Supercard Worldwide Ltd. is committed to keeping your information secure and take the privacy of all data extremely seriously. We are an ICO registered company (no. ZA299452) and our entry on the register can be viewed here.
By entering into the Membership Agreement with Supercard Worldwide, you will become a Member of the Supercard Programme. A Supercard Membership grants member’s access to numerous discounts and rewards designed to provide you with many great and memorable experiences while saving money.
For the purpose of the Data Protection Legislation, the data controller is Supercard Worldwide Ltd Trading as Supercard Black and Supercard Blue of 124 Finchley Road, London, England, NW3 5JS. The data subject is the individual whose data is being processed.
Should you have any queries regarding your data, please contact the Data Protection Officer on firstname.lastname@example.org or via our concierge 0330 124 1223.
This Privacy Notice covers
How we collect your personal data
We can collect your personal data through the following communication channels;
What personal data we collect
Supercard Worldwide Ltd. may collect the following personal data:
Please note, personal data is defined as any data that can identify an individual.
Depending on the benefits that you elect to use, you may be asked for additional information to properly service your Membership.
For those benefits that require you to submit a reimbursement or cashback claim, you may be required to complete a form requesting information needed to process the claim or a copy of your expenses as proof of purchase. Depending on the type of claim and the circumstances surrounding the claim, you may be required to provide additional documentation to support your claim such as receipt of purchase with a partnering company.
Following the purchase of any products or service, we may request for feedback. The feedback is not anonymous. We may contact you using the personal information provided.
Supercard Worldwide Ltd. may use your information to publish you as a competition winner or use your feedback on our website or social media, or to personalise the Membership Service. Any information we share with a wider audience will protect you by not providing your full identifiable information unless you have agreed to do so.
Emails and/or texts may be sent using a third-party service, of which, the company will be prohibited from using your personal information for any other reason.
Supercard Worldwide Ltd. may offer a referral service so that we can tell your friends about the discounts and rewards available by being a Supercard member.
For more information on the cookies we use, please see our Cookies Policy.
You can refuse to provide any information. However, if you do refuse to provide information that is necessary for your membership then you may not be able to use the Supercard Discounts and Rewards.
We may use services such as Facebook to serve tailored advertisements to you about the company, its products or services. The delivery of other companies, their products or services may be occur. When clicking on banners or through to other companies, we allow them to use their own cookies and may share something information you have given to us, however, this does not affect your rights.
We may use analytic or advertising platforms or services that allow us to enable you to receive personalised ads. As a result, your details may be saved on a remarketing list. We have the ability to disable advertising features if you do not want to receive personalised ads.
When the data subject is an applicant for a vacant or not vacant role, the data we collect will include the information on your CV/Cover Letter including name, contact information and previous and/or current education and/or work experience. We may ask for additional information within a form of a survey. If CV’s are downloaded they are all stored in one place and dated the download date. Successful applicants will need to provide NI number, Tax code, Student Finance plan (if applicable), Bank details, full address and emergency contact information etc.
Our legal basis for processing
The legal ground we are processing your personal data on is to perform a contract with you and we have your consent to do so. We collect, use and process your information to provide you with the services, tailor the service, develop new services and for marketing purposes.
We do not generally rely on consent as a lawful basis for processing your personal data, but you have the right to withdraw consent to marketing at any time by contacting us.
All information collected and processed will be relevant to your interest/membership or to supply you with the right information regarding new products, services or documentation etc.
All calls are recorded for monitoring and training purposes. All emails and/or texts will be stored. This is stated on our automated voice recording that each person will hear when they call the organisation. When taking details on outbound calls, we will notify you as to whether the call is being recorded when taking additional information. They may be produced to the data controller upon request or with regards to a query.
We will only process data for the purpose of providing an individual with the most relevant information, products or services. Should our purpose for processing your data change, you will be notified.
How we use this personal data
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
In order to ensure all products and services are available to you, we will share certain information with the third-parties. You can request for us not to do so, however, any data you do not share with us could prevent you from using the service or limit the features available to you.
We may sell, distribute or lease your personal information to third parties unless we do not have your permission or are required by law to do so. We may use your personal information to send you promotional information about ourselves or third parties which we think you may find interesting if you tell us that you wish this to happen.
You can revoke your consent at any time by sending your written requests via email or post.
How we store your data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
All data is stored in our UK Office, our server is backed up twice a day.
Details from a form or website are downloaded by a team leader or HQ, they are all stored in an orderly manner and dated with the download date. Otherwise, they will remain on the website/CRM.
All emails, both those who have consented to receive emails and those who have not (or those who have unsubscribed) are stored in an external mailing software and our internal system. For more information about the mailing software’s we may use, please contact us on 0330 124 1223.
Email addresses are kept on our email marketing database so that we can keep a track of the status of the email as well as send emails to those who have consented to receive emails i.e. by subscribing to our mailing list. If you no longer wish to receive our emails, your email address will be kept in our systems in the form of a blacklist so that we do not contact you in the future.
You can revoke consent at any time by clicking the unsubscribe button.
How long we keep your data
We will keep your personal data on our records for an ongoing period for the reasons mentioned above, as long as you (the data subject) give consent for us to do so. If you no longer want us to keep your personal data, it is your right to request for its removal at any time, providing you have a legitimate reason.
CV’s are kept ongoing. Successful applicants will provide further details which are disposed of after 5 years excluding information needed for referencing purposes.
Who your data is shared with
Your personal data may be shared with third-parties in order for you to redeem the rewards and offers available. It will not be accessible to any unauthorised persons willingly.
We may choose to buy or sell assets and may share or transfer user information (including identifiable data) in connection with the evaluation of and entry into transactions or as part of the service. Your information could be part of the assets transferred or acquired by a third party if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control.
How we delete your data
In certain circumstances, you have the right to have your data deleted or ‘forgotten’. In order to delete your personal data from our records, you must request either verbally or in writing. Once we have received this, we will confirm that the request is to be put forward to the DPO for Approval. The DPO will consider the deletion and ensure it will not affect any other data subject. If it is, the request will be rejected. Should the data not affect a further data subject, it is confirmed for deletion. All data will be deleted within this request excluding the email address. This will be placed on a blacklist for our records.
Data is deleted manually from all databases at the stated time. Our backup servers are updated automatically daily and this is when the backup servers will too have the data deleted.
Your rights as a data subject
The GDPR provides the following rights for individuals.
1. The right to be informed
You have the right to be given information on how and why your personal data is being processed, such as this Privacy Notice. You are entitled to request this information both before and after providing consent to us, free of charge.
2. The right of access
You have the right to access your personal data at any time (this is called a Subject Access Request). You are entitled to receive confirmation that your data is being processed, have access to your personal data and information on how and why your data is processed. This right allows you to be aware of and confirm that we are processing your data legitimately.
3. The right to rectification
You have the right to have your personal data amended if it is inaccurate or incomplete. It is your right to have your request for rectification responded to within a month.
You can view and edit your name, address and contact information in your account at any time. If you would like to edit any further information you can do this by contacting our concierge team on 0330 124 1223.
4. The right to erasure (the right to be forgotten)
You have the right to request the deletion or removal of your personal data, but only where there is no persuasive reason for its continued processing. For example, you may request to have your data deleted/removed if your personal data is no longer necessary for the purpose it was originally collected/processed. You can request this by contacting our concierge team on 0330 124 1223.
5. The right to restrict processing
You have the right to stop your personal data from being processed any further. This means that we are able to store your personal data, but not process it. We shall keep just enough information about you to make sure we can keep your restriction in place from this point on. You can request this by contacting our concierge team on 0330 124 1223.
6. The right to data portability
This right only applies to personal data you give to a controller (anyone who determines the reasons and ways of processing personal data), where your personal data is being processed because you have given consent or for the performance of a contract and when processing is carried out automatically. You can request this by contacting our concierge team on 0330 124 1223.
7. The right to object
You have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling), direct marketing (including profiling) and processing for purposes of scientific/historical research and statistics. You have the right to withdraw consent at any time. You can request this by contacting our concierge team on 0330 124 1223.
8. Rights in relation to automated decision making and profiling
You have the right to request for reconsideration of your applications or request should a decision be made through an automated process.
The information above has been sourced from the Information Commissioner’s Office (ICO). For their full guide to rights for individuals under the GDPR, please visit: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
We may contact you with regards to special promotions or offers from our products or services or a third party. For electronic promotional offers received via email you can opt-out of the marketing communications you can use the unsubscribe options at the bottom of each email or contact our concierge team on 0330 124 1223.
We may also contact you for marketing purposes via text message. Should you wish to opt-out of receiving text alerts you can follow the instructions provided in those messages or reply “STOP”.
Push notifications may be sent through our applications. We may also use the location of your device. You can stop these by adjusting your setting sin your mobile device.
You can opt-out of certain web beacons and cookies by amending your browser settings, further information of this can be found in our Cookies Policy.
If you have a complaint about the way your personal data is being processed or for any other reason relating to your personal data, you have the right to lodge a complaint with a supervisory authority.
The supervisory authority is the Information Commissioner's Office, you can contact them on 0303 123 1113 or via their other methods of communication: https://ico.org.uk/global/contact-us/.
Subject Access Requests
As per your right of access, you are entitled to request to see your personal data that is stored in our records. In order to do this, you must send us your request in writing, so that we may be able to tell you whether any of your personal data is being processed, provide you with a description of your personal data, the reasons for which it is being processed and whether it will be shared with any other party. You will also be given a copy of this information and the details of where it is available.
Please see our Subject Access Request process for requested access to data.
The information provided within the Data subject access request is different depending on the data we have on you. However, we will happily provide you with all the information excluding internal notes for chasing individuals on pending matters. This can include but is not limited to:
If you wish to use our Subject Access Request Form to make your request, please contact us at email@example.com or call our office at 0330 124 1223.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Notice. You should exercise caution and look at the privacy statement applicable to the website in question.
Changes to our Privacy Notice
This Policy may be updated from to reflect changes for legal, regulatory or operational purposes. We encourage you to periodically review this page for the latest information on our privacy practices.
If there are any material changes to this Policy, you will be notified. If we are required by law to do so, we will seek your consent prior to those material changes becoming effective.
If you do not accept any changes made to this Policy, please discontinue the use of the Websites, applications and the Service. You will need to contact us to discontinue any memberships or pending product/service you have with us. You may also be required to return anything sent to you in the post.
How to contact us We are happy to assist you with any request you may have.
Telephone: 0330 124 1223