Privacy Policy
Plain takes your privacy seriously where we deal with your personal data. This means information that identifies you personally such as your name, credit card information and contact details or data that can be linked with such information in order to identify you directly or indirectly.
References to “Plain”, “we”, “us” or “our” in this privacy notice are to Not Just Tickets Ltd, Company Number 1273651384, 3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdom. We are the Controller of your personal data (this simply means we are responsible for what happens to your personal data).
Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.
This privacy notice does not cover any personal data processed by us or any of our clients in relation to the Plain customer services platform. Please contact the relevant Plain client for information on personal data use in relation to the customer services platform.
Your Personal Data and How We Use It
We collect personal data about you, either directly from you, from a third-party source or by automated means (when you use our website for example). Under data protection law we can only use your personal data where we have a lawful basis (justification), and this can be either “to carry out a contract with you or to take steps on your instruction prior to entering into a contract with you”; “where we have a legal obligation”; “where you have given us your consent”; or “where it is necessary for our legitimate interests” (this means that we have a business or commercial interest in using your personal data).
The table below sets out clearly how we collect and use your personal data and the lawful bases we rely on for using your personal data. Where we have said that using or keeping your personal data is “necessary for our legitimate interests”.
Please note that if you choose not to provide personal data requested by us, or refuse our use of your personal data, we may not be able to provide you with the services you have requested where this personal data is necessary or these services may be delayed.
Information you give us
Access to Customer Service Platform.
You give us personal data about you when you request access to our customer service platform. This is generally information including your work email, details of company/business (including current customer service setup), and specific areas of business interest.
Legitimate interest: We use your personal data to provide you with access to our customer service platform where you have requested this, including determining if our platform is suitable for your company/business and contacting you concerning your request.
Marketing Communications and Updates
We may use your personal data to send you marketing communications and updates about our progress and what we are up to. This is generally information including your email address and your marketing preferences.
Consent: We rely on your consent to use your personal data to send you marketing communications via email. We will only do this in line with your marketing preferences and you can opt-out of receiving these communications at any time by selecting the unsubscribe link in any email we send you, or by contacting us.
Suppliers/Partners and Representatives
You give us personal data about you when you enter into a supplier/partnership agreement or relationship with us or are a representative of a supplier/partner.
Performance of a contract/legitimate interest: We use your personal data to contact you and to manage our relationship with you and/or your company where you are a supplier/partner or the representative of a supplier/partner with whom we have a business relationship.
Recruitment
You give us personal data about you when you express interest or apply for a job role with us on our website or otherwise. This is generally information including name, email, phone number, current company name, current job role, job role applied for, CV, education history, job expectations, assessment results and interview notes.
Performance of a contract/Taking steps to enter into a contract: We use your personal data for the purposes of managing our recruitment for job roles in our organisation, including reviewing job applications, setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes.
Legal obligation: We use your personal data for the purposes of complying with any legal requirements involved in the recruitment process (e.g. making reasonable adjustments for candidates).
Contacting Us
You give us personal data about you when you contact us or otherwise interact with us, including via phone, email, post or social media.
Performance of contract/legitimate interest: To respond to your inquiries and fulfil your requests, for example, when you send us questions, suggestions, compliments or complaints, or when you request information about our customer services platform or other offerings. We may also take this information into account when improving our platform, products and services.
Information we collect automatically
Visiting our Website
We collect personal data about you automatically when you visit and interact with our website. Our servers keep an activity log unique to you that collects certain administrative and traffic information including your device details, device location, source IP address, time of access, date of access, web page(s) visited, language use, software crash reports and type of browser used.
Legitimate interests: We use your personal data to make sure you are able to use our website, to monitor how our website is being used, to help us discover and fix any problems with our website and to determine what country you are in when you use our website.
Information provided by third parties
Prospecting –Public Professional Networks
We may collect personal data about you from your public profile on professional networks (e.g. LinkedIn) where it is lawful to do so and we think you or your company may be interested in our customer service offerings. This is generally information contained in your public profile such as name, email and current job role.
Legitimate interests: To contact you with sales communications about our customer service offerings which we think will be of interest to you and/or your company. We will only do this where we are sure that our customer service offerings are relevant to you, and you can opt-out of receiving these communications at any time by selecting the unsubscribe link in any email we send you, or by contacting us.
Recruitment – Referrals, Job Boards and Public Professional Networks
We may collect your personal data where you have been referred to us by a third party for potential employment (e.g. a recruiter or a friend of yours who is an employee) or from your public profile on job boards or professional networks (e.g. LinkedIn) where it is lawful to do so and if we think you may be a good fit for a job role at Plain. This is generally information including your name, email, phone number, company name, job role and CV related information.
Legitimate interest: To contact you in relation to job roles at Plain where we think you will be a good fit for our recruitment process.
How We Share Your Personal Data
We share your personal data for the following purposes and in line with this privacy notice:
General sharing
We share your personal data with trusted third parties who perform functions on our behalf and help us provide you with the services we offer and also in operating and maintaining our website. Third parties such as service providers (including website and cloud providers, database management providers, business communication providers, email distribution providers, direct marketing and data collection providers, data storage and analysis providers, and customer service support providers), business consultants, and professional advisors (including lawyers and accountants). These third parties comply with similar and equally stringent undertakings of privacy and confidentiality.
We share your personal data if we are under a duty to do so, in order to comply with (or where we reasonably believe we are under a duty to comply with) any legal obligation, or in order to enforce any agreement we have in place with you; or to protect the rights, property, safety, or security of Plain, third parties, users of our services or the public.
As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your personal data will be disclosed to such entity.
We share your personal data where you give us express permission to do so in the course of your relationship with us from time to time.
Recruitment Specific Sharing
During the recruitment stage, we share your personal data with our online recruitment service providers and with your third party recruiter (if you have used one) to progress your application, and for the purposes of communicating with you about your application.
If you successfully pass the recruitment stage and we hire you, we share your personal data with our internal HR systems providers for the purposes of your employment with us.
International Transfers
We are located in the United Kingdom (UK) and generally store your personal data on servers within the UK and the European Economic Area (EEA). However, please note that some of our third party service providers who process your personal on our behalf are located in the United States (US) and your personal data is therefore also transferred to their servers in the US.
Please note that the US is not recognised by the UK or the EEA as providing an adequate level of data protection and so we take appropriate measures to ensure your personal data remains protected when transferred, including by putting in place standard contractual clauses approved by the competent authorities in the UK and EEA as a valid safeguard for the transfer of personal data to the US. If you require further information on transfers and the safeguards we have in place please contact us using our details below.
Personal Data Retention
We will retain your personal data for as long as needed or permitted considering the purpose(s) for which it was obtained and consistent with applicable law.
The criteria we use to determine our retention periods include:
The length of time we have an ongoing relationship with you;
Whether there is a legal obligation to which we are subject;
Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations); and
Any guidelines issued by relevant legal and data protection authorities.
Your Data Rights
By law, you have a number of rights (subject to certain conditions and exceptions) when it comes to your personal data and can exercise any of these rights by contacting us.
You have the right to object to us using your personal data where we rely on our “Legitimate Interest” as a lawful basis for using it ( See the “How We Use Your Personal Data” section above) or use it to send you any kind of direct marketing (i.e. if you no longer want to receive marketing newsletters, updates and other marketing communications from us).
The Right To Be Informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this privacy notice.
The Right of Access
You have the right to ask us to see all your personal data that we hold about you and information on how we use it.
The Right To Rectification
You have the right to ask us to correct your personal data when it is inaccurate or incomplete.
The Right To Erasure
You have the right to ask for deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure there are exceptions which may mean we are unable to comply with your request.
The Right To Restrict Processing
You have the right to ‘block’ or suppress further use of your personal data. When processing is restricted, we can still store your personal data, but not use it further.
The Right To Data Portability
You have the right to ask us to give you (or another company you choose) all the personal data we have collected from you directly in a structured and machine readable format (a format easy for computers to use and understand).
The Right To Lodge A Complaint
You have the right to lodge a complaint about the way we handle or process your personal data with your relevant national data protection regulator (for example, in the UK this is the Information Commissioner’s Office (ICO) and other European countries have similar authorities you can contact).
The Right To Withdraw Consent
You have the right to withdraw your consent at any time where we rely on your consent as a lawful basis for processing your personal data (See “Your Personal Data and How We Use It” section above).
Changes To This Privacy Notice
We may periodically make changes to this privacy notice. We will notify you of any significant changes where we have a relationship with you and otherwise post updated versions here. We recommend that you revisit this Privacy Policy regularly.
How to Contact Us
If you wish to exercise any data subject rights or have any questions about this privacy notice or our information practices, please feel free to contact us at gdpr@plain.com
If you are in the European Union, you can contact our EU representative pursuant to Article 27 of the GDPR at: Mathias Vagni, gdpr@plain.com
Last updated: May 2022
