BADA Limited Privacy Notice

The privacy and security of your personal information is extremely important to us. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about sharing your information us. 

We will keep this page updated to show you all the things we do with your personal data.

We will never sell your personal data and will only share it with organisations we work with when it is necessary, and the privacy and security of your data is assured.

Who are ‘we’?

In this policy, whenever you see the words ‘we’, ‘us’, ‘our’, or ‘BADA Ltd’, it refers to BADA Limited (Reg. Co. number 1189129), a wholly owned subsidiary of The British Antique Dealers’ Association (BADA), which delivers the annual BADA Fair.

  1. This policy applies to: 

BADA Members

As a member of BADA, BADA Ltd promote opportunities to exhibit at, participate in and/or attend the BADA Fair, and/or related third party events i.e. the Charity Gala dinner held during the BADA Fair.

To do this we use the information collected by BADA for the purpose of your membership such as your name, business details and contact information.  

This information is maintained as part of The British Antique Dealers’ Association operations as a membership organisation.

BADA Ltd uses your information in this way on the lawful basis of legitimate interest.

BADA Fair Exhibitors

As an exhibitor of the BADA Fair we will collect personal information relating to you as an individual, if you are an individual exhibitor. If you are applying on behalf of a company, we will collect information about you and your company. Such information will include; your name, your company name, your contact information, such as your email address, postal address, telephone number, job title, business specialism and invoicing contact information.

We require this data in order to fulfil our contract with you for participating in the event, and to provide you with services relevant to the event. This data is held on the lawful basis of contract.

We will share relevant contact details with our core service provider, Full Circle, who provide the stand build for the event. Full Circle is a registered private limited liability company (company number 08481914), whose registered office is Engels House, Victoria Mills, Weaste Trading Estate, Liverpool St, M5 5HD.

We will also share relevant contact details with our mailing house who will send you your personalised invitations and posters to promote your participation at the event. Our mailing house is Cyborg Group, a registered private limited company (company number 03407980), whose registered office is 52 Gorst Road, Park Royal, London, England, NW10 6LD.

 

BADA Fair online ticket purchasers

We process customer data to fulfil online ticket purchases for the BADA Fair. Your data will be used to communicate with you throughout the process, including to confirm we’ve received your order and payment, to confirm dispatch, to clarify where we might need more detail to fulfil an order or booking, or to resolve issues that might arise with your order or booking.

We use the ticket sales platform, See Tickets. You can access their Privacy Policy statement here - https://www.seetickets.com/content/data-protection

This data is kept on the lawful basis of contract.

Online ticket purchasers are given the option to opt in to hear more from BADA Ltd. If online ticket purchasers select this option, their details will be added to the BADA Fair Database to receive complimentary invitations and e-newsletters.

 

BADA Ltd Database Contacts

If you have previously signed up to receive complimentary invitations to BADA events, and/or to receive our e-newsletter, your data will have been added to the BADA Ltd Database. You may have signed up to receive invitations and/or e-newsletters on the BADA Fair website, at the fair itself, at a third-party event or via a third-party initiative.

The BADA Fair Database contains names, postal addresses and email addresses which we use to market the event by sending hard copy invitations and e-newsletters. This data is kept on the basis of legitimate interest.

This database is managed by our data management company - Cyborg Group, a registered private limited company (company number 03407980), whose registered office is 52 Gorst Road, Park Royal, London, England, NW10 6LD.

We will also share the names and postal addresses on the BADA Fair Database with our printers for the completion of the direct mailing of invitations.

We use MailChimp for our e-newsletter mailings and for this purpose relevant data will be stored on MailChimp.

Details of how you may opt-out of receiving any communications from us are outlined in the “Updating your data and marketing preferences” section below.

 

BADA Ltd Internal Database Contacts

We hold an internal database made up of personal and business contacts to send complimentary invitations to. This database contains names, job titles, businesses addresses, personal addresses, business email addresses and personal email addresses. This data has been collected through personal contacts, existing contacts, researched business contacts i.e. interior designers, Ambassadors, Museum Curators.

This data is held on the lawful basis of legitimate interest.

Details of how you may opt-out of receiving complimentary invitations from us are described in the “Updating your data and marketing preferences” section below.

 

Press Contacts

If you are a member of the press and would like to receive press releases and invitations to BADA events, you can sign up to be on our Press List by emailing your credentials to [email protected]. We collect, record and store the email address, publication and name of anyone who elects to sign up for our Press List so that we can verify the publication that you represent and use the email address to contact you to provide press releases and/or invitations to events.  If you no longer wish to receive BADA Ltd press materials or if another member at your publication would like to receive these materials instead, you may email [email protected] and you will be deleted from the Press List within 7 business days.

This data is kept on the lawful basis of legitimate interest.

 

Marketing partners

We process marketing partners data in order to promote our events and provide complimentary invitations to interested audiences of other organisations, such as members clubs, societies, hotel guests, business clients etc. We collect and store data on our marketing partners such as the contact name, company, company type, address, telephone number, email address and invitations given.

This data is kept on the lawful basis of legitimate interest.

 

Sponsors and Partners

We process the data of our sponsors and partners so we can deliver mutually beneficial partnerships and sponsorships (i.e. for the Charity Gala Dinner and Loan Exhibition). We collect data such as contact name, company, job title, address, email address, telephone number and company website.

This information is kept on the lawful basis of legitimate interest.

 

Visitors to our pages on the bada.org website

We use specific tools to profile how you interact with us online, for example Google Analytics. All of the information we collect is aggregated.

We may send a small file to your computer when you visit our website, this file stores your session identifier. This will enable us to identify your computer and to allow our systems to tailor their response to your requests.

Save for the use of cookies, we do not automatically log data or collect data save for information you specifically provide to us. You can set your computer browser to reject cookies, but this may preclude your use of certain parts of this website.

We use Google Analytics to help analyse use of our website. This analytical tool uses 'cookies', which are text files placed on your computer, to collect standard internet log information and visitor behaviour information in an anonymous form. The information generated by the cookie about your use of the website (including your IP address) is transmitted to Google. This information is then used to evaluate visitors’ use of the website and to compile statistical reports on activity for this website. To find out more about cookies, including how to control and delete them, visit www.allaboutcookies.org, or to opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout

We will not (and will not allow any third party) to use the statistical analytics tool to track or to collect any personally identifiable information of visitors to our site. We will not associate any data gathered from this site with any personally identifying information from any source as part of our use of the Google statistical analytics tool. Google will not associate your IP address with any other data held by Google. Neither ourselves nor Google will link, or seek to link, an IP address with the identity of a computer user.

No lawful basis is required, as information is aggregated and does not constitute personal data.

 

Enquiries to BADA Ltd

If you make an enquiry by telephone, email or by writing to BADA Ltd we collect personal data relating to your enquiry. This can include name, personal address, telephone numbers and email addresses.

This information is used for the sole purpose of dealing with your enquiry including answering your queries, handling your complaints and fulfilling any requests you make to us.

This information is kept on the lawful basis of contract.

 

BADA Ltd Vetting Committees

We process personal data such as names, addresses, email addresses, telephone numbers and specialisms for members of the BADA Vetting Committees. We use this data to send you correspondence regarding vetting and to contact you during the fair to carry out the responsibilities associated with your role as a member of the BADA vetting committees. 

This information is kept on the lawful basis of contract.

 

BADA Ltd Committee and Directors

We process personal data such as names, addresses, email addresses, telephone numbers, and job titles, for past and present BADA Ltd Committee Members and Directors. We use this data to send you correspondence relating to the responsibilities associated with your role as a member of the BADA Committee and/or Board of Directors.

This information is kept on the lawful basis of contract.

BADA Ltd Director’s details including birth date are also listed on the Companies House website, which is a legal requirement. The listing for which can be viewed here - https://beta.companieshouse.gov.uk/company/01189129

 

BADA Ltd Suppliers and Contractors

If you are a BADA Ltd supplier or contractor, we collect and store your name, address, email address, telephone number, notes on past work and details relevant to the service provision in order to manage our contract and business relationship with you.

Your information will only be used for the purpose stated above and will be processed in accordance with this privacy policy.

This information is kept on the lawful bases of contract and legitimate interest.

 

BADA Ltd Employees

To comply with our contractual, statutory, and management obligations and responsibilities, we process personal data, including ‘sensitive’ personal data, from job applicants and employees. 

Such data can include, but isn’t limited to, information relating to health, racial or ethnic origin, and criminal convictions. In certain circumstances, we may process personal data or sensitive personal data, without explicit consent. Further information on what data is collected and why it is processed is given below.

Contractual responsibilities: Our contractual responsibilities include those arising from the contract of employment. The data processed to meet contractual responsibilities includes, but is not limited to, data relating to: payroll, bank account, postal address, sick pay; leave, maternity pay, pension and emergency contacts.

Statutory responsibilities: Our statutory responsibilities are those imposed through law on the organisation as an employer. The data processed to meet statutory responsibilities includes, but is not limited to, data relating to: tax, national insurance, statutory sick pay, statutory maternity pay, family leave, work permits, equal opportunities monitoring.

Management responsibilities: Our management responsibilities are those necessary for the organisational functioning of the organisation. The data processed to meet management responsibilities includes, but is not limited to, data relating to: recruitment and employment, training and development, absence, disciplinary matters, e-mail address and telephone number.

 

Sensitive personal data

The Act defines ‘sensitive personal data’ as information about racial or ethnic origin, political opinions, religious beliefs or other similar beliefs, trade union membership, physical or mental health, sexual life, and criminal allegations, proceedings or convictions. 

In certain limited circumstances, we may legally collect and process sensitive personal data without requiring the explicit consent of an employee.

(a) We will process data about an employee’s health where it is necessary, for example, to record absence from work due to sickness, to pay statutory sick pay, to make appropriate referrals to the Occupational Health Service, and to make any necessary arrangements or adjustments to the workplace in the case of disability. This processing will not normally happen without the employee’s knowledge and, where necessary, consent.

(b) We will process data about, but not limited to, an employee’s racial and ethnic origin, their sexual orientation or their religious beliefs only where they have volunteered such data and only for the purpose of monitoring and upholding our equal opportunities policies and related provisions.

(c) Data about an employee’s criminal convictions will be held as necessary.

 

Disclosure of personal data to other bodies

To carry out our contractual and management responsibilities, we may, from time to time, need to share an employee’s personal data with one or more third party supplier.

To meet the employment contract, we are required to transfer an employee’s personal data to third parties, for example, to pension providers and HM Revenue & Customs.

To fulfil our statutory responsibilities, we are required to give some of an employee’s personal data to government departments or agencies e.g. provision of salary and tax data to HM Revenue & Customs.

This information is kept on the lawful basis of contract.

 

  1. Retention Policy

We will only keep the information for as long as we need to use it, for the purposes it was given to us and for our business needs in line with our retention policy (a copy is available on request), or as required by law or regulation.

 

  1. Updating your data and marketing preferences

We want you to remain in control of your personal data. If, at any time, you want to update or delete your personal data please contact us in one of the following ways:

 

Website

If you are a BADA member you can amend your details by logging into the member area on www.bada.org

Email

Email: [email protected]

Call

+44(0)20-7589 6108. Open 9.30am - 5.00pm weekdays

Write

BADA Ltd, 21 John Street, London WC1N 2BF

 

  1. Subject access rights

If you would like further information on your rights or wish to exercise them, please write to us at BADA Ltd, 21 John Street, London WC1N 2BF or email [email protected].

You will be asked to provide the following details:

  • The personal information you want to access
  • Where it is likely to be held
  • The date range of the information you wish to access

We will also need you to provide information that will help us confirm your identity. If we hold personal information about you, we will give you a copy of the information in an understandable format together with an explanation of why we hold and use it.

Once we have all the information necessary to respond to your request we will provide your information to you within one month. This timeframe may be extended by up to two months if your request is particularly complex.

What to do if you are not happy

In the first instance, please talk to us directly so we can resolve any problem or query. You also have the right to contact the Information Commissions Office (ICO) if you have any questions about Data Protection. You can contact them using their help line 0303 123 113 or at www.ico.org.uk.

 

  1. Links to other websites

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we don’t accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. This privacy policy applies solely to the personal data collected by BADA Ltd.

 

  1. Securing your data

Information system and data security is imperative to us to ensure that we are keeping our exhibitors, visitors, employees and contractors safe.

We operate a robust and thorough process for assessing, managing and protecting new and existing systems which ensures that they are up to date and secure against the ever-changing threat landscape.

Our staff complete mandatory information security and data protection training on employment and annually thereafter to reinforce responsibilities and requirements set out in our information security policies.

When you trust us with your data, we will always keep your information secure to maintain your confidentiality. By utilizing strong encryption when your information is stored or in transit, we minimize the risk of unauthorized access or disclosure.

 

  1. Disclosing and sharing information

When we allow third parties acting on behalf of BADA Ltd to access to your information, we will always have complete control of what they see, how long they see it for and what they are allowed to do with it. We do not sell or share your personal information for other organisations to use.

Personal data collected and processed by us may be shared with the following groups where necessary:

The British Antique Dealers Association

The British Antique Dealers Association employees

BADA Friends

Third party cloud hosting and IT infrastructure providers who host the CRM / website and provide IT support in respect of the website;

Also, under strictly controlled conditions:

Contractors
Service Providers
Advisors
Agents

We may also disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of BADA Ltd, The British Antique Dealers Association, our members, supporters and visitors. This includes exchanging information with other companies and organisations for the purposes of fraud protection.

 

  1. Storage of information

BADA Ltd’s operations are based in the UK and we store most of our data within the European Union (EU). Some organisations which provide services to us may transfer data outside the European Economic Area, but we will only allow this if your data is adequately protected. Some of our systems are provided by US companies and whilst it is our policy that we prefer data hosting and processing to remain on EU-based solutions, it may be that using their products results in data transfer to the USA. However, we only allow this when we are certain it will be adequately protected. (e.g. US Privacy Shield or Standard EU contractual clauses). 

 

  1. Payment card Security

The British Antique Dealers’ Association (of which BADA Ltd is a wholly owned subsidiary) has an active PCI-DSS compliance programme in place. This is the international standard for safe card payment processes. All card transactions are carried out manually and merchant copy receipts are stored securely.

 

  1. CCTV

Some of our events have Closed Circuit Television (CCTV) and you may be recorded when you visit them.

CCTV is used to provide security and protect both our members and visitors and BADA Ltd. CCTV will only be viewed when necessary (e.g. to detect or prevent crime) and footage is stored for a set period after which it is recorded over.  BADA Ltd complies with the Information Commissioner’s Office CCTV Code of Practice and we put up notices, so you know when CCTV is used.

 

  1. Changes to this privacy policy

We will amend this privacy policy from time to time to ensure it remains up to date and reflects how and why we use your personal data and new legal requirements. Please visit our website to keep up to date with any changes. The current version will always be posted on our website.

 

This privacy policy was last updated on 15 January 2019.