Privacy
Privacy Notice
How Yorkshire General Gymnastics Association collects and uses your personal data when you order a t-shirt through this shop. Plain English; not legal advice — please ask Yorkshire General Gymnastics Association for legal advice if you need it.
Who is responsible for your data?
Yorkshire General Gymnastics Association is the data controllerfor the personal data you enter on this order form. They decide what data is collected and what it's used for.
Virtually Earthed Ltd (Podium, the software platform that runs this shop) is the data processor. We process your data strictly on Yorkshire General Gymnastics Association's behalf, under written terms, only to run the shop. Virtually Earthed's privacy notice for its own marketing site is at podium.virtuallyearthed.com/privacy.html.
What we collect, and why
| Data | Why |
|---|---|
| Gymnast name | So Yorkshire General Gymnastics Association can identify whose shirt this is. |
| Club | To group orders by club for fulfilment. |
| Competition | To group orders by event for fulfilment. |
| T-shirt size and quantity | So Yorkshire General Gymnastics Association orders the right number of each size. |
| Parent/guardian email | To send the order confirmation and contact you about the order if needed. |
| Payment confirmation (Stripe reference) | To match your order to your payment. Card details themselves are never seen by this shop — Stripe handles them. |
Lawful basis
Under the UK GDPR:
- Performance of a contract (Article 6(1)(b)): we need the data above to fulfil your order — names, sizes, club, and email are essential for getting you the right shirt and confirming the order.
- Consent (Article 6(1)(a)): you tick the consent box on the order form before payment. You can withdraw consent at any time by contacting Yorkshire General Gymnastics Association (see Contact below), though we may still need to retain a record of any completed order for accounting purposes.
Card payments
Card details are handled by Stripe, not by this shop. When you click through to pay, you're on Stripe's own pages (under checkout.stripe.com) — Stripe is the data controller for your card data. Their privacy policy is at stripe.com/gb/privacy.
Sub-processors
On Yorkshire General Gymnastics Association's behalf, Virtually Earthed uses the following sub-processors to run this shop:
- Netlify, Inc. (USA) — site hosting and order data storage. Order details are kept in Netlify Blobs.
- Stripe Payments Europe Ltd (Ireland / USA) — card payments and the application-fee mechanism.
- Brevo SAS(France) — sends your confirmation email and the organiser's copy.
Each provider publishes its own Data Processing Addendum, and international transfers (where applicable) use the UK Information Commissioner's International Data Transfer Agreement or Standard Contractual Clauses.
Cookies
This shop sets no tracking cookies. There is no analytics script (Google Analytics or otherwise), no advertising pixel, and no third-party JavaScript that follows you around.
Yorkshire General Gymnastics Association organisers signing into the admin area will have a single functional session cookie (admin_session) set; this is not set for ordinary visitors. Stripe's own pages set cookies under their domain when you go through Checkout — these are covered by Stripe's privacy notice.
How long we keep your data
Yorkshire General Gymnastics Association retains order data for the duration of the active season and any reasonable follow-up period (typically up to 12 months). After that, the data is deleted from Netlify Blobs. Confirmed payment records may be kept longer where Yorkshire General Gymnastics Association needs them to meet HMRC record-keeping obligations.
If you ask us to delete your data, we'll do so unless we're required to keep it for accounting or legal reasons — in which case we'll restrict processing to those purposes.
Your rights under UK GDPR
You have the right to:
- Access a copy of the personal data Yorkshire General Gymnastics Association holds about you.
- Rectify data that's wrong or incomplete.
- Erase your data (with limits where law requires retention).
- Restrict processing in some circumstances.
- Object to processing based on legitimate interests.
- Portability — receive your data in a structured machine-readable format.
- Withdraw consent at any time, without affecting any processing already carried out.
- Complainto the UK Information Commissioner's Office (the ICO) at ico.org.uk — though we'd appreciate the chance to address your concern first.
Contact Yorkshire General Gymnastics Associationat the address below to exercise any of these rights. They'll respond within one calendar month.
Security
All traffic to this shop is encrypted with TLS (HTTPS). Order data sits inside Netlify's infrastructure and is accessible only to Yorkshire General Gymnastics Association's authorised organisers through a magic-link sign-in (no shared passwords). Card data is never stored by this shop; Stripe holds it under PCI-DSS-compliant infrastructure.
Contact
For any privacy-related question or request, contact Yorkshire General Gymnastics Association at bpo@robotparade.co.uk.
For questions about the underlying software (Podium / Virtually Earthed), see the Podium privacy notice.