Privacy Notice

We highly value your privacy and are dedicated to protecting it. This Privacy Notice is intended to provide you with insights into how we collect, employ, and secure any personal data obtained from you. It clearly outlines our adherence to data protection laws and explains your rights.

This Privacy Notice applies to individuals for whom we process personal data, except for our employees. It includes individual customers, sole traders, partnerships, users of our website, users of our apps, individuals linked with our suppliers or customers, participants in our marketing competitions or events, job applicants, and others affected by our operations.

We are Reso Sports Company, located at 252 E Wichita St Wichita Falls, Texas. If you have questions concerning how we utilize your personal data, you can reach us at support@resosports.com or by mail at the address provided above.

In this document, the terms "we," "our," or "us" refer to Reso Sports Company.

WHAT PERSONAL DATA DO WE COLLECT?

We may collect various forms of personal data about you, including but not limited to:

• Contact details like your name, address (billing and delivery), phone number (including mobile), and email address.
• Identification data, such as passport information, official identification details, data obtained from third-party money laundering checks, Companies House data, and your national insurance number.
• Details about your education and work history, including qualifications, roles, responsibilities, professional qualifications, and other relevant business information (for sole traders).
• Personal information like age, date of birth, gender, marital status, family details, and dietary requirements.
• Social media profiles, posts, and data about your followers and the people you follow.
• Information related to financial transactions, including purchases, orders, returns, and refunds.
• Online browsing activities on our website, including items added to your shopping cart.
• Usage of our app, including your username and password.
• Device information, such as IP address, device type, usernames, account details, and passwords.
• Data associated with purchases made on our website or app, including financial and transaction data.
• Communication and marketing preferences.
• Information about your interests, preferences, feedback, responses to surveys and competitions.
• Real-time location data.
• Correspondence and communications with us, including complaints, allegations, disputes, and claims.
• Publicly available personal data shared on platforms like LinkedIn, Instagram, YouTube, Twitter, or public Facebook pages.
• Business information, including your status as a sole trader, partner, or company director.
• Creditworthiness data, gathered when we need to assess your creditworthiness or verify your identity.
• Data regarding your performance when working with us, on projects, or for our organization.
• Multimedia like videos, photos, and audio recordings provided by you or others.
• Usage of our IT systems when visiting our premises, including internet and Wi-Fi facilities for visitors.
• Subscription information when subscribing to our blogs or other materials.

Please note that this list is not exhaustive, and in certain situations, we may need to collect additional personal data for the purposes outlined in this notice.

Special Categories of Personal Data

In certain limited cases, we may collect, store, and utilize "special categories" of more sensitive personal data, such as:

• Data concerning your race or ethnicity, religious beliefs, and sexual orientation.
• Health-related information, including medical conditions, dietary requirements, health records, and data from health professionals.
• Biometric data like height and weight.

The collection of special category personal data will be done only with your explicit consent. When collecting, storing, and using data related to criminal records, we will do so based on a legal obligation or your explicit consent.

WHERE DO WE COLLECT YOUR PERSONAL DATA FROM?

You

We may obtain your personal data directly or indirectly from you when you:

• Interact with us during our relationship with you or the organization you represent.
• Create an online account on our website or make purchases.
• Download our app.
• Register for our app, website, or other services.
• Communicate with us regarding app or website usage, ask questions, report problems, or for any other reason.
• Register for, attend, or participate in our events or competitions.
• Inquire about job opportunities or apply to become an employee.
• Inquire about becoming a content contributor.
• Raise queries, complaints, claims, legal disputes on behalf of yourself or the organization you work for.

Third Parties

We may also collect personal data from third parties with your consent or another lawful basis, including:

• Professional bodies.
• Credit reference agencies, including those providing data cleansing services.
• Organizations conducting research, analysis, or data cleansing.
• Companies House.
• Social media platforms like LinkedIn, Instagram, YouTube, Twitter, or public Facebook pages.
• Referrals and recommendations from individuals who know you or have a working relationship with you.
• Your employer or the organization you work for.
• Our professional advisors, including lawyers, accountants, and other advisors.
• Your professional advisors, including lawyers, accountants, and other advisors.
• Government bodies, local authorities, or relevant regulators.

HOW WE USE YOUR DATA

For some of your personal data you may have a legal, contractual or other requirement or obligation for you to provide us with your personal data. If you do not provide us with the requested personal data, we may not be able to properly perform our contract with you or the organisation you represent or comply with legal obligations and we may have to terminate our relationship. For other personal data you may not be under an obligation to provide it to us, but if you do not provide it then we may not be able to properly provide you with our goods and services or perform our arrangements with you or the organisation you represent.

Where you have given us your consent to use your personal data in a particular manner, you have the right to withdraw this consent at any time, which you may do by contacting us as described in the “Contact us” section below. We will generally only process your personal data based on your consent in relation to direct marketing or in relation to the processing of special category data and data relating to criminal convictions and offences.

Please note however that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent and we may still be entitled to hold and process the relevant personal data to the extent that we are entitled to do so on a basis other than your consent. Withdrawing consent may also have the same effects as not providing the information in the first place, for example we may no longer be able to provide marketing information to you.

We may anonymise and aggregate any of the personal data we hold (so that it does not identify you). We may use anonymised and aggregated information for purposes that include testing our IT systems, research, data analysis, improving our site and developing new products and services and for any other purpose.

You have the right to opt out of receiving marketing communications from us at any time, by:

1. informing us that you wish to change your marketing preferences by contacting our customer support team at support@resosports.com;
2. making use of the simple “unsubscribe” link in emails or the “STOP” number for texts; and/or
3. contacting us via email at support@resosports.com or by post to 252 E Wichita St Wichita Falls, Texas.

This will not stop service messages such as order updates and other non-marketing communications.

Personalisation and Automated Decision Making

If you visit our Website or use our App, you may receive personalised banner advertisements whilst browsing website of other companies. Any banner advertisements you see will relate to your browsing activity on our website from your computer or other devices.

These advertisements are provided by us via external market leading specialist providers using techniques such as pixels, web beacons, ad tags, mobile identifiers and ‘cookies’ placed on your computer or other devices(see further information on the use of cookies in our Cookie Policy. You can remove or disable cookies at any time – see Cookie Policy for further information.

We may analyse your browsing and purchasing activity online and your responses to marketing communications. The results of this analysis, together with other demographic data, allow us to decide what marketing communications are suitable for you and to ensure that we contact you with information on products, services, events and offers that are tailored and relevant to you. To do so, we use software and other technology for automated decision making.

This allows us to provide more personalised services and experiences, we may review personal data held by external social media platform providers about you, such as the personal data available on social media platforms such as Twitter, Instagram, YouTube, Twitter and Facebook. Some of our services enable you to sign-in via external social media platform providers such as Facebook. If you choose to sign-in via a third party app, you will be presented with a dialog box which will ask your permission to allow us to access your personal data (e.g. your full name, date of birth, email address and any other information you have made accessible).

We aim to update you about products and services which are of interest and relevance to you as an individual.To help us do this, we process personal data by profiling and segmenting, identifying what our customers like and ensuring messages we send them are relevant based on their demographics, interests, purchase behaviour, online web browsing activity and engagement with previous communications. We may also use your personal data to exclude you from communications which we feel are irrelevant to you. For example, we may exclude someone from resends of marketing emails when we know that person has already opened the original email sent.

Another example of how we may tailor our communications with you is that we may group individuals with similar interests using this data so we can send them product news or promotional offers that are relevant to that shared interest.

You may have the right to opt out of some automated processing, including profiling, at any time by:

1. informing us that you wish to opt out of automated processing by contacting our customer support team at support@resosports.com; and/or
2. contacting us by email to support@resosports.com or post to 252 E Wichita St Wichita Falls, Texas.

Cookies

Our Website uses cookies to capture personal data such as the browsing and purchasing behaviours of people who visit our Website including the pages viewed, products purchased and the journey around our Website.

We currently use a cookies tool on our Website which relies on implied consent of users. In recognition of the fact that the implementation date for the revised e-Privacy Regulation remains unknown, we are taking reasonable steps now to align our use of cookies the standard of consent required by GDPR. This means that we are in the process of updating the tool which, by default, requires explicit opt in action by users of our Website. This will apply to the non-necessary cookies. We will ensure any necessary cookies for functionality and security are marked so that they are not deleted by the tool.

Detailed information about how we use cookies is in our Cookie Policy. This will allow you to make an informed choice as to whether you wish to accept our cookies.

WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with the following third parties:

• The organisation that you represent.
• Other companies within our group.
• Other organisations within our supply chain so that they can contact you about any issues in the supply chain or where your personal data is relevant to a subcontractor or party above us in the supply chain.
• Other organisation including but not limited to organisations who own the venues at which our events take place, organisations who market and/or facilitate our events and photographers and videographers who attend our events.
• Purchasers, investors, funders and advisers if we sell or negotiate to sell all or part of our business or assets or restructure our business whether by merger, re-organisation or otherwise.
• Third parties who ask for or want referrals for example we may provide your details to a third party who is seeking services/products which are the same or similar to those that you provide.
• Other service providers and advisors to us including companies that support our IT, help us analyse the data we hold, process payments, send communications to our customers, provide us with legal, property or financial advice and generally help us deliver our products and services to you or the organisation that you represent or for us to purchase them from you or the organisation you represent.
• Our professional advisors including lawyers, accountants and other advisors.
• Your professional advisors including lawyers, accountants and other advisors.
• Credit reference agencies and other identification agencies so that we can assess your creditworthiness or verify your identity.
• Organisations who carry out research, analysis and/or data cleansing services.Governmental bodies, regulators, law enforcement agencies, security services, courts/tribunals and insurers including where we are required to do so in order to comply with our legal obligations and the administration of justice.

HOW WE PROTECT YOUR DATA

Our controls

Reso Sports Company is committed to keeping your personal data safe and secure and so we have numerous security measures in place to protect the loss, misuse and alteration of information under our control. Our security measures include: –

• encryption of personal data;
• regular cyber security assessments of all service providers who may handle your personal data;
• regular planning to ensure we are ready to respond to cyber security attacks and data security incidents;
• weekly penetration testing of systems;
• security controls which protect our IT systems infrastructure and our premises from external attack and unauthorised access;
• internal policies setting out our data security rules for our personnel; and
• regular training for our employees.

We take data security very seriously and will use all reasonable endeavours to protect the integrity and security of the personal data we collect about you.

WHAT YOU CAN DO TO HELP PROTECT YOUR DATA

You should always be cautious when sharing your personal data. No one from our company will ever ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from Reso Sports Company asking you to do so, please ignore it and do not respond.

If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.

In addition, we recommend that you take the following security measures to enhance your online safety: ­

• When creating a password, use a difficult word/number combination of at least 8 characters and something that is not easily guessed or something that cannot be easily obtained such as your name, email address, or other personal data that can be easily obtained.
• Frequently change your password (you can do this in your account settings.
• Avoid using the same password for different online accounts.

HOW LONG WE KEEP YOUR DATA

We will not retain your personal data for longer than necessary for the purpose for which is has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim. Various laws, accounting and regulatory requirements applicable to us also require us to retain certain records for specific amounts of time. In relation to your personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organisational purposes. We will not keep your data for longer than is necessary for the purposes for which we collect them.

Our Data Retention Policy sets out the length of time we will usually retain personal data and where these default periods might be changed.

It is important to ensure that the personal data we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you move position or work for a different organisation or change your phone number or email address. You can contact us by using the details set out in the “Contact us” section below.

INTERNATIONAL TRANSFERS

The personal data we collect may be transferred to and stored in countries outside the US. This will typically occur when service providers are located outside the US or if you are based outside the US. These transfers are subject to special rules under data protection laws.

Some of these jurisdictions require different levels of protection in respect of personal data and, in certain instances, the laws in those countries may be less protective than the jurisdiction you are typically resident in. We will ensure that your personal data is only used in accordance with this Notice and applicable data protection laws and is respected and kept secure and where a third party processes your personal data on our behalf we will ensure that one of the following safeguards is implemented:

• we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the SEC;
• where we use certain service providers, we may use specific contracts approved by the SEC which give personal data the same protection it has in the US; and
• where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe Union.

Our directors and other individuals working for us may in limited circumstances access personal data outside of the US if they are on holiday abroad outside of the US. If they do so they will be using our security measures and will be subject to their arrangements with us which are subject to English Law and the same legal protections that would apply to accessing personal data within the US.

In limited circumstances the people to whom we may disclose personal data as mentioned in the “Who We Share Your Personal Data With” section above may be located outside of the US. In these cases, we will impose any legally required protections to the personal data as required by law before it is disclosed.

For further details please contact us by using the details set out in the “Contact us” section below.

YOUR RIGHTS

You have the following rights in relation to your personal data:

• The right to be informed about how your personal data is being used.
• The right to request access to personal data we hold about you.
• The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you.
• The right to object to processing of your personal data and/or to withdraw any consent you have given us and to opt out of any marketing communications that we may send you.
• The right to restrict processing of your personal data.
• The right to object to certain automated decision-making processes using your personal data including profiling.
• The right to request that we erase your personal data in certain circumstances (the right to be forgotten) for example when the data are no longer necessary for the purpose for which we collected them.
• The right to have your personal data provided to you by us in a structured, commonly used and machine-readable format and transmitted to another data controller. This is known as the right to data portability.

You should note that some of these rights, for example the right to require us to transfer your data to another service provider or the right to object to automated decision making, may not apply as they have specific requirements and exemptions which apply to them and they may not apply to personal data recorded and stored by us. However, some have no conditions attached, so your right to withdraw consent or object to processing for direct marketing are absolute rights.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Whilst this Notice sets out a general summary of your legal rights in respect of personal data, this is a very complex area of law.

If you wish to exercise any of the above rights, you can always contact us using the details set out in the ‘Contact Us‘ section below.

CHANGES TO THIS NOTICE

We may update this Notice from time to time. When we change this Notice in a material way, we will update the version date at the bottom of this Notice. For significant changes to this Notice we will try to give you reasonable notice unless we are prevented from doing so. Where required by law we will seek your consent to changes in the way we use your personal data.

CONTACTING US

In the event of any query or complaint in connection with the information we hold about you, please email support@resosports.com.

Version 10^rd Dec 2012