Dog House Margate Ltd respect your right to privacy and comply with obligations under the Data Protection Acts 1988 & 2002 and the EU General Data Protection Regulation 2018 (GDPR).
All references to the client will be referred to as “you”, “your”, “customer” or “client”.
2. Data Controller
Melisa Duhaney-Keown of Dog House Margate Ltd is the Data Controller for all the personal data that you submit.
Contact Name: Melisa Duhaney-Keown
Company Name: Dog House Margate Ltd
Address: 91 Norfolk Road, Margate, Kent, CT9 2HX, UK
Phone: 01843 291078
3. Types of Information Collected
We collect the following types of information:
This is data that identifies you or can be used to identify or contact you, which includes your name, email address and telephone no. Such information is only collected from you if you voluntarily submit it to us.
When you contact us, whether by telephone, through our website or by e-mail, we collect the data you have given to us in order to reply with the information you need.
We record your request and our reply in order to increase the efficiency of our business.
Like most websites, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. This Non-Personal Data comprises information that cannot be used to identify or contact you. Such as user IP addresses where they have been clipped or anonymised, browser and operating system types and other anonymous statistical data involving the use of our website.
This website is not directed towards children and as such we do not seek to collect any personal information from children. If we become aware that personal information from a child under the age of 13 has been collected, we will use all reasonable efforts to delete such information from our records.
4. Purposes for which we hold your Information
We will process any data you provide to us for the following purposes:
- to respond to your comments, queries and support requests.
- to contact you with regard to any matter arising from your stay or booking.
- to keep you informed of any changes to your booking.
- to check that use of our services is in accordance with our terms and conditions.
- for the purposes of security, and prevention and detection of fraud.
- We use the Non-Personal Data gathered from visitors to our website in an aggregate form to get a better understanding of where our visitors come from and to help us better design and organise our website, products and services.
Our legal basis for holding your personal data under GDPR
- We are entitled to use your data as described in point (1) as we are responding to your request and therefore you have given consent to this processing.
- We are entitled to use your data as described in points (2), (3) and (4) as we require to do this as part of our contractual obligations to provide our services.
- We are entitled to use your data as described in points (5) and (6) as the purposes stated are within our legitimate interests.
5. Storage and Management of your Personal Data
The data that we collect in connection with our services is stored on secure servers located in a UK Data Centre, which has 24/7 onsite security.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Cross-Border Data Transfers
When we share your personal information with our partners and service providers (see 7. Disclosure of Information to Third Parties), your personal information may be transferred to and/or made accessible from countries out of the European Economic Area. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission, or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules where our partners or service providers have adopted such internal policies approved by European data protection authorities.
Personal Data Retention Schedule
By law we have to keep basic information about guests and their contact details for a minimum of 6 years for tax purposes.
We only store your information for as long as is necessary for the purpose it was obtained or for any additional purpose we have explained to you. We also implement policies to regularly audit the personal data we hold to ensure we do not retain any personal data for longer than we are entitled to.
6. Security of your Personal Data
We place great importance on the security of all personally identifiable information associated with our customers. We use technical security measures to prevent the loss, misuse, alteration or unauthorized disclosure of information under our control. We use security measures including and not limited to: physical, electronic and managerial procedures to safeguard and secure the information we collect online. All sensitive information is collected through an encrypted connection on our secure server through Secure Sockets Layer (SSL) technology.
Online Payment Processing
We use PayPal as our online payment processing partner who use the most secure up to date encrypted SSL (secure socket layer) when transferring transaction details of your online booking. This means that no information submitted during this process can be examined, used or modified by any unauthorised third parties.
Our website utilises industry-standard Secure Sockets Layer (SSL) technology to allow for the encryption of potentially sensitive information such as your name, address and other critically sensitive information. Information passed between your computer and our website cannot be read in the event someone else intercepts it.
This technology includes the following features:
- Authentication – this assures your browser that your data is being sent to the correct computer server, and that the server is secure.
- Encryption – this encodes the data, so that it cannot be read by anyone other than the secure server.
- Data Integrity – this checks the data being transferred to ensure it has not been altered.
When you access a website secured by an SSL certificate, you will see https:// at the beginning of its URL. Your web browser may also show the connection as secure by displaying a “lock” icon in the address bar.
Website, Email & Server Security
We ensure best to our ability that our systems and servers are protected from hackers, viruses, intruders and other online and offline problems by utilising the latest web security features, along with real-time file scanning for malicious files, a comprehensive firewall and advanced email filters to protect our systems.
7. Disclosure of Information to Third Parties
We share personal information in the following ways:
- Service Providers. We may transfer (or otherwise make available) your personal information to third parties that help us provide our services or provide services on our behalf. For example, we use service providers to authorise and process online payments to host our website and provide our email services. Our service providers are given the information they need to perform their designated functions, and we do not authorise them to use or disclose personal information for their own marketing or other purposes.
- Legal and Compliance Reasons. We may access, preserve and share your information with companies, organizations, governmental entities or individuals outside of our Company if we believe, in good faith, that the law requires us to do so. This may include, but is not limited to, responding to court orders or other legal processes (such as law enforcement requests). We may also access, preserve and share your information as necessary to: (i) establish or exercise our legal rights or defend against any legal claim; (ii) investigate, prevent, or take action regarding suspected fraud or other illegal activities; (iii) prevent death or serious physical harm to any person; or (iv) investigate violations of our Terms & Conditions.
Our legal basis for disclosing your personal data under GDPR
- We are entitled to disclose your data as described in points (1) and (2), as the purposes stated are all within our legitimate interests.
- We are entitled to disclose your data as described in point (3), on the basis that we are legally required to do so.
This website does not store any information that would, on its own, allow us to identify individual users of this service without their permission. Any cookies that may be used by this website are used either solely on a per session basis or to help improve and maintain the website. Cookies are not shared with any third parties. This website uses session cookies to count visits to each webpage and generate statistics. This information helps us improve and maintain our website.
Also known as browser cookies or tracking cookies, cookies are small, often encrypted text files, located in browser directories. They are used by web developers to help users navigate their websites efficiently and perform certain functions.
9. Links to external websites
This website may contain links to external websites. We are not responsible for the privacy policies or content of these sites. When you leave this website, make sure you read the privacy policies of each and every website that collects your personal data.
11. Email marketing messages & subscription
Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “purposes of processing of your personal data” above. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.
Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences otherwise contact our EMS provider.
Our EMS provider is; Mailchimp. We hold the following information about you within our EMS system;
- Email address
- I.P address
- Subscription time & date
- Telephone No.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
- whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you want to opt in for information to be used for direct marketing purposes
- if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by clicking the unsubscribe link in the next email marketing you receive or by writing to the address under the definitions section or by emailing us at firstname.lastname@example.org
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about our products which we think you may find interesting if you tell us that you wish this to happen.
Your Personal Information is protected in the United Kingdom by the Data Protection Act 1998. You have the right to request in writing to receive a copy of the Personal Information held by us, and the source of the Personal Information. Personal data requests are free of charge, unless unfounded and/or excessive, then we may charge a £10 fee for providing the Personal Information to you. Please write to the Administrator Manager at the address above or email email@example.com
If you believe that any information we are holding on you is incorrect or incomplete, please write to the address above or email firstname.lastname@example.org. We will promptly correct any information found to be incorrect.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Disclosures of your personal data
We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 2 above:
- Service providers who provide IT and system administration services.
- Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
- HM Revenue & Customs, regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances.
- PayPal payment processors
- Third parties to whom we may sell, transfer, or merge parts of our business or our assets in the future.
We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
12. Your Rights
You have the right to object to how we use your personal information. You also have the right to see what personal information we hold about you. In addition, you can ask us to correct inaccuracies, delete or restrict personal information or to ask for some of your personal information to be provided to someone else.
Right to Object
You can object to our processing of your personal information. Please contact our Data Controller, providing details of your objection.
Access to Your Personal Information
You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.
You can make a request for access by contacting us at ‘Dog House Margate Ltd, 91 Norfolk Road, Margate, Kent, CT9 2HX, UK‘. Please make all requests for access in writing and provide us with evidence of your identity.
Right to Withdraw Consent
If you have given us your consent to use personal information, you can withdraw your consent at any time and, update your marketing preferences by contacting our Data Controller.
You can ask us to change or complete any inaccurate or incomplete personal information held about you.
You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
Personal Data Breach Notification
We ensure best to our ability that our systems and servers are protected from hackers, viruses, intruders and other online and offline problems, however if we experience a data breach of any kind, where a customer’s data has been compromised, a notification will be sent to all those affected within 72 hours of becoming aware of the breach.
Make a Complaint
You can make a complaint about how we have used your personal information to us, by visiting your local branch, by contacting our Data Controller.
You also have the right to lodge a complaint with a supervisory body. The relevant authority in the UK is the Information Commissioner’s Office at ico.org.uk
We will not make any charge for responding to any request from you to exercise your privacy rights, and we will respond to your requests in accordance with our obligations under data protection law.