Who We Are
This Notice explains the personal information we retain which is collected, handled and processed by Hambleton Hall Limited at its registered office: The Old Hall, Market Overton, Oakham, Rutland, LE15 7PL
Registered in England No.1125993 (“Hambleton Hall” or “We”) as Data Controller.
We are committed to protecting your data and respecting your privacy.
We aim to be clear when we collect your data and not do anything you wouldn’t reasonably expect with your data. We handle and process data in accordance with the General Data Protection Regulation 2018 (“GDPR”) and the Privacy and Electronic Communications Regulations 2003.
Information We May Collect
You give us information when you make an enquiry with us; use or register on the website ; forward an item to a friend; purchase an item; fill out a survey or other form; request us to provide you with information; enter a competition or prize draw or engage in a promotion; post information to public areas of the website ; book a room or an event; dining reservation; or buy tickets to an organised event at Hambleton Hall in person, by phone or email; online via our website ; update preferences on our website ; contact us via email, mobile messaging or when posting on or communicating via our social medial platforms; or by communicating with us via any other channel.
The information we may collect, hold and process about you, provided by you, may include:
- Email address
- Telephone number(s)
- Bank details and/or payment details
- Dietary requirements
- Health and genetic information
- Billing information
- Vehicle registration number, make and model
- Details of other people within your group booking including name and age
- Purchase/transaction history
- Encrypted record of login password
- Your preference for how we communicate with you about our activities
- IP address
- Information that is available publicly, including social media username if you interact with us through social media channels
- Record of accidents and treatment received
We maintain a record of your transaction history, but we never store your payment card number, although we may keep a record of the last four digits only to help us identify transactions.
We keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you relevant information. We may track subsequent online actions such as room, dinner bookings and related purchases and enquiries.
With regard to each of your visits to our website, we collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer/device to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
We may monitor or record calls for security and training purposes and to improve the quality of our services.
How We Use Your Information
The above information is used to:
- provide our services to you and enable us to process, administer and manage your booking, orders, contracts, accounts and enquiries;
- create an account so that we understand and respect your preferences;
- establish dietary requirements and provide suitable catering options for you and your guests (where applicable);
- inform you about changes to our products and services or new products and services, event offers and promotions;
- communicate information about any agreement you may have with us or have enquired about;
- inform you about offers and promotions that may be of interest to you;
- improve the services we offer you
- keep a record of your relationship with us and how you prefer to be contacted;
- analyse your personal information to create a profile of your interests and preferences so we can contact you with information most relevant to you;
- to ensure that content from our website is presented in the most effective manner for you and for your computer;
- to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to administer prize draws and competitions you have entered;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to resolve an enquiry or progress a complaint;
- comply with legal and regulatory obligations placed on the Hambleton Hall.
We use profiling and segmentation to ensure communications are relevant to you. For this purpose we may analyse geographic, demographic and other information relating to you to enable us to understand your preferences.
Hambleton Hall and/or its media partners may from time to time create images and/or audio-visual footages of you and your guests at Hambleton Hall. Hambleton Hall is the owner of all rights in such footages and shall be entitled to use such footage on any media platform for the following purposes:
- Promotional, marketing and commercial purposes; and
- Training for Hambleton Hall employees and third parties who work with Hambleton Hall.
How We Keep Your Information Safe
All personal information we hold is stored on our secure servers in the UK.
Access to our information is strictly controlled.
We may disclose your details to police, regulatory bodies or legal advisors if so required.
DISCLOSURE OF YOUR INFORMATION
Any third party providers used by us to fulfil our contractual obligations to you will only collect, use, store and disclose your information in the manner and to the extent necessary for them to provide their services to us. We have agreements in place with each third party to ensure that your information is kept securely, is not used for any other purpose and is deleted when no longer required.
Such third party providers may include:
- Room booking, event booking or table reservation system provider;
- Gift vouchers provider;
- Email distribution service;
- Mailing house;
- Booking and reservation agents and systems;
- Website provider;
- IT companies who support our Website and other business services;
- Analytical or search engine provider to assist us with the improvement or optimisation of our Website
- Credit reference agency for the purpose of assessing your credit score where this is a condition of us entering into a contract with you;
We never sell personal information to third parties.
Our website may, from time to time, contain links to and from the websites of our commercial partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, advertisers and affiliates. If you follow a link to any of these website s, please note that these website s have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
What Is The Legal Basis For Processing The Information
The legal basis for collecting and processing your data may be:
- Consent – you may have given us your consent to use your data for example when you tick a box to receive marketing emails, offers and newsletters. You can withdraw your consent at any time.
- Contractual obligation – to enter into a contract with us we need your personal information (including financial information) to process and fulfil the contract for example a room booking or dinner reservation.
- Legal obligation – if required by law to process personal information for example to comply with health and safety and equality obligations or to provide information to the police to prevent fraud or criminal activity.
- Legitimate interest – for a genuine business reason that does not override your rights, freedom or interests for example administrative purposes, or using your purchase history to send you personalised offers.
You have the right at any time to ask for a copy of the information we hold about you and confirmation of how it is being processed. You will be required to verify your identity when making a request. If you would like to make a request for information please:
Email – email@example.com or send a request in writing to The Data Protection Manager, Hambleton Hall, Hambleton, Oakham, Rutland LE15 8TH
You also have the right to:
- request that we correct inaccuraciesto your information or complete your information if incomplete. You must notify us of any updates, amendments or corrections to previously collected personal information either via the preference centre or via email to firstname.lastname@example.org. We require you to keep the personal information we hold on you up to date and accurate;
- request that we delete some or all of your personal informationfor example if it is no longer necessary for us to hold it for the purpose it was provided and we have no legal basis to retain it;
- request that we stop or limit the processingof your information where you think the information we hold is inaccurate (until the accuracy is proved or updated); if you have objected to the processing (when it was necessary for legitimate interests); if you have consented to the use of it; or if it is no longer necessary for us to hold it for the purpose it was provided and we have no legal basis to retain it;
- (in certain circumstances) move, copy or transfer your personal informationto another organisation or to yourself. This applies only to personal information you have provided us with and is being processed by us with your consent or for performance of a contract and is processed automatically;
- (in certain circumstances) you have the right to object to certain types of processingof your personal information when it is based on legitimate interests, when it is processed for direct marketing including profiling, or when it is processed for the purpose of statistics.
How Long Do We Keep Your Information?
Your personal information will be retained for no longer than is necessary to fulfil the purpose for which we collected it or as required to satisfy any legal or reporting obligation or to resolve a dispute or enforce an agreement.
When we no longer require your personal information, we will dispose of it in line with approved company processes. If personal data is retained for legal or reporting obligations it will be archived and reduced to the minimum information required.
If you have provided us with your consent to process your personal information you have the right to withdraw this at any time. In order to do so you should contact us by emailing email@example.com
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us by contacting:
The Data Protection Manager
You also have the right to contact the Information Commissioners Office at https:\\ico.org.uk\concerns\
Changes To This Notice
Our policies are constantly under review and this Privacy Notice may be changed by us at any time. Any changes shall be posted on the website (hambletonhall.stoapp.co.uk) and we recommend that you check regularly to review the latest version.