Tenanted Privacy Policy

Introduction

This Privacy Policy explains what personal data we collect about you and how we use it.

Personal data is any information relating to an individual that can be used to identify them. By providing your personal data to us you acknowledge that it will be processed in accordance with this Privacy Policy.

 

How we collect your personal data

When you interact with us through social media

If your visit is recorded on CCTV*

When you contact us by digital forms, telephone or email to make an enquiry, booking, to make a purchase or to submit a complaint.

When you visit our website

When you sign up to use our complimentary WI-FI

When you sign up to receive marketing communications from us CCTV - your visit may be recorded

Entering prize draw / competitions

Making a table booking

Making a hotel booking

Making an event booking

Social Media interaction / engagement

Employment Application forms

Customer makes a Complaint

Accident / Incident reporting affecting a customer

 

Personal data we collect about you

Name and contact details (e.g. email address, telephone number and postal address)

Full Name

Address

Home Telephone Number

Mobile Telephone Number

Email Address

Date of Birth

Gender

Car Registration Number

Food allergens / dietary requirements

Car registration

 

How and why we use your personal data:

To process any orders, payments, refunds, vouchers and to prevent fraud - this includes managing the payments, fees and charge

To administer your booking with us (room*, table or event booking)

When you book a table/function/hotel room*/ticket

If you have an accident while visiting us at our venues

When you pay for a hotel room* either in person or online

When you liaise with us through social media.

When you make a complaint

Employment Application forms

Entering prize draw / competitions

Guest wifi sign up

To send you communications which is necessary for the fulfilment of a service we provide

To send you marketing communications, where you have consented us to do so

To comply with requests and obligations submitted by legal authorities (e.g. HMRC, local Police)

To process any orders, payments, refunds, vouchers and to prevent fraud. This includes managing the payments, fees and charges

When you inform us of a dietary requirement or information relating to your health

 

Special Category Personal Data 

Special category personal data is personal information which is more sensitive by its nature such as health information or religious beliefs. Within our pub, there could be circumstances where a guest informs us of personal information relating to their health to have a safe experience. This is particular to circumstances concerning allergy information included within a booking, an accident on site or a complaint that involves information related to health data

There may be circumstances within our pub where an individual states their dietary requirements which in turn may reveal their religious or philosophical beliefs.

 

When we have a legal obligation to process your data:

We are required to keep certain records for legal reasons – for example receipts that we issue or accidents that occur at our venues. We will keep and use this data in line with our legal requirements.

For hotel* guests, to keep a record of the full name and nationality of each guest over the age of 16. This is in accordance with UK’s Immigration (Hotel* Records) Order 1972.

If necessary, your personal data including health data will be used to document accidents that occur within our venues in accordance with our obligations.

 

Who can access your personal data

We rely on some third parties to provide solutions; these companies will have their own Terms and Conditions and privacy policies.

These include:

Pub and restaurant booking system provider

Hotel* booking system provider

WIFI provider

Marketing system

Accident reporting system

 

If requested, we will share your personal information with authorities such as:

· The Police;

· The Health and Safety Executive;

· Local Authorities;

· Her Majesty’s Revenue and Customs (HMRC);

· The Courts; and

· Central or Local Government Bodies.

 

Retention and Security of your Data

We will only retain your personal data for as long as required to fulfil the purpose(s) for which it was collected. When assessing what retention period is appropriate for your personal data, we take into consideration:

Any statutory or legal obligation;

The requirements of the business;

The purposes for which we originally collected the personal data;

The lawful grounds on which we based our processing;

The types of personal data we have collected;

We regularly review the retention of personal information held to ensure that we are not keeping your personal information for no longer than is necessary.

 

After the record has met its designated retention period, we will securely delete or destroy your personal information.

 

International Data Transfers

The European Economic Area (EEA), which consists of the EU Members States, Iceland, Liechtenstein and Norway. If we transfer your personal information outside the EEA, we have to tell you and we will utilise one of the following bases:

• Adequacy decision: The country we send your personal information to must provide an adequate level of protection which has been approved by the European Commission.

• Standard Contractual Clauses: The recipient of your personal information has provided us with signed Standard Contractual Clauses which has been approved by the European Commission. This holds the recipient accountable to safeguard the personal information.

• International Data Transfer Agreement / Addendum (IDTA): The recipient of your personal data has provided us with a signed IDTA which has been approved by the ICO. This holds the recipient accountable to safeguard the personal data.

 

Your Rights

Everybody has rights relating to the collection and use of their personal information. These are the rights that apply to your personal information.

Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.

Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.

Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.

Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.

Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.

To make a data protection rights request, please contact us using the contact details below.

 

Not happy?

Please let us know if you are unhappy with how we have used your personal information by contacting the Pub using the Contact Us details on the website.

If you are not satisfied with our response, you have the right to lodge a complaint with the ICO using the information below. We would be grateful for the chance to deal with your concerns directly before you approach the ICO so please contact us in the first instance.

 

Address: 

Information Commissioner's Office
Wycliffe House Water Lane
Wilmslow 
Cheshire

SK9 5AF

 

Telephone: 
0303 123 1113

 

* where relevant

For further support, please visit the ICO’s website. The ICO also have a privacy policy template to aid the creation of yours, which can be found here.