Privacy Notice
Page last updated: July 2018
PRIVACY NOTICE FOR GUESTS, VISITORS, CLIENTS, CUSTOMERS, CONTRACTORS AND WEBSITE USERS
W&G Harrison Limited, trading as Ribby Hall Village (company number 01032929) whose registered office is at Ribby Hall Village, Ribby Road, Wrea Green, Preston, Lancashire, PR4 2PR (RHV, we, us, our), is committed to protecting the privacy and security of your personal information.
This Privacy Notice outlines how we collect and use the information that we collect from you as one of our guests, visitors, clients or customers and/or through your use of and interaction with the website with address www.ribbyhall.co.uk (Site). It makes you aware of how and why your personal information will be used, namely for the purposes of the performance of our contract with you as our customer, and for how long it will usually be retained. It provides you with certain information that must be provided under the Data Protection Act 2018 (DPA) and the General Data Protection Regulation ((EU) 2016/679) (GDPR).
This policy primarily covers how we use information relating to our customers, prospects, Site visitors and people who interact with or do business with us (such as our suppliers). In these cases, we will be the “data controller” for the purposes of DPA and GDPR.
It is important that you read this policy, so that you are aware of how and why we are using such information.
Data Protection Principles
There are six overarching principles of the GDPR with which we will ensure compliance when processing your personal data:
1. Using the data lawfully, fairly and in a transparent way.
2. Collecting the data only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
3. The data is relevant to the purposes we have told you about and limited only to those purposes.
4. The data is accurate and kept up to date.
5. The data is kept only as long as necessary for the purposes we have told you about.
6. The data is kept securely.
What data is collected?
If you use the Site, communicate with us, purchase goods or services from us or otherwise do business with us, this will result in us collecting personal data about you. We will collect, store, and use the following types of personal information about you:
· Contact details such as your name, address, email address, fax and telephone number, including the same for individual representatives of business contacts;
· Bank and transaction details such as details about payments to and from you and other details of products and services you have purchased from or sold to us;
· Technical information such as includes IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Site;
· Information about our service to you including your username and password, purchases or orders made by you, your preferences and any feedback you give us;
· Information about how you use the Site, products and services;
· CCTV footage in the event you appear on CCTV installed at our premises.
We may also collect, store and use the following “special categories” of more sensitive personal information:
· Information about your health, including any medical conditions;
· Information about criminal convictions and offences.
Use of cookies
Our site uses cookies to distinguish you from other users of the Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site. By continuing to browse the Site, you are agreeing to our use of cookies.
A "cookie" is a piece of information that is stored on your computer, tablet or phone to recognise your browser and which records how you have used a website. This means that when you go back to that website, it can give you tailored options based on the information it has stored about your last visit. You can normally alter the settings of your browser to prevent it from accepting cookies.
How do we use cookies?
We may use cookies to improve the way the Site works and to monitor how people use our Site. This helps us to understand how people use our Site so we can develop and improve the design, layout and function of the Site. The cookies we use are explained below:
Strictly necessary cookies
These cookies are essential in order to enable you to move around the Site and use its features, such as accessing secure areas of the Site. Without these cookies, certain services and functionality on the Site, such as remembering items in your basket, cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the internet.
Functionality cookies
These cookies allow our Site to remember choices you make (such as your language or the region you are in) and provide enhanced features. For instance, a website may be able to provide you with news or updates relevant to the products you buy. These cookies can also be used to remember changes you have made to text size, font and other parts of web pages that you can customise. They may also be used to provide services you have requested such as viewing a video or commenting on a blog. The information these cookies collect is usually anonymised. They do not gather any information about you that could be used for advertising or remember where you have been on the internet.
Third Party Cookies
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services, including those set out below in this Privacy Notice) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies. You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the Site.
Google Analytics
The Site uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyse how users use the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the Site, compiling reports on Site activity for operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. Google lists the cookies used by their analytics service on the following web page:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
How to reject cookies
If you do not wish to receive cookies that are not strictly necessary to perform basic features of our Site you can set your browser to reject cookies or to tell you when a website tries to put a cookie on your computer.
Note that most web browsers will accept cookies, but if you would rather that we did not collect data in this way you can choose to accept all or some or reject cookies in your browser's privacy settings. Rejecting all cookies means that certain features on the Site cannot then be provided to you and accordingly you may not be able to take full advantage of all our Site's features. The "Help" menu in the bar of most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-ons settings or visiting the website of its manufacturer.
More information
For more information generally on cookies and how to disable them please go to the Information Commissioner’s web page on cookies: https://ico.org.uk/for-the-public/online/cookies.
How we will use information about you:
We will use the personal information we collect about you to:
· To register you as a customer;
· To perform our contract or service to you;
· To manage our relationship with you, including notifying your about changes to our contract or services or asking you to provide us with feedback;
· To administer and protect the business;
· To administer and monitor use of the Site in order to make improvements to it;
· To make suggestions or recommendations to you about similar goods or services that may be of interest to you.
Why do we need this information?
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
a) Where we need to perform the contract we have entered into with you.
b) Where we need to comply with a legal obligation.
c) Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Generally, we do not rely on consent as a legal basis for processing your personal information other than in relation to sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to such marketing at any time.
If you fail to provide personal information:
If you fail to provide certain information when requested either by law, or under the terms of a contract we have with you and you fail to provide that information when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
Automated decision-making:
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
Data sharing
Where it is legally required or necessary in accordance with data protection law, we may share your information with:
· Financial organisations;
· Our auditors;
· Survey and research organisations;
· Professional advisers and consultants;
· Police forces, courts, tribunals;
· Professional bodies.
We may share your personal information with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal information with a regulator or the police or to otherwise comply with the law.
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and the Information Commissioner’s Office of a suspected breach where we are legally required to do so.
Data retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your personal information are available in our retention policy. Please email DataProtection@ribbyhall.co.uk for details. After this period, we will securely destroy your personal information in accordance with our data retention policy.
What are your rights?
As the data subject, you have specific rights to the processing of your data.
Under the GDPR, you have the right to find out if we hold any personal information about you by making a “subject access request” under data protection law. If we do hold information about you, we will:
· Give you a description of it;
· Tell you why we are holding it;
· Tell you who it has been disclosed to; and
· Let you have a copy of the information in an intelligible form.
To make a request for your personal information, please contact DataProtection@ribbyhall.co.uk
Individuals also have certain rights regarding how their data is used and kept safe including the right to:
· Object to processing of personal data that is likely to cause, or is causing, damage or distress;
· Prevent processing for the purpose of direct marketing;
· Object to decisions being taken by automated means;
· In certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed;
· The right for your personal information to be transmitted electronically to another organisation in certain circumstances;
· Where the processing of your data is based on your explicit consent, you have the right to withdraw this consent at any time. This will not affect any personal data that has been processed prior to withdrawing consent; and
· Claim compensation for damages caused by a breach of the Data Protection regulations
Complaints
If you have a concern about the way we are collecting or using your personal data, we would ask that you raise your concern with us in the first instance by emailing DataProtection@ribbyhall.co.uk.
Alternatively you can make a complaint to the Information Commissioner’s Office at https://ico.org.uk/concerns/ or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this Privacy Notice
We reserve the right to update this privacy notice at any time, and we will publish and, where appropriate, make attempts to provide you with a new privacy notice when we make any substantial updates.