Last updated: 02/09/2025
This Privacy Policy explains how Altavia UK Group Limited, trading as altavia.uk, (“we”, “our”, “us”) collects, uses, shares, and protects your personal data when you use our website https://www.nestle-kitkat.racing (the “Website”). We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (“GDPR”).
1. Who We Are
- Business name: Altavia UK Group Limited
- Trading name: altavia.uk
- Registered address: Mercury House, 8 Sandy Way, Grange Park, Northampton, NN4 5EJ
- Contact email: enquiries@altavia-uk.com
- Telephone: +44 (0)1604 703200
If you have any questions about this Privacy Policy or how we handle your data, please use the contact details above.
2. Data We Collect
When you use our Website, we may collect the following personal data:
- First name and last name
- Initials (for display on the racing leaderboard)
- Date of birth (to confirm you are over 18)
- Email address
- Marketing preferences
- Google Analytics data (cookies, IP address, device/browser information, usage data)
- Login data from third-party providers (Google and Microsoft) if you choose to sign in this way
We do not knowingly collect data from anyone under the age of 18.
3. How We Use Your Data
We use your personal data for the following purposes:
- To run the online racing game and maintain the leaderboard
- To verify your age (18+)
- To send service-related communications (such as account confirmation or password reset emails)
- To send marketing communications where you have given explicit consent
- To monitor Website usage and improve performance through analytics
- To ensure the security and stability of the Website
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent – for marketing communications and analytics cookies (you may withdraw at any time)
- Contract – to provide you with access to the online game and associated services
- Legitimate interest – for Website security, session management, and storage of racing metrics (non-identifiable)
5. Data Sharing
We may share your personal data with:
- Google Analytics – for Website performance and usage tracking (explicit consent required)
- Nimbus Hosting – our website hosting provider
- Brevo – as an SMTP provider to support email deliverability
- Nestlé – we may share non-identifiable metrics with Nestlé. If you have explicitly opted in, we may also share your email address so Nestlé can send you marketing communications
We will never sell your personal data.
6. Data Retention
We keep your personal data for the duration of the campaign plus 12 months afterwards for reporting and analysis. After this period, data will either be securely deleted or anonymised.
You may request deletion of your data at any time by contacting us (see Section 1).
7. Cookies
We use cookies to operate the Website and improve your experience. This includes:
- Essential cookies (e.g., login sessions)
- Google Analytics cookies (used only with your consent)
You can read our full Cookie Policy here: Cookie Policy. A cookie consent banner is displayed on the Website to allow you to manage your preferences.
8. Your Rights (UK GDPR)
You have the following rights in relation to your personal data:
- The right to access the data we hold about you
- The right to correct inaccurate or incomplete data
- The right to request deletion of your data
- The right to withdraw consent at any time
- The right to data portability
- The right to object to certain processing activities
If you wish to exercise any of these rights, please contact us using the details in Section 1.
If you are not satisfied with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. However, we encourage you to contact us first so we can resolve your concerns.
9. Children’s Privacy
This Website is intended for users aged 18 and over. We do not knowingly collect or process personal data from anyone under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.
10. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated “Last updated” date. If changes are significant, we will notify you directly where appropriate.
12. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us at:
Altavia UK Group Limited
Mercury House, 8 Sandy Way, Grange Park, Northampton, NN4 5EJ
Email: enquiries@altavia-uk.com
Telephone: +44 (0)1604 703200