Mount Everest Restaurant Studley (“We”) respect your data and are committed to protecting and respecting your privacy.
Mount Everest Restaurant owns and runs:
We are committed to protecting your data and privacy in accordance with our obligations as established under government data protection legislation, the EU General Data Protection Regulation and related legislation.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Information we may collect
By submitting your information on any of our
websites you consent to the use of that information as set out in this policy.
However, if you choose not to share your information some areas of our websites
may not be accessible or useable.
You are in control of what information we collect about you.
We collect data and information in the following ways:
Information you provide
Information you actively provide when completing our online booking form.
When you book a table in the restaurant, we will ask for your personal information in order to for us to process your request. This information is including your first name, last name, and contact information including email and telephone numbers.
If you need to provide us with information about health or dietary requirements for your booking (Sensitive data) which may also relate to your religious beliefs we will only use this as required to ensure your safety and satisfaction. We only request this information where this is required and relevant to your booking.
If you contact us by post, email or telephone, we may keep a record of any correspondence.
Marketing and Communications data, such as your name and email address, if you choose to opt-in to receive marketing material from us.
Contact and Identity data should you choose to enter into any competitions or prize-draws.
Automatically collected Information
We automatically collect analytics information such
as tracking pages you visit on our sites.
This information is used to determine how visitors use our site so we can improve and make the site easier to use. Automatically collected data may include:
We use ‘cookies’ to enhance your experience on our websites. Cookies are small data files that are sent to your browser and stored temporarily on your computer to help retain the information that you have entered whilst you browse our sites.
A cookie will typically contain the name of the domain from which the cookie has come and the ‘lifetime’ of the cookie. Cookies provide non-personal information such as browser settings to make site access adjustments for you and all our visitors.
Specific cookies are sent to your browser to enable the use of the site. For example, remembering your booking details.
Most browsers automatically accept cookies but you can both delete existing cookies from your browser and, by editing your browser options, choose not to receive cookies in future.
Please note that if you choose not to receive cookies then some areas of our websites may fail to function as intended so degrading your user experience.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns is anonymous. Your IP address may also be used to diagnose problems with our server, monitor visitor traffic patterns and site usage to help us develop and improve our sites further.
How we use your personal data
We will only ever use your data when legally permitted. The most common uses of your personal data are:
When we need to perform the contract between us, e.g. emailing you a confirmation of your booking or when a situation has arisen that could directly impact the delivery of a booked table.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.
When you have given us consent to process your personal data in order to send marketing information to you.
We will use the information you enter onto our websites for administration purposes and any other purposes made clear in the data entry forms.
If you have chosen not to opt-in to receive marketing material from us, or since opting in have decided to opt-out, we will only contact you regarding any bookings you may have made and when we consider it to be in our legitimate interest to contact you about said products.
You can ask us to stop sending you marketing messages at any time by following the opt-out (unsubscribe) links on any marketing message sent to you. Please note that if you opt-out of receiving our marketing communications we may still store data relating to you and any purchases you have made and may contact you directly about your bookings.
Third Parties and disclosure of your personal data
Disclosure of your data to others may be necessary to ensure the smooth provision to you of the services and information you request.
We will not sell your data or share personal data with third party organisations for marketing purposes, but we do use third parties to outsource functions when required. In such cases we will ensure the safe and confidential processing of personal data at all times. We may also disclose personal information where required or otherwise permitted by law.
We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
If you visit our website, you may subsequently see online advertisements from us whilst browsing other websites.
If you are active on Social Media you may also see our adverts on your Social Media channels.
Children under the age of 16
We do not intend to collect information from and market to children under the age of 16 years. Children under the age of 16 years will not be able to participate in competitions nor sign up to receive marketing communications from us. If you sign up to receive marketing materials from us we will proceed on the basis that you are over 16.
When you’re at The Mount Everest Restaurant your
image may be captured.
We may have CCTV in operation. CCTV footage is routinely only stored for a limited time; we will only retain footage for longer than this is if it relates to an ongoing investigation.
If you consent to having your photo taken and used for marketing or PR purposes we will hold your name, image and age (if applicable) on file for future re-use as well as a copy of a photo permission form by which you will have given written consent that we may use the image for marketing purposes.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In some circumstances you can ask us to delete your data: see below for further information.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Your Rights to your data
Under the EU General Data Protection Regulation you have the right to request a copy of the personal information we hold about you. You also have the right to request that we erase any personal information we hold, where we have no compelling reason to continue processing this data.
A reminder of all your rights under GDPR:
Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Right to withdraw consent.
If you wish to exercise any of the rights set out above, please email us at email@example.com
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you (two forms of identification) to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Changes to this policy
Because we are constantly improving our site there may be developments in how we use your data. All such developments will be promptly notified to you in this policy.
If you have any queries regarding this policy, the use of your data or what data we might hold on you please feel free to get in touch by contacting the Data Controller c/o Mount Everest Restaurant Studley on firstname.lastname@example.org
Policy updated: 15th December 2019