For the purposes of the Data Protection Act 1998, Future Inns UK Ltd ('we' or 'us') is the 'data controller' (i.e. the company who is responsible for, and controls the processing of, your personal data).
We will obtain personal data about you (such as your name, address and payment details) whenever you complete an online form, register your details on the website or otherwise correspond with us.
For example, we will obtain your personal data when you register to use this website, send us feedback, make an enquiry or contact us for any reason, sign up to a service, enter a competition or purchase services. We may also obtain sensitive personal data about you if you volunteer it during the completion of an online form. If you volunteer such information, you will be consenting to our processing it for (where relevant) the purposes of adapting our services (for example, regarding accessibility or dietary requirements).
Occasionally we may receive information about you from other sources (such as credit reference agencies), which we will add to the information we already hold about you in order to help us provide our services and improve and personalise those services.
We will use your personal data for the purposes described in the data protection notice that was given to you at the time your data were obtained. These purposes include:
• to help us identify you and any accounts you hold with us
• research, statistical analysis and behavioural analysis
• customer profiling and analysing your purchasing preferences
• marketing—see 'Marketing and opting out', below
• fraud prevention and detection
• billing and booking fulfilment
• credit scoring and credit checking—see 'Credit checking', below
• customising this website and its content to your particular preferences
• to notify you of any changes to this website or to our services that may affect you
• security vetting
• improving our services
• where relevant, the operation of promotions or competitions
If you have given permission, we may contact you by mail, telephone, SMS, text/picture/video message or email about products, services, promotions and special offers that may be of interest to you. If you prefer not to receive any direct marketing communications from us, you can opt out at any time. See further 'Your rights', below.
You will not receive any unsolicited emails or correspondence if you have not provided us with prior permission. From time to time we may use email as a way to keep in touch with our guests; however, we do not send “spam” (unsolicited marketing e-mail). If you agree to receive email communications from us, every email message we send to you will include an email address to which you can respond. If at any time you decide you do not want to receive marketing emails from us, simply let us know and we will remove your name and email address from our mailing list.
We may disclose your personal data to:
• other companies within our group
• our agents and service providers
• credit reference agents—see 'Credit checking', below
• law enforcement agencies in connection with any investigation to help prevent unlawful activity
Except as specified above, we will not provide your personal data to third parties without your prior consent, as we respect the privacy and confidentiality of our website users.
We will use technical and organisational measures to safeguard your personal data, for example:
• access to your account is controlled by a password and username that are unique to you
• we store your personal data on secure servers
• payment details are encrypted using SSL technology
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.
We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance, training, fraud prevention and compliance.
To enable us and other companies in our group to make credit decisions about you and members of your household and for fraud prevention and money laundering purposes, we may search the files of credit reference and fraud prevention agencies (who will record the search). We may disclose information about how you conduct your account to such agencies and your information may be linked to records relating to other people living at the same address with whom you are financially linked. Other credit grantors may use this information to make credit decisions about you and the people with whom you are financially associated, as well as for fraud prevention, debtor tracing and money laundering purposes. If you provide false or inaccurate information and we suspect fraud, we will record this.
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
• give consent on his/her behalf to the processing of his/her personal data
• receive on his/her behalf any data protection notices
• give consent to the transfer of his/her personal data abroad, and
• give consent to the processing of his/her sensitive personal data.
You have the right, subject to the payment of a small fee (currently £10), to request access to personal data that we may process about you. If you wish to exercise this right, you should:
• put your request in writing;
• include proof of your identity and address (eg a copy of your driving licence or passport, and a recent utility or credit card bill);
• attach a cheque in the amount of £10
• specify the personal data you want access to, including any account or reference numbers where applicable.
You have the right to require us to correct any inaccuracies in your data free of charge. If you wish to exercise this right, you should:
• put your request in writing;
• provide us with enough information to identify you (eg account number, username, registration details); and
• specify the information that is incorrect and what it should be replaced with.
You also have the right to ask us to stop processing your personal data for direct marketing purposes. If you wish to exercise this right, you should:
• put your request in writing (an email sent to firstname.lastname@example.org with a header that says 'Unsubscribe' is acceptable),
• provide us with enough information to identify you (eg name, account number, username, registration details), and
• if your objection is not to direct marketing in general, but to direct marketing by a particular channel (eg email or telephone), please specify the channel you are objecting to.
We welcome your feedback and questions. If you wish to contact us, you can write to us at our registered office or call us on 02920 487111. Our registered office is Hemingway Road, Cardiff, CF10 4AU.