Privacy Policy

Our policy was last reviewed January 2024

This notice applies to all websites & applications developed and delivered by Rigrun Ltd. Rigrun Limited is a private company incorporated in Scotland under company number SC457563 and has a registered office at 75 Stanley Street, Aberdeen, Scotland, AB10 6UT All significant decisions about data processing and policy implementation will be made using GDPR. This notice is set out to help you understand the types of data that we collect from you and or your business and how that data is used and managed.

Commitment

RigRun Ltd are committed to protecting the privacy and security of your personal data. We continually monitor compliance through implementing policies & procedures to safeguard data and by setting regular reviews to manage these policies and procedures.

Data Controller

In accordance with ICO Requirements of Data Controllers RigRun Ltd is registered with the Information Commissioners office (ZA524232). RigRun provides a global offshore motivational teambuilding & activity solution to improve physical health & psychological wellbeing. We do this through competitive achievement tracking.

Information we collect

Website

Rigrun collects personal data from web forms submitted by customers requesting information in the form of general enquiries or on the products and services provided by Rigrun. This comprises the name, email address and company of the person making the enquiry.

Rigrun also collects personal data from our website using Google Analytics to anonymously track how users interact with our site. This involves installing Google Analytics code on our website in the form of a ‘cookie’. Cookies contain an ID number which is assigned to a user and provides us with the following information:

• Your IP address (An IP address does not provide identifiable personal information)
• Your visits to our website
• The time of your visits and the length of time you spent on our website.
• The pages that you visited.
• Your location (although this might be influenced by the location of your server)
• The browser you are using.
• Type of operating system
• The device you are using (e.g., desktop, tablet or mobile)
• Referral source (how you arrived on our site, e.g., search engine, direct URL, social media or third-party website).

If you would like to opt-out of Google Analytics monitoring your behaviour on our website, please use this link (https://tools.google.com/dlpage/gaoptout/)

Alternatively, you can also clear cookies after every browsing session.

Otherwise, use a tracking blocker such as Privacy Badger – www.eff.org/privacybadger – a free browser extension for Google Chrome, Mozilla Firefox and Opera.

Social Media

Rigrun can be found on social media platforms such as Facebook, Twitter, and LinkedIn. These platforms are an important part of our marketing effort, so you may be presented with a retargeting ad in future following a visit to our website. We may target ads at audiences that we believe match the profile of our target audience and would therefore be interested in our services.

These platforms are run by commercial companies and Rigrun is not the Data Controller or Data Processor of your social media profile. You should contact these social media platforms directly if you have concerns over how your personal data is being used and stored by them.

Competitive Challenges

We directly collect and process the following information:

PAR-Q assessments collect personal information both about historic and current physical activity and any injuries, health conditions to support a personal training plan.  In addition, with your explicit consent, we indirectly collect data from your smart watch and associated apps which sync through Android and IOS platforms using Strava & Fit Bit API. this gives us access to a variety of metrics like the type of physical activity, the time spent on it and distance if applicable. The data accuracy collected varies depending on which device you use. When your device syncs with our applications, data recorded on your device is transferred and stored by us.

How we use your information

Website

Rigrun collects and stores personal data for the following reasons:

Provision of personal information to respond to general customer enquiries or information on our services from customers and prospects using contact web forms on our website.

The personal details of those customers who have purchased goods and services from Rigrun to process a transaction.

The anonymous tracking of website behaviour is to provide Rigrun with statistical information which is collated in aggregate form to help us improve user experience of our website and for marketing purposes.

Competitive Challenges

The personal information we process is provided to us directly by you at registration. We use the information that you have given us to track, feedback & analyse motivational, teambuilding activity to improve health & wellbeing of individuals working in an offshore environment through friendly competition.   We will record your activities and analyse your performance. For example, to compare your past efforts, analyse your training, and (with your consent) use your heart rate (don’t take heart rate info at present) information to provide you with interesting and useful performance analysis.

We encourage team interaction with other competitors. For example, to compete on segments, participate in challenges, or events, follow other competitors, and use features that help competitors interact with one another, such as group activities.

Manage your training. For example, to set goals and use your training dashboard. In cases where you are identified as high achievements rating, you may be allocated a personal trainer to enhance and improve existing training methods.

To continue to help visualise your activities in new ways. For example, by creating personal heatmaps or using your training logs.

We provide upload facility for you to verify activities through photographs to record machine results or location achievements where fitness wearable technology is not available or allowed.

Lawful Basis

When RigRun handles personal data, it is essential to ensure compliance with data protection laws by establishing a lawful basis for processing. There are six available lawful basis, namely: Consent, Contract, Legal obligation, Vital interests, Public task, and Legitimate interests.

We rely on your consent for processing participant information. Individual consent is provided by individuals when browsing our websites and when each registered user signs up for the challenge, in addition the lawful basis used for providing access to the medics is legitimate Interest in supporting & motivating individuals on an isolated platform.

We use legitimate interest when we use your data to keep you up to date with changes and improvements to our services and is necessary for keeping you updated.

We continue to apply the UK GDPR principles to all personal & Sensitive data that we hold, or process and these principles lie at the heart of our approach to processing personal data. We apply the GDPR principles to all personal & Sensitive data that we hold or process.

• Processed lawfully, fairly and in a transparent manner in relation to individuals.
• Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes.
• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals.
• Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures.

Sharing Information

RigRun uses third party hosting for this website and associated data processing is conducted only to provide you with user friendly functionality.

RigRun do not resell or rent the information gathered in our competitions RigRun are not owned or affiliated with insurance companies or private health care companies that may have interest in this type of data.

We may be required to transfer your information to a third party as part of a sale of some or all of our business assets to third party as part of any business restructuring or reorganisation.

We may also be required to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

International

Rigrun will not transfer any personal data out with the European Economic Area or to any third party without your knowledge. In the event that we are required to do this, we will take appropriate measures, in compliance with UK & EU GDPR, and ensure that your personal information remains protected. Such measures include the use of EU Standard Contractual Clauses to safeguard the transfer of data outside of the European Economic Area (“EEA”).

Children

We do not anticipate providing services directly to children, however we do understand that if this change occurs, we will make provisions to verify age. We will also make further provisions to gain parental or guardian consent for data processing activity where required.

Protecting your personal information

RigRun Ltd will continue to look for new ways to protect data, however, in the event of a data breach. We will notify the ICO within 72 hours of becoming aware of the breach, where we do not yet have all the relevant details we will notify when we expect to have the results of the investigation.  We have implemented the ICO guidance framework on managing a security breach.

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the ability to erase/delete your personal information you can do this from within the app.

• Select “Profile”
• Select “Personal details”
• Select “Delete account”

Your personal data will be deleted. However residual information on activities that contributed to team efforts and competition results will remain as fully anonymised data to the extent it can no longer considered personal data.

If for some reason you no longer have the app and would prefer us to delete your personal data for you. Contact us at privacy@rigrun.co.uk we will confirm once this has been done.  This must be requested from the email address you have registered with us.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at privacy@rigrun.co.uk if you wish to make a request.

RigRun Ltd, 75 Stanley Street, Aberdeen, AB10 6UT, www.rigrun.co.uk

Regulatory Information

Further information around your rights can be found at  https://ico.org.uk/your-data-matters

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Get in touch

If you prefer emailing to find out more please email us