At Shoot The Rehearsal Limited, we are committed to respecting your privacy and protecting the personal information that we obtain and hold about you and others.
1. Introduction and General Terms
The Website is operated by Shoot The Rehearsal Limited, a company registered under company number 10315737 with registered address at 10 Queen Street Place, London, EC4R 1AG (“STR”, “we”, “us” or “our” in this policy). The Website allows customers to view and purchase merchandise and event tickets to raise awareness of the dangers of and how to deter and prevent knife crime (“Services”).
Where we decide the purpose or means for the processing of the personal data that you provide when using our Website, we are the “data controller” for the purposes of the General Data Protection Regulation 2016 (“GDPR”) and the UK Data Protection Act 2018.
Our Website may contain hyperlinks to third party websites, such as links to our Facebook, Instagram, Twitter and other social media sites. These websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our Website is not an endorsement. Should you use any of these websites, such use is at your own risk and we would recommend that you review their respective privacy policies.
2. What information will we collect about you?
Information provided by you when using our Services
You may give us information about you by filling in forms when using our Services, signing up to our newsletter or contacting us with enquiries. Such information can include:
• Identity and contact data: including your name, address, email address, telephone number and e-mail address.
• Purchase data: including clothing size and merchandise that you have requested or purchased.
3. How We Use Your Personal Data
Providing the Services to you as a prospective or existing customer
We may legally use and retain your Personal Data where we need to perform the contract we are about to enter into or have entered into with you, such as:
• Processing purchases (including any shipping details for delivery of the merchandise or tickets.)
In order for you to purchase products via our Website, we may use a third party payment provider, such as Stripe (a PCI Service Provider Level 1 certified platform) to collect, store and process payment information from you, including your name, email address, credit card number and bank account details. Our servers will not collect or have access to your sensitive payment details.
When you purchase products via our Website, we may share your Personal Data with our selected third party providers and suppliers for the performance of delivering our Services under the contract between you and At Shoot The Rehearsal Limited, including fulfilment service providers and/or event ticketing providers (from time to time) and postal service providers (Royal Mail). Our third party suppliers will have their own processing terms.
4. Contacting Us (Your Enquiries)
If you contact us via our Website ‘about our Services, to make an enquiry the webpage asks you to provide a limited amount of personal information about yourself, such as your name, email address, subject (e.g. purpose of your message) and your message or enquiry. We will use this information to respond to your enquiries, for example:
• In line with the legitimate interest we have in promoting our business, we will process your enquiries to reply to your query, including providing you with information about the Services we offer and keeping track of your purchase history.
We may also process enquiries to take steps you ask of us with a view to entering into an agreement to provide you with our Services. You are under no obligation to provide us with any details, but if you choose to not provide us with relevant information, we may not be able to respond and/or provide the assistance that you request.
5. Mailing List
If you ask to be added to our mailing list, we will keep you updated with information on news, pre-sales, merchandise, updates on new collections, events (including ticket information and release dates) via email. If you would like to be removed from that list please let us know by clicking unsubscribe at the bottom of any marketing email that you receive.
In line with the legitimate interest we have in promoting our business, we will use the email address you gave us via our Website to provide you with this information.
There may also be circumstances where we will ask you for your prior consent in respect of our use of your personal data or where we may rely on an alternative lawful basis to process your personal data in which case you will be notified at the time.
6. How You Use our Website (Analytics & Cookies)
To find out more about Squarespace Analytics, how Squarespace uses data when you use our partner’s sites or apps and to learn how to opt out, please visit:
When you visit our Website, these analytics service providers may collect the following data, which will almost always be anonymised and aggregated before reporting back to us:
• number of visitors to our Website
• pages visited while at the Website and time spent per page
• page interaction information, such as scrolling, clicks and browsing methods
• websites where visitors have come from and where they go afterwards
• page response times and any download errors
• other technical information relating to end user device, such as IP address or browser plug-in
We process this information to understand how visitors use our Website, to evaluate and improve our Website, to make our Website more accessible and to compile statistical reports regarding that activity. For example, your IP address may be used to approximate the country from which you access our Website, and we would aggregate this information together so we know, for example, that visitors to our Website come from a specific territory. The information collected by data analytics is not used by us to develop a personal profile of you.
The processing of any of your personal data is necessary for us to pursue our legitimate interests in improving our Website, and providing a better service and source of information to our Website visitors.
You can always choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser.
For further information about cookies and how to adjust your browser settings, please see:
All content you submit to us
If you send us objectionable content or otherwise behave in a disruptive manner when using our Website, we may process personal data included in your messages to respond to and stop such behaviour.
• We only process personal data in this way for the legitimate interests of ensuring that use of our Website is lawful, does not disrupt our systems, does not harass our staff or other individuals, and to enforce our legal rights and to comply with our legal obligations.
• Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal information to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.
Where we process personal data in this way, we will hold that personal information on our systems for as long as is reasonably necessary to achieve these objectives.
7. Do We Share Your Personal Data with Anyone Else?
We only permit them to process your personal data for specified purposes and in accordance with our instructions. All our third party service providers are required to take appropriate security measures to protect your personal information in line with our policies. Activities which are carried out by or in collaboration with third party service providers include website hosting and our fulfilment service provider.
In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).
If we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, the information we hold may be included as part of that sale, in which case you will be notified via email and/or a prominent notice on the Website of any changes in ownership or use of your information, as well as any choices you may have regarding that information.
Except as provided above, we will not provide your information to third parties.
8. Your rights in relation to your personal data which we process
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest, in response to any requests by you:
• for a copy of data we are processing about you and/or to have inaccuracies corrected;
• to restrict, stop processing, or to delete your personal data;
• for a machine readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and
• to make a complaint to a data protection regulator. You may contact them at: https://ico.org.uk/concerns/
To make a request in relation to any of the aforementioned rights, please send your requests to DPO@2hrset.com or write to our Data Protection Team at 2HR SET, PO Box 75695, London, NW1W 7ZW.
We do not use the Website to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at DPO@2hrset.com. We will delete such information within a reasonable time.
We will take commercially reasonable, appropriate technical and organisational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our Website and services, taking into account the likelihood and severity those risks might pose to the rights and freedoms of our Website visitors.
In particular, we will take precautions to protect against the accidental or unlawful destruction, loss or alteration, and unauthorised disclosure of or access to the personal information transmitted, stored or otherwise processed by us.
Please be aware that, while we make the security of our Website and your personal information a high priority and devote considerable time and resources to maintain robust IT security, no security system can prevent all security breaches. When you choose to share your personal information with us, you accept the aforesaid and provide your information at your own risk.
11. International Data Transfers
Our servers are located Worldwide and the information that we collect directly from you will be stored in these servers. We may also transfer your personal data to members of our third party service providers, many of whom may be located outside of the EU, operate from multiple locations including non-EU based operations or engage sub-processors located outside the EU.
There are agreements in place with all of our third party service providers, worldwide to ensure that those parties process personal data using appropriate safeguards that meet the requirements of data protection laws. Such appropriate safeguards may include standard data protection clauses adopted by a data protection regulator and approved by the European Commission, such as the European Commission’s standard contractual clauses.
If you would like to find out more about these safeguards or if you have any other queries or comments in relation to this policy, please let us know by emailing us at DPO@2hrset.com.
To find out more about the standard contractual clauses, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en
12. Retention Periods or Criteria
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
If you would like us to stop using or holding your personal information and/or would like to request its deletion, please email us at DPO@2hrset.com.
This Policy may be updated from time to time. We will notify you of any changes by posting the new policy here and, where feasible, by letting you know by email.
14. Contact Us
Questions, comments and requests in relation to this Policy are welcome and should be addressed to DPO@2hrset.com.
Last Updated: April 2019