Other situations that may require us to share your personal dataWe will share your personal data if we are required to do so by law or by a regulatory authority. For example, we may have to share your personal data for the detection or prevention of crime, fraud or money laundering, or to allow a regulator or ombudsman to investigate a complaint you have submitted to them.We will share your personal data if we need to do so to protect our business interests, such as to enforce the terms of a contract, pursue an overdue debt or defend our legal rights.Complying with DP LawHow do we comply with data protection law?We have adopted the measures that we believe are necessary to comply with the Data Protection Act 2018. We have also adopted the measures that we believe are necessary to comply with the Privacy and Electronic Communications Regulations 2003. This law sets out an additional set of rules that we must follow whenever we communicate with you via any of our websites and apps, or by telephone, fax, email or text message.Protecting your dataWe protect the personal data we hold from theft, accidental loss, corruption and other threats that would have a negative impact on our customers. These protective measures include:Not collecting personal data that we don’t really needDestroying or anonymising personal data securely when we don’t need it any moreOnly allowing our staff and our suppliers to process the personal data they need to carry out their dutiesEncrypting personal data to render it useless to anyone who is not authorised to access itMaking sure that staff are trained on how to handle personal data safely and securely and are fully aware of their personal responsibilitiesBinding our suppliers to the same standards and duties of care that we hold ourselves toProtecting our websites, networks and IT systems from unauthorised access and from threats such as denial of service attacks, viruses and malwareMaking periodic checks that all of these measures are working well and making improvements to them when we think we can do betterMaking sure our processing respects the lawThe ICO have published a helpful guide to lawful bases for the general public which you can find here. The lawful bases we rely on for the processing we do are shown in bold typeface:When you use our websitesWe process this personal data because it is in our legitimate interests to provide a fully-functioning, accessible and useful website to our customers.When we need to verify your ageWe process this data to satisfy our legal obligation to not sell alcohol to anyone under the age of 18. We also do so because it is in our legitimate interests to ensure that we do not market alcohol to anyone under the age of 18.When you make a booking, payment, request a refund, use a loyalty card or gift card, use our Wi-Fi, enter one of our competitions or when we send you service-related communicationsWe process personal data for these core business activities firstly to set up the contract that commits us to providing you with the services you want, and secondly to provide the services to you, as agreedWhen you submit queries, compliments or complaints and when you participate in guest surveysWe receive and respond to lots of different types of enquiry. Sometimes our processing will be necessary for us to meet the terms of the contract we have with you. Otherwise we do so because it is in our legitimate interests to allow you to tell us what you think of our service, what we do well and what you think we can improve onWhen we record CCTV images, emergency audio or telephone calls, when an accident occurs and when we impose a banWe record accidents primarily for compliance with our legal obligations.We use CCTV monitoring, emergency audio recording and record some of the telephone calls we receive because we think this is a proportionate approach to deterring the types of situations that present a safety risk to our guests and staff. If these deterrents are unsuccessful, we may impose a ban on visiting our premises, to protect our customers and staff. This processing is carried out because it is in our legitimate interests to do so.Your rightsData protection laws give you certain rights and as a responsible data controller, we are committed to uphold these for you:InformationYou have the right to know what we want your personal data for, what we will do with it, who we share it with and how long we keep it for. This is the primary reason for publishing this notice.AccessYou have the right to be sent information about the personal data we have about you and a description of what we are using it for. This is also known as a ‘subject access request’, ‘SAR’ or ‘DSAR’.RectificationYou have the right to ask us not to process inaccurate personal data or to ask us to correct it.Erasure (‘right to be forgotten’)You have a right in certain situations to ask us to delete your personal data.Restriction processingYou have a right in certain situations to ask us not to process your personal data.Object to processingYou have the right in certain circumstances to object to the fact that we are processing some of your personal data.PortabilityYou have the right in certain circumstances to ask us to pass some of your personal data to another data controller on your behalf.ComplainYou have a right to lodge a complaint with the UK Information Commissioner’s Office or in some situations, another European Union data protection authority.Withdraw consentMost of the personal data processing we do does not rely on your consent to make it lawful but any consent that we are relying on can be withdrawn by you if you decide you wish to do so.How to control and delete cookiesWe know that people have concerns about cookies, but we believe that the benefit that you and we gain from their proper use is worthwhile. You can delete the cookies – those files are stored as part of your internet browser. If you wish to restrict or block the cookies which are set by this website, or indeed any other website, or if you wish to receive notification of cookie placement requests or decline cookies completely, you can do this through your browser settings.The Help function within your browser should tell you how. Please be aware that declining or denying cookies may prevent you from being able to use the website to its highest capability. If you would like more information about how cookies work, you may wish to visit www.aboutcookies.org which contains comprehensive information on how to disable cookies on a wide variety of browsers. You will also find details on how to delete cookies from your computer as well as more general information about cookies. For information on how to do this on the browser of your mobile device you will need to refer to your manual.Detailed information about all of these rights can be found on the ICO website. For more information, please contact us using the details on the home page.