Last updated: 17 February 2021
Welcome to okcool.io (the “Site”). The Site is provided and controlled by OK COOL Ltd. (“OK COOL”, “we” or “us”). Our registered office is at 5th Floor, The Lux Building, 2-4 Hoxton Square, London, N1 6NU, United Kingdom. We are the data controller of your personal data.
We are committed to protecting and respecting your privacy. This policy sets out the basis on which we process any personal data we collect from you, or that you provide to us. If you do not agree with this policy, you should not use the Site. Please note that separate policies apply to our other services, applications, products and content.
If you have any questions about how we use your personal data, please contact email@example.com
The types of personal data we use and how we collect it
We collect and use the following information about you:
Your Identity Data including your email address, first name, surname, Instagram account and photo.
We will indicate where any personal information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some circumstances this may mean we are unable to provide you with a certain service or product.
How we use your personal data
We process the information we collect about you in the following ways:
- to provide you with our services, including using the provided information and approval for a social media campaign;
- for system administration purposes and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to provide customer support and ensure we provide a good level of customer service;
- for security and fraud prevention;
- to ensure that our website and digital properties are safe and secure; and
- to comply with applicable laws and regulations.
We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:
- Our legitimate business interests: Where it is necessary for us to carry out social media campaign deliverables, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights.
- Performance of a contract with you (or in order to take steps prior to entering into a contract with you): For example, where you have provided your information to be a part of a social media campaign.
- Compliance with law: Where we are subject to a legal obligation and need to use your personal information in order to comply with that obligation.
How we share your personal data
We may share your personal information within our group of companies.
We may share your personal information with our suppliers, business partners and service providers, where they are helping us to market and advertise our services as well as providing our services to you.
We may disclose your personal information to other third parties in the following cases:
- for the purposes of research, evaluation, and analysis;
- in the event that we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets;
- if we or substantially all of our assets are acquired by a third party, in which case personal information held by us about our customers and visitors to our websites will be one of the transferred assets;
- if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request; or
- to protect the rights, property or safety of us or our users, or others, and in order to enforce or apply our terms and conditions (this includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).
Where we store your personal data
The personal data that we collect from you will be transferred to, and stored within the United Kingdom and European Economic Area (“EEA”).
Whenever we transfer your information as described in the paragraph above, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely and in accordance with this privacy notice. In these cases, we rely on approved data transfer mechanisms (such as the EU “Standard Contractual Clauses” and the EU-US “Privacy Shield”) to ensure your information is subject to adequate safeguards in the recipient country. If you are located in the UK or EEA, you may contact us for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.
You have the following rights:
- The right to request (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
- The right to request proper rectification or removal of your personal data or restriction of the processing of your personal data;
- Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible (data portability);
- Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time without impact to data processing activities that have taken place before such withdrawal;
- The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by Union or Member State law or this is necessary for the performance of a contract;
- The right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
- The right to object to processing your personal data for direct marketing purposes; and
- The right to lodge complaints before the competent data protection regulator.
Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.
Please send an email to us if you would like to exercise any of your rights firstname.lastname@example.org
The security of your personal data
We take steps to ensure that your information is treated securely and in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, for example, by encryption, we cannot guarantee the security of your information transmitted via the Site; any transmission is at your own risk.
We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.
We will, from time to time, include links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to these websites.
How long we keep your personal data
We retain your information for as long as it is necessary to provide you with the service so that we can fulfil our contractual obligations and rights in relation to the information involved. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for longer in accordance with our legal obligations or where it is necessary for the establishment, exercise or defence of legal claims.
After you have terminated your use of our Site, we may store your information in an aggregated and anonymised format.
Information relating to children
The Site is not directed at children under the age of 18. If you believe that we have personal data about or collected from a child under the relevant age, please contact us at email@example.com
In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at firstname.lastname@example.org and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the relevant data protection authority.
We will generally notify all users of any material changes to this policy, through a notice provided via the Site. However, you should look at this policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. Your continued access to or use of the Site after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Site.
Questions, comments and requests regarding this policy should be addressed to email@example.com