We review and may amend this Policy from time to time to reflect changes in applicable laws or the way we handle personal data. The updated Policy will supersede earlier versions and will apply to personal data provided to us previously. You are encouraged to re-visit our Policy from time to time to keep yourself updated on these changes. A copy of our current Policy is available on request, or can also be found at https://www.djangorally.com

We ask you for certain personal data to provide you with the products or services you request. For example, when you make purchases, contact our customer services, request to receive communications, create an account, participate in our events, or use our website.

This personal data includes your:

• Contact details, including name, email, telephone number and shipping and billing addresses
• Login and account information, including password and unique user ID
• Personal details including gender, hometown, date of birth and purchase history
• Payment or credit card information
• Passport information, drivers license details.

We comply with local laws and do not allow children to register on our website when they are under the legal age limit of the country in which they reside. We will ask for parental consent for children participating in Django Rally experiences and events.

We use your personal data in the following ways:

• To Provide the Features of the Website and Services You Request:

When you use our website we will use your personal data to provide the requested product or service. For example, if you make a purchase on Djangorally.com or participate in an event, we will use the contact information you give us to communicate with you about the purchase, event. If you contact our customer services, we will use information about you, such as delivery or payment information, or the product you have purchased to help you resolve a problem or question.

• To Communicate Information about our Products, Services, Events and for Other Promotional Purposes:

When you consent, we will send you marketing communications and news concerning Django Rally’s products, services, events and other promotions. You can opt-out at any time after you have given your consent.

If you are an existing customer of Django Rally (for example, if you have placed an order with us), we may use the contact details you provided to send you marketing communications about similar Django Rally products or services where permitted by applicable law (unless you have opted-out). In other cases, we ask for your consent to send you marketing information. We may use the information that you provide to us as well as information from other Django Rally products or services - such as your use of Django Rally’s website, your participation in Django Rally events and contests - to personalise communications on products and services that may be interesting for you.

• To Operate, Improve and Maintain our Business, Products and Services:

We use the personal data you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, audits and other internal functions. We may use personal data about how you use our products and services to enhance your user experience and to help us diagnose technical and service problems and administer our website.

• To Protect Our or Others' Rights, Property or Safety:

We may also use your personal data about how you use our website to prevent or detect fraud, abuse, illegal use, violations of our Terms of Use, and to comply with court orders, governmental requests or applicable law.

• For General Research and Analysis Purposes:

We use data about how our visitors use our website and services to understand customer behaviour or preferences. For example, we may use information about how visitors to Djangorally.com search for and find products to better understand the best ways to organise and present product offerings.

• Other Purposes :

We may also use your personal data in other ways and will provide specific notice at the time of collection and obtain your consent where necessary.

To process your personal data, we rely on certain legal grounds, depending on how you interact with our website.

• When you purchase Django Rally products from our website, we need your personal data to fulfill our contract with you. For example, we need your payment and contact details to deliver your order.
• We also rely on other legal grounds, such as our legitimate interests as a business, to comply with a legal obligation, or to protect your vital interests.

Django Rally shares your personal data with:

• Django Rally entities for the purposes and under the conditions outlined above.
• Third party service providers processing personal data on Django Rally behalf, for example to process credit cards and payments, shipping and deliveries, host, manage and service our data, distribute emails, research and analysis, manage brand and product promotions as well as administering certain services and features. When using third party service providers we enter into agreements that require them to implement appropriate technical and organisational measures to protect your personal data.
• Other third parties to the extent necessary to: (i) comply with a government request, a court order or applicable law; (ii) prevent illegal uses of our website and Apps or violations of our website Terms of Use and our policies; (iii) defend ourselves against third party claims; and (iv) assist in fraud prevention or investigation (e.g., counterfeiting).
• to any other third party where you have provided your consent.

We may also transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, spin-off, dissolution or liquidation).

• Unauthorised access. While precautions will be taken to ensure that the personal data you provide is protected against unauthorised or unintended access, we cannot be held responsible for unauthorised or unintended access that is beyond our control.
• Vulnerabilities. We do not guarantee that our systems or applications are invulnerable to security breaches, nor do we make any warranty, guarantee, or representation that your use of our systems or applications is safe and protected from viruses, worms, Trojan horses, and other vulnerabilities. We also do not guarantee the security of data that you choose to send us electronically. Sending such data is entirely at your own risk.
• Period of retention. We keep your personal data only for so long as we need the personal data to fulfil the purposes, we collected it for, and to satisfy our business and/or legal purposes, including audit, accounting or reporting requirements. How long we keep your personal data depends on the nature of the data, for example: we will keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Some information may be retained for longer, for example where we are required to do so by law. Typically, our data retention periods range from 3 to 15 years.
• Anonymised data. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we are entitled to retain and use such data without restriction.

Depending on the jurisdiction you are in or where we operate, you may enjoy certain rights at law in relation to our collection, use, disclosure and processing of your personal data. Such rights include:

• Access: you may ask us if we hold your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of and information on the personal data we hold about you.
• Correction: you may request that any incomplete or inaccurate personal data we hold about you is corrected.
• Erasure: you may ask us to delete or remove personal data that we hold about you in certain circumstances.
• Restriction: you may withdraw consent for our use of your personal data, or ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy.
• Portability: you may request the transfer of certain of your personal data to another party under certain conditions.
• Objection: where we are processing your personal data based on a legitimate interest (or those of a third party) you may object to processing on this ground.

If you wish to make exercise your rights, you may contact us in accordance with paragraph. We may require that you submit certain forms or provide certain information to process your request. Where permitted by law, we may also charge you a fee to process your request.

• Limitations: We may be permitted under applicable laws to refuse a request, for example, we may refuse (a) a request for erasure where the personal data is required for in connection with any claims; or (b) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.
• Complaints. If you are of the opinion that we have not complied with this Policy or we have infringed applicable data protection laws, you have a right to lodge a complaint with any data protection regulator or authority having jurisdiction over us.

If you have any feedback or issues in relation to your personal data, or about this Policy, or wish to make a complaint to us, you may contact the applicable Data Protection Officer in your region, as set out below: info@djangorally.com.

When you contact us, we may require that you submit certain forms or provide certain information, including verification of your identity, before we are able to respond.