Please select the types of cookies you consent to:
Last updated: 14 March 2023
1.1. Our websites and services are operated by Tap In Media Ltd, a company registered in England and Wales under company number 11044802, assigned VAT registration number 357 6177 66, whose registered office is at Peter House, Oxford Street, Manchester, England, M1 5AN (the “Company”, “we“, “us” or “our“). The Company respects your privacy and is committed to treating any information that we obtain about you with as much care as possible and in a manner that is compliant with all applicable data protection legislation including the retained EU law version of the General Data Protection Regulation 2016/679 (“UK GDPR“), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (collectively, “Data Protection Legislation“).
1.2.1. What personal data we may collect about you in connection with:
184.108.40.206. providing you with our services;
220.127.116.11.and any other interaction between you and us through any other channels related or ancillary to the foregoing, (collectively, the “Channels“);
1.2.2.how we collect, store, disclose, transfer, protect and otherwise process that personal data (and for what purposes); and
1.2.3. other important information, such as the lawful bases by which we process your personal data, how long we might retain your personal data, and the rights you have in relation to personal data we hold about you.
1.4. In this policy, terms defined in the UK GDPR, including “data subject”, “personal data“, and “processing“, have the same meaning when used in this policy. The words “include”, “including”, “such as” and similar words and phrases shall be construed to mean “including without limitations”.
1.5. This policy is intended to be communicated to you in a concise, transparent, intelligible and easily accessible manner, but we appreciate that you may have queries or want to seek clarification as to its terms. If so, please email email@example.com or write to Data
Protection Enquiries, Tap In Media Ltd, Peter House, Oxford Street, Manchester, England, M1 5AN and we will endeavour to respond as soon as possible.
1.7 Our Data Privacy Manager is Milimo Banji and they are responsible for overseeing questions in relation to this policy. If you have any questions about this policy, including any requests to exercise your legal rights, please contact the Data Privacy Manager Milimo Banji using the details set out in paragraph 12 below.
2. The personal data we process
2.1. We collect personal data about you through the Channels when you:
2.1.1.access and use our websites (including automatically collecting technical data about your equipment, browsing actions and patterns, by way of cookies – please refer to paragraph 11 below for more information);
2.1.2. register your interest on our website or request marketing to be sent to you or subscribe for other services, contests, competitions, prize draws, promotions, special events, or our mailing list;
2.1.3. contact us (whether in writing, by email, by telephone or otherwise), including via social media or any contact forms on our website;
2.1.4.make any enquiry or application with respect to careers, vacancies or opportunities at the Company;
2.1.5.purchase, request or subscribe for a project or service from us;
2.1.6. request client support or any other type of support;
2.1.7.participate in polls, surveys and questionnaires;
2.1.8.post content on our social media pages;
2.1.9.or otherwise interact with us through the Channels;
2.1.10. we may also lawfully obtain information from third parties or public sources and we may process that information where it is an essential component of the products and services we offer you, namely;
18.104.22.168. 37 Signals LLC (trading service Basecamp): A project management software utilised for online collaboration of projects, including but not limited to website development by TapIn Media Ltd with third party suppliers and freelancers.
22.214.171.124.All in one WP Migration: A WordPress compatible plugin enabling TapIn Media Ltd to export a package file including our database, media file, plugins and themes to relocate and unpack into an accessible website dashboard to manage www.wearetapin.com and affiliated sites.
126.96.36.199. Asana: Provides subjects with a digital form to complete designed by TapIn Media Ltd. to capture information necessary to produce agreements (includes but not limited to those described in section 4).
188.8.131.52. Automattic Inc (trading entity Word Press): A website builder and publishing tool for distributed companies on the open web, enabling TapIn Media Ltd to create and publish www.wearetapin.com.
184.108.40.206. Charlie HR: An online HR software and data management system for internal employees of TapIn Media Ltd.
220.127.116.11.Cookie Notice & Compliance for GDPR/CCPA: Cookie Notice provides a customisable website banner that can be used to help www.wearetapin.com comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes integration with Cookie Compliance to help TapIn Media Ltd comply with the latest updates to existing consent laws. Cookie Compliance is a Consent Management Platform (CMP) that provides automated compliance features and enhanced design controls via a web application for TapIn Media Ltd.
18.104.22.168. Crocoblock: A plugin provider with compatible plugins for Elementor Pro and provider of the JetPlugins toolkit for Gutenberg (WordPress site builder), enhancing the development and UX of www.wearetapin.com.
22.214.171.124. DoubleClick Bid Manager: An online platform enabling TapIn Media Ltd online advertising across ad exchanges, on an impression-by-impression basis, in real time.
126.96.36.199. DoubleClick Digital Marketing (DDM): An integrated ad technology platform that enables TapIn Media Ltd to more effectively create, manage and grow high-impact digital marketing campaigns.
188.8.131.52. DoubleClick Digital Marketing Manager: Ad serving and management solutions for TapIn Media Ltd’s digital advertising campaigns, including trafficking and reporting.
184.108.40.206.DoubleClick Rich Media: An end-to-end system for producing, managing and reporting on rich media advertising for TapIn Media Ltd.
220.127.116.11. DoubleClick Search: A search management platform that enables TapIn Media Ltd to create, manage, report on, and optimise search campaigns across multiple engines.
18.104.22.168. DoubleClick Studio: Production and workflow tools used by TapIn Media Ltd to produce and manage DoubleClick Rich Media ad units.
22.214.171.124. Dropbox Sign: An online platform that keeps content safe and accessible, enabling TapIn Media Ltd to stay coordinated and in sync when collaborating or contracting work to partners, clients, sponsors, influencers, suppliers and freelancers.
126.96.36.199. Elementor Pro: A website builder platform and visual editor for open sourced WordPress websites including www.wearetapin.com .
188.8.131.52. Eventbrite: A ticketing and registration platform that enables users to create, discover, share and register for event via the web and mobile apps (note third parties are used for the purposes including but not limited to RFID, entry management, sponsorship and marketing or distribution services; through mobile applications, webpages, application programming interfaces, and subdomains).
184.108.40.206. Gather: Gather is a service-based platform that enables TapIn Media Ltd to build customised virtual spaces (our remote office) and host events in those spaces.
220.127.116.11. Gmail: A secure and easy-to-use email tool for TapIn Media Ltd employees to communicate internally and externally.
18.104.22.168. Google ads: An online advertising platform where TapIn Media Ltd bid to display brief advertisements, service offerings, product listings, or videos to web users. It can place ads both in the results of search engines like Google Search and on non-search websites, mobile apps, and videos.
22.214.171.124. Google Analytics: A holistic measurement and attribution tool that helps TapIn Media Ltd across their digital marketing efforts.
126.96.36.199. Google Calendar: A visual planning tool for the internal workload of TapIn Media Ltd employees and a shareable calendar to manage internal and external meetings and collaborations.
188.8.131.52. Google Docs: An online document management tool enabling TapIn Media Ltd to create and collaborate on online documents in real-time and from any device with easy sharing, and use of comments, suggestions, and action items to keep things moving.
184.108.40.206. Google Drive: Cloud storage for TapIn Media Ltd to store, share, and collaborate on files and folders from mobile devices, tablets, or computers with built-in protections against malware, spam, and ransomware.
220.127.116.11. Google Forms: An online form creator enabling TapIn Media Ltd to easily create and share online forms and surveys for internal use, and analyse responses in real-time.
18.104.22.168. Google Groups: A communication tool enabling TapIn Media Ltd to direct content to specific team members and access to group email communications.
22.214.171.124. Google Sheets: An online spreadsheet management tool enabling TapIn Media Ltd to create and collaborate on online spreadsheets in real-time and from any device with easy sharing, and use of comments, suggestions, and action items to make data-driven decisions.
126.96.36.199. Google Slides: An online presentation management tool enabling TapIn Media Ltd to create and collaborate on online presentations in real-time and from any device with easy sharing, and use of comments, suggestions, and action items to tell impactful stories.
188.8.131.52. GoogleMeet: A video conferencing tool used by TapIn Media Ltd to have secure video meetings internally and externally.
184.108.40.206. Health Assured: An online employee wellness provider, with a 24/7 support service within their employee assistance program for TapIn Media Ltd employees.
220.127.116.11. Hot Jar: A software that enables TapIn Media Ltd to analyse what site visitors are doing on the Hotjar Enabled Site www.wearetapin.com and affiliated sites.
18.104.22.168..Hubspot (Sales & Marketing): Enables the collection and management of personal data via the web-based application, tools and platforms of those with a legitimate interest in TapIn Media Ltd for customer or supplier purposes (including but not limited to influencers, clients, students, young job seekers).
22.214.171.124. iHASCO: An online training and development service for the purpose of upskilling TapIn Media Ltd employees.
126.96.36.199. Linked In: A social network and online platform for professionals, used to share business information, opportunities and build networks via connections; TapIn Media Ltd utilises this platform organically and via paid advertising.
188.8.131.52. Meta Platforms Inc. (operating Facebook and Instagram): Builds technologies that help people connect, find communities and grow business. TapIn Media uses Facebook and Instagram for the purpose of community growth and advertising.
184.108.40.206. Miro: An online platform and whiteboard tool TapIn Media Ltd employees connect, collaborate, and create notes and designs, move things around, and communicate through embedded video calls or online chats.
220.127.116.11. Office 365 (including Microsoft Teams): A cloud collaboration and communication suite, used for the purpose of TapIn Media Ltd teamwork, communication (including emails and group chats), file storing and sharing, project and customer relationship management, webinars and live events.
18.104.22.168. RadiateCapital Limited (trading as "Rebrandly"): Tracks how users arrive at our website, social media platforms or other partner sites by rebranded TapIn Media URL links.
22.214.171.124. Read Meter: An open source software and plugin that displays the estimated reading time for blog posts along with a progress bar on www.wearetapin.com, providing visitors with a visual of the time needed to read a post or page.
126.96.36.199. Revolut: A digital money management tool and app enabling TapIn Media Ltd to control their spending and minimise costs, accept payments, and manage their balance sheet and employees.
188.8.131.52. Rocket Science Group (Trading operator ‘Mailchimp’): A marketing automation platform and email marketing service TapIn Media Ltd use for selected email marketing campaigns internally and externally for third parties.
184.108.40.206. Simple Image Sizes: An open source software and plugin that allows the creation of custom image sizes for www.wearetapin.com, by overriding website builder theme sizes directly on media management pages.
220.127.116.11. Smart Pension: A workplace pension provider that offers TapIn Media Ltd a defined contribution master trust on behalf of TapIn Media Ltd employees.
18.104.22.168. Snapchat Inc: A camera company with products and services utilised by TapIn Media Ltd for their advertising services, to reach relevant users by perceived interests.
22.214.171.124. Tally: Captures data by digital forms designed by TapIn Media Ltd without limits to input blocks or respondents for marketing and research purposes.
126.96.36.199.Team Tailor: An applicant tracking system with features optimised for TapIn Media Ltd and potential candidates to facilitate the recruitment process.
188.8.131.52. Ticketmaster: A ticketing and registration platform that enables users to create, discover, share and register for event via the web and mobile apps (note third parties are used for the purposes including but not limited to RFID, entry management, IT infrastructure sponsorship and marketing or distribution services; through mobile applications, webpages, application programming interfaces, and subdomains) - part of the Live Nation Entertainment Group.
184.108.40.206. TikTok: A short-form mobile video platform, with advertising services used by TapIn Media Ltd and client brands.
220.127.116.11. Twitter: Twitter is a public social media platform enabling users to share and disclose information as broadly as possible. TapIn Media Ltd. may use publicly available content on twitter for research or influencer marketing purposes.
18.104.22.168. Typeform: Typeform is a provider of a service enabling TapIn Media Ltd to collect, use and store data for research purposes on behalf of TapIn Media Ltd and partnering clients projects (Please note that Typeform are not the entity responsible for the processing of data, but a mere provider rendering services to TapIn Media Ltd that issues forms as part of research projects.)
22.214.171.124. Universe: An open ticketing platform, that hosts listings and sells tickets on behalf of companies or individuals - TapIn Media Ltd is described as a ‘Seller’ when setting up events on this platform (part of the Liver Nation Entertainment Group).
126.96.36.199. White Label CMS: Open source software and plugin used to improve the usability of the content management system for www.wearetapin.com.
188.8.131.52. Wix: A website builder and publishing tool for distributed companies on the open web, enabling TapIn Media Ltd to create and publish www.thisisblackgenz.com.
184.108.40.206. Worth The Read: An open source software developed by Plugin Developer Brian McCulloh. WordPress action hooks are used to insert small html tags above and below post/page content and comments on TapIn Media Ltd’s main site www.wearetapin.com. jQuery is used to target those tags and use them to calculate distances on window scroll, and then the actual progress bar is animated accordingly for www.wearetapin.com.
220.127.116.11. WP CodeLite: A WordPress plugin that is licensed under the GNU general public licence (https://www.gnu.org/licenses/gpl.html) version 2.0 or later, enabling TapIn Media Ltd and third-party suppliers to add code-snippets in WordPress without having to edit your theme’s functions.php file.
18.104.22.168. WPRocket: A cache plugin that improves the speed and performance of www.wearetapin.com.
22.214.171.124. Yoast SEO: Yoast is a software that optimises text based and technical SEO to improve the traffic driven to www.wearetapin.com via search engines.
126.96.36.199. YouTube: Allows users to discover, watch and share videos and other content, provides a forum for people to connect, inform, and inspire others across the globe, and acts as a distribution platform for original content creators and advertisers large and small. TapIn Media Ltd hosts content on its own channels and utilises YouTube advertising on behalf of clients and TapIn.
188.8.131.52. Zapier Inc: The services allow TapIn Media Ltd to integrate and create actions or commands between various third-party applications, of which an existing account already exists ready for integration (third-party applications are listed in this section and authentication is used when logging into each application).
2.2. The type of personal data we process may include (if and as applicable):
2.2.2.identity and contact data such as your name, or similar identifier, date of birth, gender, company/organisation name, job title, email address, billing address, postal address, telephone number, your image when you provide us with copies of your photographic identification, proof of address documentation and other information provided by you when you subscribe for other services, contests, competitions, prize draws, promotions, special events, our mailing list or which you provide in any correspondence with us;
2.2.3.if you enquire or apply for any projects or opportunities at the Company, your CV, résumé, educational background, employment history and any other information you provide in connection therewith;
2.2.4.financial data including bank account and payment details and your preferences and other information provided or obtained in connection with any project you are involved with;
2.2.5.enquiry and correspondence data including your responses to any polls, surveys and questionnaires we may run from time to time (if you choose to participate);
2.2.6.any personal data contained in content you post on our social media pages;
2.2.7.CRM data including any information relating to your interests, preferences, feedback and testimonials, and transaction data such as details about payments to and from you and details of your invoice history;
2.2.8 usage data including information about how you use our websites and services;
2.2.9 marketing and communications data including your preferences in receiving marketing from us and our third parties and your communication preferences; and
2.2.10 we also collect, use and share aggregated data such as statistical or demographic data. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this policy.
2.3. Because of the nature of our services, we may process special categories of personal data, subject to your explicit consent, (including details about your gender, race or ethnicity, nationality, religious or philosophical beliefs, sexual orientation, family unit and family employment during primitive years until 18, education disabilities and information about your health and genetic and biometric data) for public interest research purposes and optimised service delivery for employers and novice employment seekers. Research includes but is not limited to quantitative, qualitative and mixed methods. The nature of research aims to help understand the lived experience of young people in the world of work, thus special category data is required to understand if any correlation factors exist that shape an individual's lived experience. Optimised service delivery includes but is not limited to, providing interest specific content relative to digital audiences, support for employers to attract diverse talent into the workplace and support to novice employment seekers about employers by sharing knowledge and expertise. . Race, ethnic origin and religious beliefs may also be evident from any photo you send to us. Special category data is handled with due diligence by restricted personnel only, and is password encrypted where necessary.
2.4. We do not process any information about criminal convictions and offences or any information about children under the age of 13, and you should not provide us with any such information through any of the Channels.
3. The purposes for which we process your personal data
3.1. We use the personal data referred to in paragraph 2 above for the purposes of (if and as applicable):
3.1.1.personalising content on the channels;
3.1.2. sending you promotional and marketing materials, notifications, updates and exclusive news or opportunities;
3.1.3.providing you with access to our products and services, processing payments and fulfilling project or content deliverables
3.1.4.internal training and other internal uses to improve our services and customer experience (including improving our marketing and promotional efforts, analysing channel usage statistics, improving content and product offerings and customising the content and layout of and online websites);
3.1.5. responding to any correspondence from you including enquiries, comments, complaints and technical problems;
3.1.6.if your data was provided in connection with a research opportunity or similar, assessing your fitness and eligibility for any particular project
3.1.7.administering any polls, services, questionnaires, contests, competitions, prize draws or special events which you may have subscribed for;
3.1.8. recording your engagement history, interactions and any project communications with us;
3.1.9. market research and demographic studies;
3.1.10. providing you with access to public or private events,
3.1.11. sharing relevant influencer marketing content based on your preferences; and
3.2. We may process your personal data for the purposes set out in paragraph 3.1 ourselves or in conjunction with our third party service providers (in accordance with paragraph 6).
3.3 We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your personal data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing. We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
3.4 We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation. You can ask us or third parties to stop sending you marketing messages at any time by emailing firstname.lastname@example.org or by following the opt-out instructions on any marketing message sent to you. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a purchase, service experience or other transactions (i.e. service emails).
3.5 We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us (see paragraph 12 below). If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
4. The lawful bases by which we process your personal data
4.1. Your consent
By accepting the terms of this policy, you give the Company your express, freely given consent to process any of your personal data in accordance with the terms of this policy. We will get your consent before sending third party direct marketing communications to you. You may withdraw your consent given under this paragraph (in whole or in part) at any time by contacting email@example.com. You can also unsubscribe from different types of emails by following the unsubscribe link displayed at the bottom of each email. The withdrawal of your consent shall not affect the lawfulness of processing based on consent before withdrawal or the lawfulness of processing based on other lawful grounds as set out below.
4.2. Other lawful grounds
Without prejudice to the consent given by you under paragraph 4.1 above, the Company may process your personal data in any circumstances where such processing is necessary:
4.2.4. where processing data is necessary to facilitate projects and tasks that are considered of public interest, including but not limited to gaining insights about talent attraction, recruitment, employee retention, barriers to entry into the workplace, challenges in the workplace and workplace culture.
4.3 Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in this policy.
5. What if you refuse to provide us with any personal data?
5.1. Where we need to collect personal data by law, or under the terms of an agreement we have with you, and you fail to provide that data when requested (or fail to consent to the processing of that data, if necessary), we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
5.2. Whilst we may be able to provide you with certain products and services notwithstanding your refusal to submit personal data, this may limit your ability to participate in some activities or features or your use of certain online services or functionality.
6. Sharing information with affiliates and third parties
6.1. We will not share any of your personal data with third parties except as set out in this paragraph 6 or otherwise notified to you or agreed between you and us from time to time.
6.2. We may share personal data with our group companies and partnered companies (together, “Affiliates“) in order to provide our services to you and for the other purposes outlined in this policy. We may also share personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this policy.
6.3. From time to time, we will also need to share personal data with the following types of third party service providers who we engage to provide services which facilitate our business activities and who may need to process your personal data to the extent necessary to provide those services: 6.3.1. our advertising management providers including; Double Click Bid Manager, Double Click Digital Marketing, Double Click Marketing Manager, Double Click Rich Media, Double Click Search, Double Click Studio and Google Ads
6.3.2. our cloud storage providers including; Dropbox Sign and Google Drive
6.3.3. our communications platforms including; Google Meet and Office 365
6.3.4. our customer relationship management platform including Hubspot Sales and Marketing
6.3.5. our data management and measurement tools including Google Analytics, Google Forms, Hot Jar, Rebrandly, Tally and Typeform
6.3.6. our document management platforms including; Google Docs, Google Sheets and Google Slides
6.3.7. our email marketing and management platforms including Gmail, Mailchimp and Hubspot Sales and Marketing
6.3.8. our finance management tools including; Revolut and Smart Pension
6.3.9. our human resource providers including; Charlie HR and Team Tailor
6.3.10. our internal communications providers including Gather, Google Groups, Health Assured and Miro
6.4.11. our project management tools including; Asana, Google Calendar, Zapier Inc and Basecamp
6.4.12.our social media platforms including;l Linked In, Meta, Snapchat Inc, TIK TOK, Twitter and YouTube
6.4.13. our ticketing providers including; Eventbrite, Ticketmaster and Universe
6.4.14. our training provider including iHASCO
6.4.15. our Website Development tools including; Automattic Inc, Cookie Notice & Compliance for GDPR/CCPA, Crocoblock, Elementor Pro, Read Meter, Simple Image Sizes, White Label CMS, Six, Worth the Read, WP CodeLite, WPRocket and Yoast SEO
6.3.16.other third parties approved by you from time to time, such as social media
sites which you link to your account (if and when we offer that feature) or share content via or third parties who sponsor, or administer on our behalf, any competitions, prize draws, promotions or surveys which you voluntarily partake in; and
6.3.17.any similar or replacement third parties from time to time.
6.4. We seek to ensure that any third party engaged by us who processes your personal data in connection with such engagement has policies and procedures in place to ensure compliance with the Data Protection Legislation. Freelancers and contractors adhere to TapIn Media Ltd’s data management procedures, using a TapIn Media owned device where possible. Contract agreements include a legal clause to return and destroy any data handled where other devices are used by freelancers or contractors, and only limited personnel will have access to confidential or sensitive data. Freelancers or contractors may be used for business activities including;
6.4.1. Research projects
6.4.2. Campaign management
6.4.3. Marketing management
6.4.5. Event management
6.4.6. Project management
6.4.7. Other business activities from time to time
6.5. For any third parties that are based, or process data, overseas, we only engage such third parties in accordance with paragraph 7.
6.6. Unless otherwise disclosed to you from time to time, we will remain the data controller in respect of your personal data notwithstanding that third parties may be engaged as data processors.
7. International transfers of personal data
7.1. From time to time it may be necessary for us to transfer your information internationally. In particular your information may be transferred to and/or stored on the servers of our Affiliates or other third parties identified in paragraph 6 which are based outside of the EEA. Transfers to external parties based outside the UK are known as “third countries” and may not have data protection laws that are as strong as those in the UK. We will take additional steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and will be fully protected under the Data Protection Legislation and/or to equivalent standards by law. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.
7.2. However, we will not transfer your personal data outside of the EEA unless:
7.2.1. such transfer is to a country or jurisdiction which the EU Commission has approved as having an adequate level of protection. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries;
7.2.2.appropriate safeguards are in place as set out in Article 46 UK GDPR or equivalent provisions of subsequent Data Protection Legislation; or
7.2.3.the transfer is otherwise allowed by applicable Data Protection Legislation (such as in the form of a derogation under Article 49 UK GDPR or by using specific approved contracts which ensure the same levels of personal data protection that apply under the Data Protection Legislation. For further details, see European Commission: Model contracts for the transfer of personal data to third countries).
By giving us your personal data, you agree to these arrangements. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data internationally.
8. Your rights as a data subject
8.1. Subject to any conditions or requirements set out in the relevant Data Protection Legislation, you may have some or all of the following rights in relation to the personal data we hold about you:
8.1.1.the right to request a copy of your personal data held by us (commonly known as a "data subject access request") and to check that we are lawfully processing it;
8.1.2.the right to correct any inaccurate or incomplete personal data held by us. You can deactivate your account, or amend any personal data which cannot be modified online, by emailing us at firstname.lastname@example.org.
8.1.3.the right to request that we erase the personal data we hold about you. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request;
8.1.4.the right to request that we restrict the processing of your data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: if you want us to establish the data's accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;
8.1.5.the right to have your personal data transferred to you or to another organisation. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you;
8.1.6.the right to object to certain types of processing of your personal data by us where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms; and
8.1.7.the right to withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
8.2. Please note however that these rights are not absolute in all situations and may be subject to conditions and provisos set out in relevant Data Protection Legislation. The Company cannot therefore guarantee that any request from you in connection with the rights set out above will be agreed to. For further information, or to see if you can exercise any particular right, please contact us at email@example.com.
8.3 You also have the right to ask us not to continue to process your personal data for marketing purposes. If you wish to exercise any of the rights set out above, please contact us. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
8.4 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
8.5 We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. In the case of subject access requests, normally, we aim to provide a complete response, including a copy of your personal data within one month. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
8.6 If you require any information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in paragraph 12. Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
9. Storage and retention of your personal data
Data is stored and contained via the web-based infrastructure of third-party platforms (described in section 2), with limited access by required personnel only and password encryption where necessary. Cross-platform integrations are used where necessary (between platforms described in section 2). Where data exports are necessary, a project data handler using a TapIn Media Ltd. owned device will complete the export before anonymising the data for analysis by third-parties and, or on third-party platforms (included in section 2)
9.1. We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Data is retained for a minimum of 6 years for tax purposes and a maximum of 10 years when the customer lifecycle of the youngest demographic terminates (unless a subject opts to unsubscribe prior to this).Data is monitored annually and any subject data that is deemed out of date after the 6 year minimum terms will not be retained (including but not limited to subjects that are no longer eligible for targeted services). To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. As a minimum, we need to store your data for as long as is necessary to enable us to provide you with the services that you have requested from us (or to support your other uses of our Channels, such as maintaining your account on our website). However, we will retain certain of your personal data for longer if we think it is reasonably necessary to do so in the circumstances, taking into consideration factors such as:
9.1.1.our need to perform any agreements between you and us (including order fulfilment); 9.1.2.our need to answer any queries or resolve any problems you may have;
9.1.3.your continued consent to receive marketing and other emails and communications from us;
9.1.4.our continued provision of our services to you; and
9.1.5.our need to comply with legal requirements (e.g. relating to record keeping).
9.2. In some circumstances you can ask us to delete your data: see ‘your rights as a data subject’ above for further information. If you tell us that you would like to delete your account, we will take steps to delete all the personal data we hold about you once it is no longer necessary for us to hold it (e.g. to fulfil any outstanding orders, resolve disputes, or as is permitted by applicable law or regulation).
9.3. For as long as we do store your data, the Company follows generally accepted industry standards and maintains reasonable safeguards to attempt to ensure the security, integrity, and privacy of the information you have provided. The Company has security measures in place designed to protect against the loss, misuse, and alteration of the information under our control, as well as limiting access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. Personal data collected by the Company in connection with this policy is stored in secure operating environments that are not available to the public. The Company maintains information at secure data centers, where information is encrypted end-to-end when being transferred or stored. Other measures used include; two-factor authentication; in-house access controls; password protection; secure deletion and data handling processes for TapIn Media Ltd employees and outsourced third parties.
9.4. Notwithstanding our efforts to keep your personal data secure, no system can be 100% reliable. To the fullest extent permitted by law, we cannot be held liable for any loss you may suffer if a third party procures unauthorised access to any data you provide through the Channels. In addition, you are responsible for maintaining the strength and confidentiality of your login credentials (if any).
9.5. We have put in place procedures to deal with any suspected personal data breach and will notify you (and any applicable regulator where we are legally required to do so) as soon as reasonably practicable if we have reason to believe that there has been a personal data breach by us which could adversely affect your rights and freedoms.
10. Links to third parties
10.1. Our Channels may link or redirect to other websites that are beyond our control. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Such links or redirections are not endorsements of such websites or representation of our affiliation with them in any way and such third party websites are outside the scope of this policy.
10.2. If you access such third party websites, please ensure that you are satisfied with their respective privacy policies before you provide them with any personal data. We cannot be held responsible for the activities, privacy policies or levels of privacy compliance of any website operated by any third party.
11.1. A cookie is a small file of letters and numbers stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive.
The pop-up enables users to select or deselect the type of cookies they consent to being used.
11.3.1. Strictly necessary cookies. These are cookies that are essential for the operation of our website.
11.3.2. Analytical/performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
11.3.3. Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences (for example, your choice of language or region).
11.3.4. Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
11.4. You can find more information about the individual cookies we use and the purposes for which we use them below:
11.4.1. 37 Signals LLC (trading service Basecamp): Cookies capture browsing activity for analytics and statistical purposes such as conversion rate testing and experimenting with new product designs. This includes, for example, your browser and operating system versions, your IP address, which web pages you visited and how long they took to load, and which website referred you to us. 37 Signals LLC also use persistent first-party cookies and some third-party cookies to store certain preferences, make it easier for you to use the applications, and perform A/B testing as well as support some analytics.
11.4.2. All in one WP Migration: pending confirmation
11.4.3. Asana: Monitors website page user interaction from request forms to help improve user experience and for the purpose of tailoring advertising, marketing and website features.
11.4.4. Automattic Inc (trading entity Word Press): Collects non-personally identifying information of app users and site visitors such as the browser type, language preference, referring site, and the date and time of each visitor request in order to deliver better user experience. Functional cookies are used to provide their services, and other cookies are used to communicate with users, and to make their services better. Please note third parties may collect information when financial payments are made via WooPay or Stripe, social sharing services are connected, third-party logins such as Google Accounts are used and the site linked with Google Analytics and Google Ads Manager.
11.4.5. Charlie HR: Charlie HR uses strictly necessary cookies, analytical and performance cookies, functionality cookies and targeting cookies. These are cookies that are required for; the operation of the website and service, personalisation, user behaviour for advertising purposes and page interaction to improve how the site works. Charlie HR may also share this information with third parties for this purpose.
11.4.6. Cookie Notice & Compliance for GDPR/CCPA: pending confirmation
11.4.7. Crocoblock: Cookies collect information about the device and browser of users, including but not limited to user network connection, IP address, and information about the cookies installed on user devices, support queries, and web analytics data. Personal information submitted by users via any messaging feature available from any affiliated websites is collected.
11.4.8. Dropbox Sign: Dropbox uses different categories of cookies to provide, protect, improve, and promote their website and services. Dropbox only retains personal data for as long as is needed for the purposes for which it was collected.
11.4.9. Elementor Pro: Several essential and non-essential cookies are used by Elementor Pro to enable or improve functionality, personalization, performance and analytics, targeting and advertising.
11.4.10. Eventbrite: Monitors website page user interaction to track and target the interests and to enhance the experience of the platform (note third parties are used for the purpose of advertising, analytics and other purposes including but not limited to Adobe, Google Analytics and Marin Software).
11.4.11. Gather: Gather collects anonymised data on how the site and services are accessed and used (“Usage Data”). This Usage Data may include data such as your computer’s Internet Protocol address, browser type, browser version, the pages of the site that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. Gather use location data to improve and customise the site or services. They may also use (and enable third-party service providers to use) other tracking technologies such as beacons, tags, hashed emails and scripts to collect and track data and to improve and analyse the site and services and for targeted advertising purposes related to the site.
11.4.12. Google Suite (including but not limited to Google Drive, Gmail, Google Calendar, Google Forms, Google Meet, Google Pixel, Google Slides, Google Sheets, Google Docs, Google Groups, Google Analytics, Double Click Digital Marketing, DoubleClick Digital Marketing Manager, DoubleClick Bid Manager, DoubleClick Search, DoubleClick Rich Media, DoubleClick Studio and YouTube): Tracks how users interact with our website to help us improve user experience, re-target suitable ads and tailor services based on interests and privacy controls. Note this platform maintains servers around the world (in North America; Berkeley County -South Carolina, Council Bluffs -Iowa, The Dalles - Oregon, Douglas County-Georgia, Henderson - Nevada, Jackson County - Alabama, Lenoir - North Carolina, Loudoun County - Virginia, Mayes County - Oklahoma, Midlothian - Texas, Montgomery County - Tennessee, New Albany - Ohio, Papillion - Nebraska, Storey County -Nevada, South America, Quilicura -Chile, Europe; Dublin - Ireland, Eemshaven - Netherlands, Fredericia - Denmark, Hamina -Finland, Middenmeer -Netherlands, St. Ghislain -Belgium, Asia; Changhua County - Taiwan, Singapore) and your information may be processed on servers located outside of the country where you live, however they implement privacy protections and security measures to comply with certain legal frameworks relating to the transfer of data to remain GDPR compliant for UK and European users.
11.4.13. Health Assured: Uses essential, performance, targeting and social media cookies for operational, functional and advertising purposes. Cookies are also used to provide additional security to users who interact with the site and affiliated activities such as email marketing.
11.4.14. Hot Jar: Essential, analytical, marketing and functional cookies are used to tailor and measure the effectiveness of our advertising, monitor site traffic and analytics, enhance personalisation and ensure the website and its features work correctly. They may be set by Hot Jar or by third party providers whose services have been added to their pages.
11.4.15.Hubspot (Sales & Marketing): Tracks and targets the interests of users to enhance the experience on the Hubspot websites and subscription services - some cookies are necessary to enable the website to operate. Third parties serve cookies through their websites for advertising, analytics and other purposes.
11.4.16. iHASCO: Use essential cookies for the purpose of operating the website, analytics cookies for the purpose of monitoring how users interact with the site and its performance, and functionality cookies, to remember user preferences. Third-party services such as Twitter, Facebook, Google Plus and AddThis may also write cookies to your computer which may be used 'on' iHASCO website to determine if you are logged in to those services should you choose to 'share' content socially.
11.4.17. Linked In: Monitors website page interaction for the purposes of tailored re-targeting of LinkedIn ads (cookies and technologies include pixels, local storage and mobile ad ID’s).
11.4.19. Miro: Miro uses Essential Cookies, Performance Cookies, Targeting Cookies, Analytics and Research Cookie, web beacons and other similar technologies. They use both session-based and persistent cookies on their sites and services. They also use third party cookies (e.g., Google Analytics).
11.4.22. Read Meter: pending confirmation
11.4.23. Revolut: Necessary cookies are used by default that enable the website to operate and detect any problems with the site. They also use pixels or web beacons in the direct marketing emails that they send to you. These pixels track whether our email was delivered and opened, and whether links within the email were clicked. They also allow us to collect information such as your IP address, browser, email client type and other similar details. They use this information to measure the performance of our email campaigns, and for analytics.Advertising and analytics cookies are used, in addition to cookies used by third-parties including but not limited to Brand, Google Ads, Google Analytics, Google Tag Manager and TV Squared Pixels.
11.4.24. Rocket Science Group (Trading operator ‘Mailchimp’): First-party and third-party cookies are used for technical reasons for Mailchimp Sites to operate, for tracking and targeting the interests of visitors, for personalization of your experience while interacting with the mailchimp sites or service, to improve the functionality of the service provided, for advertising, analytics, and other purposes. Service members are also able to deploy cookies and similar tracking technologies in connection with their use of the service in order to allow members to track their contacts or end users.
11.4.25. Simple Image Sizes: pending confirmation
11.4.26. Smart Pension: Cookies are used to preserve your login state and remember your settings and preferences, to show the most useful content for you, relating to their products and services and to understand who visits their websites, how users navigate around them and how easy site visitors find them to use.
11.4.27. Snapchat Inc: Monitors and tracks user data to tailor the application experience and improve advertising targeting, re-targeting and measurement of Snapchat ads. (Please note Snapchat Inc may collect your personal information from, transfer it to and store and process it in the United States and other countries outside of where you live. Whenever they share information outside of where you live, when they are legally required to do so, they make sure an adequate transfer mechanism is in place.)
11.4.28. Tally: Collects and stores data (questions and responses) to compile reports, and retains contact details for project-related communications. Tally collects information about the use of the site to enable improvements to the way it works. Tally use ‘Mixpanel’ to track user behaviour when TapIn Media Ltd are logged in. They do not use Google Analytics to track forms made with Tally. Tally uses a self-hosted and privacy-focussed web analytics solution that is GDPR compliant and does not use any cookies in the tracking code.
11.4.29. Team Tailor: Collects and processes personal data to provide you with marketing, to obtain anonymized statistics, and to manage, develop, test and improve our IT system and services.
11.4. 30. Ticketmaster: Monitors website or app interaction to track and target the interests and to enhance the experience of the platform by collecting information such as the browser and device you're using, your IP address, your location, the site you came from, what you did and didn't use the site/app for, or the site you visit when you leave the site.
11.4.31. TikTok: Web and platform cookies are used for security and marketing purposes. Other cookies are used to remember your language preferences, make sure you don’t see the same video more than once from a user perspective.
11.4.32. Twitter: Cookies are used to operate their services, which include their websites, applications, APIs, pixels, embeds, and email communications. Cookies are able to monitor website page interaction for the purposes of tailored re-targeting Twitter ads, in addition to authentication and security, functionality, user preferences, analytics, research and development, personalization (across multiple devices), advertising and marketing.
11.4.33. Typeform: Cookies enables user access to the site, allowing it to be browsed securely, protecting users from any fraudulent use of the site or their services. Technical cookies are used for communication and exchange of data (please note, third party cookies are used for all purposes described and the processing of data and cookies may entail the international transfer of data outside the European Union).
11.4.34. Universe: Monitors website or app interaction to track and target the interests and to enhance the experience of the platform by collecting information such as the browser and device you're using, your IP address, your location, the site you came from, what you did and didn't use the site/app for, or the site you visit when you leave the site.
11.4.35. White Label CMS: Cookies and pixel tags are used based on the usership of WordPress, for analytical purposes. Personal Information may be obtained from sources such as advertising, an individual’s own promotions, public records, mailing lists, contractors, staff, recruitment agencies and our business partners.
11.4.36. Wix: Uses essential, analytic, functional and marketing cookies to collect aggregated usage personal information including but not limited to browsing activity, in addition to non-identifying Personal Information to improve user experience, fraud detection and prevention (please note third-party cookies are also used).
11.4.37. Worth The Read: pending confirmation
11.4.38. WP CodeLite: Cookies are used to better understand users and their website needs by looking at a range of variables in their WPCode plugin, WordPress, and web host. This information allows for continuous improvement of their services. Cookies also help identify and track visitors, their usage of WPCode website, and their website access preferences.
11.4.39. WPRocket: Information on the customer’s browsing on the website is stored by cookies. Pursuant to applicable regulations, this information may be stored for a period of up to 13 months. Cookies do not allow the customer to be identified.
11.4.40. Yoast SEO: Yoast SEO and affiliated sites use several cookies to enable functionalities of the website (session, technical and functional cookies) and the analysis of the use of the website and to make the website more user-friendly on that basis (analytical cookies). Please note, third parties use these cookies for analytics purposes including but not limited to Google Analytics, Google Tag Manager and Hotjar.
11.4.41. YouTube: Tracks how users interact with our website to help us improve user experience, re-target suitable ads and tailor services based on interests and privacy controls. Note this platform maintains servers around the world (in North America; Berkeley County -South Carolina, Council Bluffs -Iowa, The Dalles - Oregon, Douglas County-Georgia, Henderson - Nevada, Jackson County - Alabama, Lenoir - North Carolina, Loudoun County - Virginia, Mayes County - Oklahoma, Midlothian - Texas, Montgomery County - Tennessee, New Albany - Ohio, Papillion - Nebraska, Storey County -Nevada, South America, Quilicura -Chile, Europe; Dublin - Ireland, Eemshaven - Netherlands, Fredericia - Denmark, Hamina -Finland, Middenmeer -Netherlands, St. Ghislain -Belgium, Asia; Changhua County - Taiwan, Singapore) and your information may be processed on servers located outside of the country where you live, however they implement privacy protections and security measures to comply with certain legal frameworks relating to the transfer of data to remain GDPR compliant for UK and European users.
11.6. Your browser may give you the ability to block all or some cookies by activating a setting in your browser’s options. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
11.7. Any of the above types of cookie may be a persistent cookie, which are those which remain on your computer or device for a predetermined period and are activated each time you visit our websites. Any of the above types of cookie may be a session cookie, which are temporary and only remain on your computer or device from the point at which you visit our websites until you close your browser. Session cookies are deleted when you close your browser. Except for essential cookies, all cookies will remain unless the cookie cache is cleared (unless otherwise indicated in the points above).
11.8 Before cookies are placed on your computer or device, you will be shown a [pop-up] requesting your consent to set those cookies. By giving your consent to the placing of cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of cookies unless those cookies are strictly necessary; however certain features of our websites may not function fully or as intended.
11.9 In addition to the controls that we provide, you can choose to enable or disable cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party cookies. By default, most internet browsers accept cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.
12. Questions and complaints
12.1. For all questions or complaints about this policy, we would appreciate the chance to deal with your concerns before you approach the relevant data protection authority. Please
contact us in the first instance via email at firstname.lastname@example.org or write to Data Protection Enquiries, TapIn Media Ltd, Peter House, Oxford Street, Manchester, England, M1 5AN. Please also use these contains details to contact us about anything to do with your personal data and data protection, including to make a subject access request. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you.
12.2. You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues, which in the UK is the Information Commissioner’s Office (“ICO”) (www.ico.org.uk). Blog