clubs to counties, and from our world class coaching development to our major events delivery.

We value and represent every single one of our members and fans as one collective voice for badminton in England. As our membership grows, so will our influence as badminton’s National Governing Body, allowing us to invest more back into the core of the sport.

2. Who does this privacy notice apply to?

This notice applies to:

• our users who access our website, app, content, booking facility or other online services;
• our prospective members identified as such by us or our third parties;
• our members;
• our suppliers and business partners;
• our volunteers and job applicants; and
• anyone else who interacts with us, when you call, email or visit us or otherwise interact with us.

This notice applies to you if you act in your personal capacity, for example, as our customer, and if you act in your professional capacity, for example, as an employee or agent of our supplier.

3. What types of personal data do we process?

Generally, “personal data” means any information that identifies you or relates to you, except for anonymised information that cannot reasonably be linked back to you.

Personal data will include your name, login details, booking or transaction details, the details of your enquiry and other information that is obviously about you. However, it will also include technical device, browser or app data, such as your IP address, your movement on the website, information about how you engage with our services and similar information. Based on your online visits, we may observe or infer information about your preferred content, features, trading style and other interests, even without you telling us.

For more on personal data, please see the categories of personal data below. You can exercise your rights in relation to all such personal data about you as set out below.

4. Your rights

• Right to information about matters set out in this You may also contact us for further details about our data retention policy, international data transfers and other matters that are unclear.
• Right to make an access request to receive a copy of your personal data held by us.
• Right to rectification of any inaccurate or incomplete personal data.
• Right to withdraw consent previously provided.
• Right to object to our processing of personal data based on our legitimate interests. Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.
• Right to erasure of personal data that is no longer needed.
• Restriction on the processing of personal data.
• Right to human intervention in respect of any automated decision-making without human involvement that significantly affected you.
• Right to data portability from one service provider to another, where applicable.
• Right to lodge a complaint with the Information Commissioner’s Office.

All requests will be processed without undue delay and no later than within one month. If we cannot process your request within this period, we shall explain why and process it as soon as possible thereafter.

5. Why do we process your information?

Organisations should only process personal data that is needed for their activities. The section below explains what personal data is necessary for each purpose. We keep our processes and data collection under review and will update this notice should any personal data no longer be necessary for the given purpose.

Purpose & description	Personal data	Lawful basis for processing*
To assist with your enquiries or when you visit our premises. For example, we may respond to questions about membership or our compliance team may respond to your complaint.	general details account details details of your query	Necessary for our legitimate interest in responding to enquiries, complying with the law and best practices or, as the case may be, necessary for taking steps prior to entering into a contract or the performance of our contract with you.
To provide our services to you, such as our online services including website, app, booking platform, tournament portal or content as well as our offline services, such as hosting YONEX All England Championships, English National Championships and other events, performance pathway programme, and other services.   For example, when you visit our website, your browser will provide your IP address, browser type and other technical information to enable us displaying our content in a compatible manner. If you login we will verify your account name, and password before granting access. If you visit our event, we may scan your ticket and record your attendance.	general details account details device and browser details usage data	Necessary for our legitimate interest in providing our services to the public and our customers, complying with the law and best practices or, as the case may be, necessary for the performance of our contract with you as our customer and compliance with our legal obligations.
To enable you to set up and maintain your user account. For example, we will verify your email when you register on our website and monitor access to your account for suspicious activity.	general details identity details replies to our questionnaire account details payment details	Necessary for the performance of our contract with you, compliance with our legal obligation and to satisfy our legitimate interest in keeping our users’ data safe, complying with best practice or applicable laws.
To enable you to purchase products and services. For example, our third party payments vendor will collect your payment card information if you make a purchase.	general details account details payment details	Necessary for the performance of our contract with you.
To send you service communications about matters relevant to your use of our services and your engagement with us, such as surveys or other forms of active engagement, prize draws, availability of new services, changes in our terms, transaction records, etc.	general details account details	Service communications are necessary for the performance of our contract with you or, as the case may be, necessary for our legitimate interest in facilitating our services and organising related activities.
To assess your job application and for business administration purposes. For example, if you apply for a job, we will review your CV, publicly available information about you, information from your previous employers, professional references, criminal and credit check and other information. We may use automated decision-making to eliminate applicants who fail to meet the basic criteria for a role.	general details details of your query public data third party data	Necessary for our legitimate interest in responding to you query and, as the case may be, necessary for taking steps prior to entering into a contract.
To understand our audiences and customer profiles for product and service development, research, trend analysis, marketing, advertising, content personalisation and business administration, as described below. Depending on purpose, we use your profile information in anonymised or pseudonymised or, when it comes to marketing by say email, identifiable form, e.g. your email address. In some cases, this will include information observed or inferred from your activity or other information about you. We want to give you the best possible user experience and we achieve that by getting the richest picture we can of who you are by combining the data we have about you into one single view.	general details account details device and browser details usage data transaction data public data preferences and interests engagement information third party data opportunity records	Necessary for our legitimate interest in understanding our typical customer profiles for service development, research, market intelligence, marketing, advertising, content personalisation and business administration. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services (please see our cookies notice).
To develop our features, services and organisation based on our anonymised audience data, reports and third party tools which rely on pixels or similar scripts to measure relevant events. For example, we deploy a tool which shows where your mouse travels on our website to measure the popularity of our content and features. Analytics tools help us understand your country, age group, pages visited before and after and other statistical demographic information about you and other users. Anonymous website statistics are used to decide which part of our services are not popular or may need further development to cater for our primary markets. In limited cases, it may be necessary to use your pseudonymised information to develop personalisation and similar features.	anonymised audience data In limited cases (e.g. to develop personalisation features) pseudonymised customer profile data.	Necessary for our legitimate interest in understanding the demographics of our users and customers, keeping our services relevant and in product development. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services (please see our cookies notice).
To identify trends and produce research for internal and external use. For example, anonymous transaction statistics allow us release reports about popular tournaments, visit rates, popular features, etc.	anonymised audience data	Necessary for our legitimate interest in utilising industry knowledge for strategic business decisions as well as sharing knowledge with the public.
To send you relevant marketing communications about our existing and new products and services by email, text, push, post or other channels if you sign up for a demo or if you are our existing customer or if you tell a third party that you are happy for us to contact you. Our marketing tools rely on cookies and similar scripts to track your interaction with our marketing messages, such as open rates or content clicked on, to optimise campaign performance.	general details account details	We rely on your consent if you sign up or on soft opt-in (presumed consent) if you are our existing customer. You can unsubscribe at any time. Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services (please see our cookies notice).
To display relevant advertisements on websites, apps, social media and other inventory. Our advertising tools rely on cookies, similar scripts and advertising ID solutions and complex automated processes and decision-making. However, we use pseudonymised information that does not include your name or similar information, except in limited cases where your details such as your email address is needed to identify you on social media for advertising purposes. We rely on your customer profile data to understand your interests and preferences known, observed and inferred to design marketing and advertising campaigns that are relevant to you (also known as “profiling”, “personalisation” and “predictive analytics”), use an ID such as your hashed email address to identify you within third party datasets without actually disclosing your email and allocate your profile to relevant audience segments (also known as “matching”, “data enrichment”, “targeting”) or matching you against our typical customer profile (creating “lookalike audiences“), and measuring conversion events linked to your advertising ID to optimise campaign performance.	pseudonymised customer profile data	Where required by law, we rely on your consent to deploy cookies or similar technologies on your device or to read information on your device except where necessary for essential services (please see our cookies notice). Some of our marketing and advertising activities are necessary for our legitimate interest in understanding your interests from the information available to us, information observed or inferred and third party information, in promoting our business and understanding campaign metrics.
To deliver personalised content and information to you based on your purchases and other profile information. The feature relies on numerous datapoints concerning you, your trading behaviour and the content you look at. This will include information such as your age, industry, country of residence, currency, your investment portfolio, content browsing history, time spent on content, details about your trading instructions, profit, how often you fund your account, your balance and other information.	pseudonymised customer profile data	We rely on your consent for content personalisation.
To manage our professional relationship with you using our record management systems and engagement tools, contacting you by phone and sending you marketing communications.	general details details of your query professional opportunity records	Necessary for our legitimate interest in understanding and maintaining our business relationships and administering our business. You have the right to unsubscribe from marketing at any time.
To ensure proper administration of our organisation, including to: ·         keep appropriate records about how our services are used; ·         resolve complaints; ·         conduct troubleshooting; ·         manage our relationships and identify opportunities; ·         conduct equality monitoring; ·         ensure the health & safety and make reasonable adjustments to accommodate special needs; ·         register interactions with our communications, such as emails; ·         enforce our terms; ·         debt collection; and ·         similar purposes.	all information as is necessary and proportionate for the administration of our organisation	Necessary for our legitimate interest in the proper administration of our organisation and services and necessary for compliance with our legal obligations or activities in the substantial public interest.
To engage our third party service providers who may process your personal data on our behalf to facilitate the provision of our services and the fulfilment of essential service functions which we cannot fulfil ourselves, such as web hosting, cloud storage, IT, analytics, payments, plugins, communications, accounting, security, CCTV and others as well as our advisors such as lawyers, accountants, insurers and others.	all information as is necessary and proportionate to enable the relevant service	Some activities are necessary for the performance of our contract with you, others are necessary for our legitimate interest in ensuring the proper operation of our services.
To introduce you to third parties who will provide additional services if you expressed an interest or requested such services.	all information as is necessary and proportionate to enable the relevant third party service	Some activities are necessary for the performance of our contract with you, others are necessary for our legitimate interest in providing you a good user experience, or subject to your consent.
To share information with public authorities or regulators to comply with our legal obligations as a financial services regulated firm.	all information as is lawful, necessary and proportionate	Where processing or sharing your data is necessary for compliance with a legal obligation to which we are subject, or, where necessary and proportionate, in order to satisfy our legitimate interest in complying with best practice or applicable laws.
To ensure health and safety at our premises. For example, depending on circumstances, we may introduce additional procedures to protect our staff from transmissible diseases.	special category data relating to health	Necessary for our legitimate interest in ensuring the health and safety of our staff and others, to comply with best practice or necessary for compliance with our legal obligations or activities in the substantial public interest.
To ensure the safety of people, security of our premises, the security of our systems and online services.   For example, we may monitor our networks, website, systems and premises for suspicious activities, test and audit our systems and deploy appropriate security measures.	device and browser details usage data CCTV data	Necessary for our legitimate interest in ensuring the security of our organisation, people and services and necessary for compliance with our legal obligations.
To monitor interactions and operations for fraud prevention and crime detection purposes, and share information with law enforcement authorities and anti-fraud bodies.	all information as is lawful, necessary and proportionate	Necessary for our legitimate interest in detecting and preventing fraud and illegal conduct and necessary for compliance with a legal obligation to which we are subject.
To share data with another organisation in accordance with the law for the purposes of a joint venture, collaboration, financing, sale, merger, reorganisation or similar event relating to our organisation.	all information as is lawful, necessary and proportionate	Necessary for our legitimate interest in acting in the best interest of our shareholders and investors and complying with our legal obligations.
To process and share information as is required for our compliance with the law or to establish, exercise or defend legal claims. To process and share information with other third parties where required by law, such as regulators, law enforcement agencies or where mandatory under a court order.	all information as is lawful, necessary and proportionate	Where processing or sharing your data is necessary for compliance with a legal obligation to which we are subject, to establish, exercise or defend legal claims, or, where necessary and proportionate, in order to satisfy our legitimate interest in complying with best practice or applicable laws.

We will update you about any new purposes of processing of your personal data from time to time, and we will obtain your prior consent for such new purposes where we are required to do so at law.

6. Who else gets to see your data?

Where required in connection with the purposes set out above, we will share your personal data with third parties, including (i) our third parties that provide services or advice to us, (ii) our marketing, advertising and analytics partners including Google, Adobe, Facebook and others, (iii) third parties who provide additional services to you, such as County Badminton Associations, ticket agencies, (iv) persons or authorities where we are compelled by law or responsible practices or for legal claims, (v) the relevant entity in case of a merger, acquisition or collaboration, and (vi) other third parties where you have provided your consent.

7. Third parties may process your personal data

Our services may contain links to other websites, third party services, such as Twitter, Facebook, LinkedIn, Instagram, YouTube and plugins. Some of the third parties who we share your personal data with, such as payment services providers or public authorities, process your personal data for their own purposes.

You should check the privacy statements of these third parties and we are not responsible for how they may process your personal data. Some of our third party service providers may use your anonymised personal data for business administration purposes.

Please note that all payments made when booking a facility on this website are made through a third party provider, IMIN LTD, a company registered in England and Wales with Company Number 07716450, whose trading address is 14-22, Elder Street, London, E1 6BT. By proceeding with a booking, you hereby agree to comply with IMIN LTD’s terms and conditions, a copy of which can be found here (hyperlink to http://www.imin.co/terms/consumer). At no time will a contract come into existence between you and IMIN LTD as it is only acting as a booking payment portal as between you and the leisure facility provider.

8. How long is your personal data kept?

We will keep your personal data for as long as is necessary for the purposes listed above or longer, as may be required by law or for legal claims. You may contact us for further details or request deletion of your personal data at any time.

The table below sets out general retention periods for specific categories of personal data.

Category of personal data	Retention period
account details, general details	2 years after account closure/last interaction
CCTV data	30 days from capture
device and browser details, engagement information, preferences and interests, third party data, usage data	2 years from collection
professional opportunity records	6 years from collection
payment details	Processed by our payment provider. Direct debit details will be kept for the duration of the mandate.
special categories data	Generally, not retained or only kept for the duration of the relevant event.

9. How do we secure your personal data?

We maintain appropriate organisational and technological safeguards to help protect against unauthorised use, access to or accidental loss, alteration or destruction of the personal data we hold. We also seek to ensure our third-party service providers do the same.

We will endeavour to use the least amount of personal data as is required for each purpose. We will employ pseudonymisation and anonymisation techniques, where appropriate.

Where appropriate, we apply security measures such as encryption or hashing when sharing your personal data with third parties.

Our staff will access your personal data on a “need to know” basis.

10. Where is your personal data processed?

Your personal data will be held in the UK. However, we use suppliers, business partners and other third parties in countries, such as the European countries or the United States.

Each of our recipients is subject to appropriate safeguards such as due diligence and the standard contractual clauses for international transfers of personal data.

11. Opt-out

If you would like us to stop sending you marketing communications and to process your personal data for direct marketing purposes, please contact us.

You can request to stop receiving our marketing communications at any time by clicking on the unsubscribe link at the bottom of each marketing message and we will add you to a suppression list or otherwise arrange that you no longer receive marketing communications.

12. Categories of Personal data

Category of personal data	Description
user account details	username, password, and similar information.
CCTV data	Image data recorded by our CCTV.
details of your query	Information in your query, complaint, job application or other communication.
device and browser details	Information automatically provided by your device and browser including mobile device ID, internet protocol (IP) address, cookie ID, online identifiers, operating system, browser type, language, time zone setting, location and date and time of access.
engagement information	Information about your engagement with our emails and other communications or with our content on the Internet including open rates, click rates, view rates, active time spent, survey data, feedback data and similar information.
general details	Your name, date of birth, address, email, telephone number, email address,  and role and employer details if you are acting in your professional capacity and similar information.
identity details	Your passport details, image, social insurance number, tax payer ID and similar information.
professional opportunity records	Your personal and professional details as business customer and other opportunity records.
payment details	Payment card, bank account details and similar information.
preferences and interests	Information about your preferences and interests known, observed or inferred from various sources.
public data	Publicly available information about you.
special categories data	Except for health and safety, diversity monitoring or for other important reasons, we do not process information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
third party data	Information provided by third parties about your interaction with our posts and content and ‘likes’ on social media platforms, such as Twitter, Facebook, Instagram, LinkedIn or YouTube, online reviews, comments, your preferences and interests received from our advertising and analytics partners, references from your previous employer, referees, membership organisations and other third parties.
transaction data	Information about your purchases and transactions in our services.
usage data	Information about how you navigate and engage with our online services, features including online activity data such as downloads, clickstream data with URLs visited previously, page interaction, such as scrolling, clicks, and mouse-overs, methods used to browse away from our website, information in security logs and similar information.

13. Updates

If we make any changes to our notice, you will be able to see them on this page. You should regularly check for updates, as indicated by the “Last updated” date at the top.

If you do not agree with the changes, please do not continue to use our website or services. Of course, if any such changes significantly affect you, we will ask for your prior consent where we are required to do so by law.