Background
The Gallivant is committed to ensuring your personal information is protected. This privacy notice describes how The Gallivant, the data controller, collects, uses and protects your information. The Gallivant is registered with the Information Commissioner’s Office (ICO) and our registration number is 06966352.
How we collect your information
The information we hold about you comes from the way you engage with us such as if you enquire about membership or make a reservation for a room, a table in our restaurant, our spa or one of our classes or events. We collect information about you online through our website, via email or over the phone with you.
We may also collect details of your visits to our website including traffic data, location data, other communications data and the resources that you access.
The type of information we process
The information we process includes:
- Personal information: Your name, address, contact telephone numbers, email addresses and where relevant DoB, occupation and Instagram handle.
- Financial Information: Your card number, expiry data and security code.
- Transaction history: A history of all the products and services you have purchased from us.
How we use your information
We lawfully process your information for the following reasons:
- For fulfilling the contract between us by supplying the service of hotel that you have ordered.
- For fulfilling the contract between us by processing your payment card.
- For the legitimate interest of monitoring your transactions as it is necessary for us to monitor all transaction to best understand our customers and our services.
- For the legitimate interest of direct marketing. We will use your information for the legitimate interest of sending you information about other products and services, but we will always offer you the right to opt-out of future communications. We do use third parties to assist us in this lawful processing.
Who we will share your information with
We will not sell, share or swap your information with any organisation or third party. We do however share your information with:
- Our suppliers who manage our IT, web services and marketing services.
Our suppliers are bound by UK privacy law and the terms of the contracts we have with them which include the mandatory GDPR terms and clauses.
Storing your information
Your personal information will be stored on systems owned or operated by The Gallivant or those of our specific suppliers and will only be stored inside the European Economic Area (EEA), or a country approved by the EU. In particular:
- For the purposes of marketing your email is stored on the MailChimp platform in the USA.
- Financial information is processed by Stripe.
- Transaction history is stored within the applications Mews, ResDiary and Trybe.
Retention
We will retain your personal information in accordance with legal and regulatory requirements. Where you have not made purchase of any of our service, we will only retain your information while we are actively engaged with you. Where we have had no interaction with you for a period of three-years we will delete your data.
Where you have purchased or used our service, we retain your personal information for 7 years to comply with UK Tax requirements.
How you can access your information
You have the right to request access to the information we hold about you. To make a request for your personal information, please contact the Privacy Manager at marketing@thegallivant.co.uk
Your Rights
You have the right to:
- object to processing of personal data that is likely to cause, or is causing, damage or distress;
- have inaccurate personal data rectified;
- request your information to be deleted or destroyed and if we can we will but sometimes we must maintain some records for legal reasons.
If you are not happy how we are using your information or how we have responded to your request, you have the right to complain to the Information Commissioner’s Office at www.ico.org.co.uk.
Use of cookies
We use cookies and similar technologies on our website. Cookies are small text files that may be stored on your computer or mobile device when you visit our website. Here is a list of cookies that we use. We’ve listed them here so that you can choose if you want to opt-out of cookies or not.
ai_session. This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique anonymous session identifier cookie. The main purpose of this cookie is performance.
ai_user. This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique user identifier cookie enabling counting of the number of users accessing the site over time
_ga cookie – used to identify unique users and expires after two years.
_gat cookie – used to throttle the request rate, and it expires after one minute.
_gid: registers a unique ID that is used to generate statistical data on how the visitor uses the website. This cookie expires after 1 day. collect: is used to send data to Google Analytics about the visitor’s device and behaviour.
How we will tell you about future changes to this privacy notice
Any changes we make to our privacy notice will be put on our website. Please check for updates from time to time so you are always fully aware of what information is collected and how it is used.
How to contact us
If you have any questions or concerns about our use of your personal information, please contact the Privacy Manager at marketing@thegallivant.co.uk.
