Privacy policy
1. Who we are
Vinco Sport Ltd (company no. [NUMBER]) of [REGISTERED ADDRESS] is the data controller for personal data processed in connection with Fan Vote. Contact: [email protected].
2. Data we collect
Account and contact details you provide; usage and device data collected automatically; and the service-specific data described in section 3. We collect no more than the service needs to run.
3. Service-specific processing
These provisions describe how this particular service handles data. Where they differ from the general sections below, these apply.
- Fan email addresses and profile answers are collected under your brand to run your vote and, where a fan consents, to build your marketing list.
- Marketing consent is recorded per party at the moment a fan opts in, with a clear opt-out on every message.
- Personal data is retained for [PERIOD], or until a fan erases their account, whichever comes first.
- You are the data controller for fan data and Vinco acts as processor under a data-processing agreement. [PLACEHOLDER: confirm controller and processor terms].
4. How we use data
To provide and improve the service, meet contractual and legal obligations, secure our systems, and, with consent, send relevant updates. Legal bases: contract, legitimate interests, and consent where we ask for it. Any additional or narrower basis for this service is set out in section 3.
5. Sharing & transfers
Shared only with processors working under contract for us (for example hosting and support tooling), and never sold. The processors used for this service are identified in section 3. Where personal data leaves the UK, it is protected by an adequacy decision or by standard contractual clauses.
6. Retention
Kept only as long as needed for the purposes above, then deleted or anonymised. The retention periods that apply to this service are set out in section 3.
7. Your rights
Access, rectification, erasure, restriction, portability and objection, exercised via [email protected]. You may also complain to your supervisory authority (UK: the ICO).
8. Deleting your data
You can ask us to delete the personal data we hold about you at any time, [email protected]. We will delete it, other than anything we must keep by law, and confirm when it is done, within one month as UK GDPR requires.