Welcome.

This policy describes how R&A Championships Limited (“The R&A”, “we”, “us” and “our”) collects and uses your personal information when you register and use The R&A’s Brand Portal (brand.randa.org). This policy was last updated in November 2019.

If you would like to contact us about this policy, you can do so by:

• emailing us at privacy@randa.org; or

• writing to us at F.A.O. Data Privacy Manager, The R&A, Beach House, Golf Place, St Andrews, Fife, KY16 9JA.

Types of personal information we collect

When you create a user account on The R&A’s Brand Portal, we collect your name and email address and other personal information you provide during user account registration.

We also use cookies on The R&A’s Brand Portal. These are:

• Our ‘Remember Me’ check box – if you select this box at login, a cookie will be stored on your computer which will automatically authenticate you upon subsequent visits.

• Google Analytics – this sets a cookie in order to evaluate how you and other visitors use the site. It collects information in an anonymous form and we use this information to help us improve the visitor experience on the site.

You can find out more about cookies at www.allaboutcookies.org.

How we use your personal information

We will use your personal information to administer and maintain your user account. This processing of your personal information is necessary for our legitimate interests of allowing you to engage with us and to access our brand and licensing assets more easily.

We will retain this personal information for the duration of your user account with us.

How we use your personal information to make automated decisions

We will not use systems to make automated decisions about you based on the personal information that we obtain about you in relation to The R&A’s Brand Portal.

If you choose not to give your personal information

If you choose not to provide your personal information, you will not be able to access The R&A’s Brand Portal and, consequently, The R&A and The Open brands and licensing assets located therein.

Who we share your information with

We may share your personal information with our agents, service providers and other group companies of The R&A for the purposes set out in this privacy policy only. We may also share your personal data with a regulator or where the disclosure is required by law. We require those third parties to respect the security of your data and to treat it in accordance with the law.

Where disclosure to third parties is required by law, our legal basis for processing your information in this way is that it is necessary to comply with a legal obligation that we are subject to.

Overseas transfers

Your personal information may be transferred to, and stored in, countries outside of the UK and EU. The R&A will take steps to ensure your personal information is adequately protected in countries outside of the UK and EU.

Your rights

Data protection legislation provides individuals with certain rights regarding the use of their personal information. If you would like to contact us to exercise your rights, please contact us using the contact details at the beginning of this privacy policy.

You have the right to:

• access the personal information that we hold about you in many circumstances;
• ask us to delete or correct any personal information that we hold about you;
• prevent us processing your personal information;
• port your personal information in certain circumstances;
• withdraw any consent that you have given. This does not affect the lawfulness of processing based on consent before withdrawal; and
• lodge a complaint with the UK regulator, the Information Commissioner’s Office. Please see https://ico.org.uk/concerns/ to find out more.