Vale House is a bed and breakfast, event planning and catering company. The purpose of this Privacy Policy Notice is to explain to you how we control, process, handle and protect your personal information when you use our accommodation, event planning and catering services.
What information may we collect about you?
​
-
Contact details. Your name and surname, Email address, telephone number.
-
Personal information such as your address, details associated with planning your event (if applicable) or your stay at our bed and breakfast.
-
Pictures/videos: content to include catering, venue and any aspect of event planning and delivery subject to your agreement where applicable.
-
We may also monitor, record, store and use communications we have with you to improve our quality of service and to confirm any instructions you give us for operational compliance purposes.
-
We process your information as the law and any contract with you requires. We will continue to process your information this way until you withdraw consent or it is determined your consent no longer exists.
-
We may use your information in some or all of the following ways:
-
To allow us to enhance, modify, personalise or otherwise improve our services and communications for the benefit of our customers.
-
To determine the effectiveness of advertising and marketing campaigns.
-
To notify customers of future offers and related activity from ourselves and selected trusted partners.
Whenever we process data for these purposes we will ensure that we always consider your personal data rights, hold them in the highest regard and take them into account in our decision making.
​
How do we collect your data?
​
We collect information when you complete a form on our site. We may also collect your information in person, via email, phone, Messenger, WhatsApp, social media (in particular when you first make contact with us) and through different third party services that provide us with the platform to securely collect and store the information we need to provide our service.
​
If you contact us, we may keep a record of that correspondence.
​
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
​
Where will we store your data?
​
In order to provide our service, we may also store data on a mobile phone (password protected), hard drive (password protected and stored in a locked draw) and laptop (with password protection).
​
By nature of the third party providers we use, the data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
​
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use procedures and security features to try to prevent unauthorised access.
​
Who may we share your data with?
​
We may use and share your information with third parties to enable us to comply with any legal or regulatory requirements; to protect or enforce our rights or the rights of any third party such as by analysing activity on our network to help block unauthorised or illegitimate content, publication of, or access to it; and for the purpose of safeguarding an individual’s vital interests, national security, responding to statutory obligations or requests from the courts and enforcement authorities.
​
Access to your information and correction
​
Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the Contract lawful bases, which means we shall continue to process your information until the contract between us ends or is terminated under any contract terms. If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
​
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email: mandy@valehouse.net. We may make a small charge for this service.
​
How long we keep your information?
​
We retain your information for up to 7 years following the end of your agreement with us.
​
Your Individual Rights
​
Under the GDPR your rights are as follows:
​
• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object; and
• the right not to be subject to automated decision-making including profiling.
​
If you want to know more about your Individual Rights, you can visit the ICO website (www.ico.org.uk).
Complaints
​
If you wish to make a complaint about how we use your information, please contact Mandy Browse using mandy@valehouse.net and we will do our best to help. If you are still unhappy, you can contact the Information Commissioner’s Office via their website.
​
Email Marking and Mailing List Subscription
​
We use the consent lawful basis for anyone subscribing to the Vale House newsletter or marketing mailing list. We only collect certain data about you, listed below. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users. Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign. Any email marketing messages we send are in accordance with the GDPR and the The Privacy and Electronic Communications Regulations (PECR).
​
We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences. You can also contact the EMS provider.
​
We may hold the following information about you within our EMS system:
​
• Email address
• IP address
• Name and surname
• Phone number
Other websites
​
This policy only applies to our site. If you leave our site via a link or otherwise, you will be subject to the policy of that website provider. We have no control over that policy or the terms of the website and you should check their policy before continuing to access the site.
​
Changes to our privacy policy
​
We keep our privacy policy under regular review and we will place any updates on this web page.
​
Contacting Vale House
​
Any queries or comments about this privacy and cookies notice, for requests of copies of the information we hold about you, or if you wish to have a copy of your information, restrict or erase your records, please email Mandy Browse using mandy@valehouse.net
​
This privacy policy was last updated on 20 September 2018.