Your personal data will be collected by St James (Nottingham) Ltd who will act as the “Data Controller”.A Data Controller determines the purposes and means of processing personal data.
Collection of Information
The types of information that St James (Nottingham) Ltd collects and processes includes the following:
- National Identity (Passport numbers for non-UK residents)
- Telephone Numbers
- Bank or Card Details
- Website pages viewed and emails opened and clicked
- CCTV images
- Personal Dietary Requirements
- Next of Kin information
The purpose for data collection and reasons for processing
St James (Nottingham) Ltd will process personal information:
- For the purpose of facilitating a contractual agreement between the hotel and the customer/comsumer
- For the purpose of direct marketing under opt-in consent to include but not limited to special offers, promotions and news
- To process payments
- To conduct customer feedback surveys and questionnaires To maintain hotel security
- To ensure dietary requirements are catered for
Protection of information
St James (Nottingham) Ltd have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, St James (Nottingham) Ltd limit access to your personal data to those employees and third parties who have a legitimate need to know.
St James (Nottingham) Ltd have established procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if legally required to do so.
Your personally identifiable information is kept secure. Only authorised employees, agents and contractors (who have agreed to keep information secure and confidential) have access to this information. All emails and newsletters from this site allow you to opt out of further mailings.
Privacy Contact Information
To adhere to UK taxation law St James (Nottingham) Ltd is required to keep basic personal information including contact, identity, financial and transaction data for a period of six year plus current year after the individual ceases being a customer of the business.
Data collected under consent will be used until consent is withdrawn or if it is no longer useful for the purpose for which it was collected.
This does not affect your rights as a data subject.
Your personal data right
St James (Nottingham) Ltd are committed to respecting and protecting your data subject rights. These rights include but are not limited to:
The right of access: at any time, you can ask for a copy of your personal information. St James (Nottingham) Ltd will respond with whether data is held or not. If data is held then a copy of the
information will be offered to you.
The right of rectification: allows you to submit changes to your records as and when you require.
The right of erasure: if you request your data to be erased, and there is no other lawful basis to keep your data, then it will be removed.
The right to restrict processing: as an alternative to the right of erasure you have the right to restrict St James (Nottingham) Ltd from processing your personal data where you have a particular reason for this restriction.
The right to data portability: gives you the right to receive the personal data you have consented to supplying to St James (Nottingham) Ltd in a structured, machine readable format.
The right to object: you have the right to object to St James (Nottingham) Ltd processing your personal data for direct marketing purposed at any time. St James (Nottingham) Ltd will give you the opportunity to unsubscribe on all direct marketing emails.
If you would like to exercise your data subject rights including any of the rights detailed above please contact the Data Protection Officer – contact details are contained at the end of this policy.
Sharing your personal information
St James (Nottingham) Ltd may share information with government agencies or other companies assisting in fraud prevention or investigation. St James (Nottingham) Ltd may do so when: (1) permitted or required by law; or, (2) trying to protect against or prevent actual or potential fraud or unauthorized transactions; or, (3) investigating fraud which has already taken place. The information is not provided to these companies for marketing purposes.
St James (Nottingham) Ltd may share your personal information with Classic British Hotels for the purposes of direct marketing and customer profiling.
Third party websites/business providers
St James (Nottingham) Ltd frequently works with third party websites/business providers for commercial purposes. St James (Nottingham) Ltd is committed to ensuring these third party websites/business providers are compliant with the General Data Protection Regulation (GDPR) and have the appropriate privacy policies in place.
The website may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the Site, and understanding how visitors use the Site. Cookies can also help customize the Site for visitors. Personal information cannot be collected via cookies and other tracking technology, however, if you previously provided personally identifiable information, cookies may be tied to such information. Aggregate cookie and tracking information may be shared with third parties.
If you would prefer to restrict, block or delete cookies from St James (Nottingham) Ltd, you can use your browser to do this. Each browser is different so check the ‘Help’ menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies we cannot guarantee the performance of our websites and some features may not work as expected.
St James (Nottingham) Ltd has the right to update the information contained within this policy at any time without prior notice. When updated are made the date at the end of this policy will be amended. You are encouraged to frequently check this page for updated to stay informed. You acknowledge that it is your responsibility to review this policy to make yourself aware of amendments.
If you have any questions, queries or complaints regarding the information contained within this policy or the manner in which St James (Nottingham) Ltd collects and/or processed your personal data please make contact in writing to:
St James (Nottingham) Ltd
St James Hotel
1 Rutland Street
Data Protection Officer
Last Updated: 22 May 2018