This Policy describes the types of personal data collected and how your personal data is used, shared and protected. It also explains the choices you have relating to your personal data and how you can contact us.
It is important that you read this Policy together with any other privacy notice or fair processing notice that we may provide at or around the time that we collect or process personal data about you so that you are fully aware of how and why we are using that data. This Policy supplements the other notices and is not intended to override or replace them.
Please note that the Site is not intended for children (those aged 13 and under) and we do not knowingly collect data relating to children.
For ease of reading, we have divided this Policy into several sections:
This Policy was last updated on April 25th 2018
Student Beans and the Site are operated by The Beans Group. We registered in England and Wales under company number 5486885 and have our registered office at 1 Vincent Square, London, SW1 2PN.
We are a student discount platform. We offer student discounts and student deals online and in-store.
Student Beans discounts are available on the Site, and app.
The controller responsible for your personal data is The Beans Group.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this Policy, or if you think it has not been followed, please contact the data privacy manager using the details set out below.
When you sign up to Student Beans we collect personal data about you so that we can provide you with the services offered on the Site.
You provide some data yourself and this may include, for instance, when registering for a Student Beans account:
Some personal data is collected automatically by looking at information from your browser. This is information such as:
If you’re signed in we’ll also know how you use Student Beans. This helps us give you a better, more personalised service.
We also collect data about things you 'Add', for instance, the discount codes you request.
Information about your gender, age and location helps us see how different people are using the Site and Student Beans and to check we’re ensuring verified access only to exclusive student discounts.
Based on what we know about you, we may also show you adverts about Student Beans discounts and services on other websites, such as Facebook, Google, Instagram, Snapchat and Twitter. For instance, to let you know about an increased discount for a brand you love.
We use your data to make the Site and Student Beans better for you and everyone. Your data helps us to operate, improve and maintain our business whilst at the same time enhances your user experience. This allows us to do things like:
We also use your data for business, regulatory and legal purposes, like:
Student Beans will only use your personal data in the following circumstances:
Except if required otherwise by law, we retain your personal data for as long as necessary to fulfil the purposes for which we collect it and also where we have a legitimate interest in doing so, such as:
You can ask us to access, rectify or, in some circumstances, delete your personal data: see ‘Your Rights’ below for further information.
We may also anonymise your data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
If you have not used your Student Beans account in the last year then your account may be classed as dormant or may be deleted in line with this Policy. Please check your inbox to see if we've sent you any emails about this recently.
We use your data to improve your experience. Our service means that we keep your personal data inside Student Beans unless we are required by law to disclose your data or you ask us or give us your permission to share it, for example:
We may share your personal data with third party service providers who provide us with a variety of administrative, statistical, and technical services. For example to manage and service our data, distribute emails, research and analysis, manage brand and product promotions as well as administering certain services and features.
We will only provide service providers with the minimum amount of personal data they need to fulfil the services we request, and we stipulate that they protect this information and do not use it for any other purpose. We take these relationships seriously and oblige all of our data processors to sign contracts with us that clearly set out their commitment to respecting individual rights, and their commitments to assisting us to help you exercise your rights as a data subject.
Please note that some of our service providers may be based outside of the European Economic Area (the “EEA”). Where we transfer your data to a service provider that is outside of the EEA we seek to ensure that appropriate safeguards are in place to make sure that your personal data is held securely and that your rights as a data subject are upheld.
Please contact us if you want further information in relation to the transfer of your personal data out of the EEA.
When we share your personal data outside Student Beans we will:
If you have registered for a Student Beans account this will also allow you to login to third party partner websites and apps. To provide you with a seamless experience, it may be necessary to share your personal data with third party partner websites you choose to use your Student Beans login to access. We will only share what we need to in order to provide the service you are using and we will never routinely share all of the data we hold about you.
Your Student Beans account will always be covered by the policies of the Site.
Please note that where we provide links to third party websites, plug-ins and applications that are not affiliated with Student Beans such websites are out of our control and are not covered by this Policy. If you access third party websites using the links provided, the operators of these websites may collect information from you that could be used by them, in accordance with their own privacy policies. Please check these policies before you submit any personal data to these websites.
As a data subject you have a number of rights in relation to your personal data. Below, we have described the various rights that you have, as well as how you can exercise them.
You may, at any time, request access to the personal data that we hold which relates to you (you may have heard of this right being described as a "subject access request").
Please note that this right entitles you to receive a copy of the personal data that we hold about you in order to enable you to check that it is correct and to ensure that we are processing that personal data lawfully. It is not a right that allows you to request personal data about other people, or a right to request specific documents from us that do not relate to your personal data.
You can exercise this right at any time by writing to us using contact details set out here and telling us that you are making a subject access request. You do not have to fill in a specific form to make this kind of request.
You may, at any time, request that we correct personal data that we hold about you which you believe is incorrect or inaccurate. You may also ask us to erase personal data if you do not believe that we need to continue retaining it (you may have heard of this right described as the “right to be forgotten”).
Please note that we may ask you to verify any new data that you provide to us and may take our own steps to check that the new data you have supplied us with is right. Further, we are not always obliged to erase personal data when asked to do so; if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to erase we will tell you what that reason is at the time we respond to your request.
You can exercise this right at any time by writing to us using the contact details set out here and telling us that you are making a request to have your personal data rectified or erased and on what basis you are making that request. If you want us to replace inaccurate data with new data, you should tell us what that new data is. You do not have to fill in a specific form to make this kind of request.
Where we process your personal data on the basis of a legitimate interest (see the section of this Policy which explains why we use your personal data) you are entitled to ask us to stop processing it in that way if you feel that our continuing to do so impacts on your fundamental rights and freedoms or if you feel that those legitimate interests are not valid.
You may also ask us to stop processing your personal data (a) if you dispute the accuracy of that personal data and want us verify that data's accuracy; (b) where it has been established that our use of the data is unlawful but you do not want us to erase it; (c) where we no longer need to process your personal data (and would otherwise dispose of it) but you wish for us to continue storing it in order to enable you to establish, exercise or defend legal claims.
Please note that if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to stop processing, we will tell you what that reason is, either at the time we first respond to your request or after we have had the opportunity to consider and investigate it.
You can exercise this right at any time by writing to us using the contact details set out here and telling us that you are making a request to have us stop processing the relevant aspect of your personal data and describing which of the above conditions you believe is relevant to that request. You do not have to fill in a specific form to make this kind of request.
Where you wish to transfer certain personal data that we hold about you, which is processed by automated means, to a third party you may write to us and ask us to provide it to you in a commonly used machine-readable format.
Because of the kind of work that we do and the systems that we use, we do not envisage this right being particularly relevant to the majority of individuals with whom we interact. However, if you wish to transfer your data from us to a third party we are happy to consider such requests.
For details on your rights to ask us to stop sending you various kinds of communications, please contact us.
You have the right to be informed about the existence of any automated decision making and profiling of your personal data, and where appropriate, be provided with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you.
When you write to us making a request to exercise your rights we are entitled to ask you to prove that you are who you say you are. We will require you to provide copies of two of the following ID documents to help us to verify your identity:
It will help us to process your request if you clearly state which right you wish to exercise and, where relevant, why it is that you are exercising it. The clearer and more specific you can be the faster and more efficiently we can deal with your request. If you do not provide us with sufficient information then we may delay actioning your request until you have provided us with additional information (and where this is the case we will tell you).
We will never contact you to ask for your Student Beans account password, or other login information. Please be cautious if you receive any emails or calls from people asking for this information and claiming to be from Student Beans.
Student Beans will only send you marketing emails or contact you on Student Beans platforms where you have agreed to this.
We offer regular emails, including a weekly update, to let you know about new discounts and services. From time to time we may also contact you to ask your views on issues affecting Student Beans.
We may personalise the message content based upon any information you have provided to us and your use of the Site and apps.
We may use information which we hold about you to show you relevant advertising on third party websites (e.g. Facebook, Google, Instagram, Snapchat and Twitter). This could involve showing you an advertising message where we know you have a Student Beans account and have used Student Beans discounts. If you don’t want to be shown targeted advertising messages from Student Beans, some third party websites allow you to request not to see messages from specific advertisers on that website in future.
1) What is a Cookie?
A cookie is a small amount of data, which often includes a unique identifier that is sent to your computer, tablet or mobile phone (all referred to here as a "device") web browser from a website's computer and is stored on your device's hard drive. Each website can send its own cookie to your web browser if your browser's preferences allow it. Many websites do this whenever a user visits their website in order to track online traffic flows. Similar technologies are also often used within emails to understand whether the email has been read or if any links have been clicked. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on the Site. However, you can change your cookie settings at any time.
On the Site, cookies record information about your online preferences and allow us to tailor our websites to your interests.
Information supplied by cookies can help us to understand the profile of our visitors and help us to provide you with a better user experience. It also helps us recognise when you are signed in to your Student Beans account and to provide a more personalised experience. Student Beans uses this type of information to help improve the services it provides to its users.
3) Student Beans cookies and how to reject cookies
It is important to note that if you change your settings and block certain cookies, you will not be able to take full advantage of some features of Student Beans services, and we might not be able to provide some features you have previously chosen to receive.
4) Other information collected from web browsers
Your web browser may also provide Student Beans with information about your device, such as an IP address and details about the browser that you are using. Where requesting local discounts, it may be possible for you to choose to provide Student Beans with access to your device’s location through the web-browser. We use information provided by your browser or by the link that you have clicked to understand the webpage that directed you to Student Beans and this may be captured by performance cookies.
When you download or use the Student Beans app on your mobile device, information may be accessed from or stored to your device. Most often this is used in a similar way to a web browser cookie, such as by enabling the app to ‘remember’ you or provide you with the content you have requested.
Your web browser or device may also provide Student Beans with information about your device, such as a device identifier or IP address. Device identifiers may be collected automatically, such as the device ID, IP address, MAC address, IMEI number and app ID (a unique identifier relating to the particular copy of the app you are running).
When you sign in to the Student Beans app, your sign-in details may be stored securely on the device you are using, so you can access on the same device without needing to enter your sign-in details again.
If you any questions or comments about this Policy please contact The Data Privacy Manager by email, firstname.lastname@example.org, or by post to Student Beans, 1 Vincent Square, London SW1P 2PN.
We hope that we can resolve any query or concern you raise about our use of your data so please in the first instance get in touch via the contact details above.
You do however have the right to make a complaint under the General Data Protection Regulation to a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or via telephone on 0303 123 1113.