Last Updated: 06/02/2021
Type of Information
Information you provide to us (Personal Data): For all Users we collect Personal Data when you voluntarily provide such information to the Services, such as when you register for access to the Booking Services, contact us with inquiries, respond to one of our Email Marketing, surveys or browse or use certain parts of the Services. The Personal Data we may collect includes without limitation your name, address, email address and other information that enables Users to be personally identified.
When you register for the Services or otherwise submit Personal Data to us, we may associate other Non-Personal Data (including Non-Personal Data we collect from third parties) with your Personal Data. At such instance, we will treat any such combined data as your Personal Data until such time as it can no longer be associated with you or used to identify you.
As an Organiser we will collect additional Personal Data from you.
Information you provide to us: In some cases, we may collect your credit card information (e.g., your credit card number and expiration date, billing address, etc.), some of which may constitute Personal Data, to secure certain payments. In addition, if you use our payment processing services, we will collect financial information from you (e.g., your bank account information or an address to send checks) as necessary to facilitate payments and information required for tax purposes (e.g. VAT Registration No).
As a Customer we will collect additional Personal Data from you, sometimes for our own purposes and other times on behalf of an Organiser.
Information you provide via Towcester Racecourse Properties or Applications: If you register for a paid event, you will provide financial information (e.g., your credit card number and expiration date, billing address, etc.) some of which may constitute Personal Data. In addition, Organisers can set up event registration pages to collect virtually any information from Consumers in connection with registration for an Organiser’s event listed on the Services. Towcester Racecourse does not control an Organiser’s registration process nor the Personal Data that they collect. Personal Data collected on behalf of Organisers is provided to the Organiser of the applicable event in accordance with “How We Disclose and Transfer Your Personal Data: Organisers” below.
Information we obtain from other sources: We may also collect or receive Personal Data from third party sources, such as Organisers, other Consumers, social media or other third-party integrations, your credit card issuing bank, our payment processing partners or other third parties.
Storing of Information
All direct payment gateways offered via TicketSource and used by our company via our Service provider TicketSource adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our Call Centre and its service providers.
TicketSource Website Ticket Booking Payment Gateway Provider: Stripe
Use of Information
We collect such Personal and Non-personal Information for the following purposes:
- To provide Web Event Booking Online, Call Centre and Walk IN for Booking your events, purchases of packages, confirming the orders, processing payments, submission of Invoices;
- To provide our Users with ongoing customer assistance for the Online Booking and technical support where appropriate.
- To be able to contact our Visitors and Users with general or personalised service-related marketing campaign, BLOGs and promotional offers & messages;
- To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services;
- To comply with any applicable laws and regulations.
Communication of Information
We may contact you to notify you regarding your Online or Call Centre Booking Details and account, to troubleshoot problems with your account, to resolve a dispute, to collect payment & fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, to send marketing campaign with Offers and relevant information, to send Newsletters and Marketing Leaflet by Postal mail, For these purposes, we may contact you via email, telephone, text messages and postal mail.
Sharing of Information
We do not share your information with third party service providers.
The EU General Data Protection Regulation (GDPR)
On 25th May 2018, a new data privacy law known as the EU General Data Protection Regulation (or the “GDPR”) becomes effective. The GDPR requires Towcester Racecourse and Organisers using the Service to provide Users with more information about the processing of their Personal Data.
Here is what you need to know:
Legal grounds for processing your Personal Data
The GDPR requires us to tell you about the legal ground we’re relying on to process any Personal Data about you. The legal grounds for us processing your Personal Data for the purposes set out in Use of Information
will typically be because:
• you provided your consent;
• it is necessary for our contractual relationship;
• the processing is necessary for us to comply with our legal or regulatory obligations; and/or
• the processing is in our legitimate interest as an event organising and ticketing platform (for example, to protect the security and integrity of our systems and to provide you with customer service, etc.).
Withdraw your consent
If you don’t want us to process your data anymore, please contact Data Processing Officer (DPO):
Henlow Racing Limited
T/A Towcester Racecourse
Monday-Friday: 09:00am – 17:00pm
Links to third-party Internet sites
Data protection law provides you with rights in respect of Personal Data that we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling and unsubscribe from marketing communications.
For the most part, you can you can exercise these rights by logging in and visiting the My Account page or changing the “cookie settings” in your browser. If you can’t find what you’re looking for in the My Account page, please contact us using the contact information set out above. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. There may be circumstances where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation.
If you have a complaint about how we handle your Personal Data, please get in touch with us as set above to explain. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
Personal Data retention
We retain your Personal Data for as long as necessary to provide you with our Services, or for other important purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements.
If you have an account with us, we will typically retain your Personal Data for a period of 90 days after you have requested that your account is closed or if it’s been inactive for 7 years.
For further information: