At Sukhothai, we take the security and privacy of data very seriously. Please find an overview of our security measures which are continuously maintained and adhered to along with our privacy policy below.
Contents
This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.
We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how Sukhothai Restaurants uses your data. We hope the following sections will answer any questions you have but if not, please do get in touch with us.
It’s likely that we will need to update this privacy policy over time. We will notify you of any significant changes. Please come back and check regularly.
Legal Processing
When do we collect personal data?
What data do we collect?
How do we use your data?
How is the data protected?
Website Users
Customers/Enquirers
Subject Rights
Preventing Direct Marketing
Summary
Contact details
- Legal Processing
Data protection law states there are several legal reasons why a company may collect and process personal data. Sukhothai Restaurants work on the following bases for certain situations:
Legitimate Interest – In cases, we required personal data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Examples might be using postal or email details to send direct marketing information telling you about products and services that we think might interest you.
- When do we collect your personal data?
When you sign up to one of our mailing list.
When you purchase something with us by phone.
When you engage with us on social media.
When you contact us by any means with queries, complaints etc.
When you enter prize draws or competitions.
When you book any kind of appointment with us or book to attend an event, for example a meeting to discuss an opportunity.
When you choose to complete any surveys we send you.
When you comment on or review our products and services.
- What sort of personal data do we collect?
Details of your interactions with us through phone contact, email or online. An example might be notes from conversations with you, complaint details, comments, purchase details and web visits.
Details of your visits to our websites, and which site you came from to ours.
Payment card information. This is not stored for longer than it takes to transact.
Your comments and product reviews.
To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered (all via Google Analytics).
Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
- How and why do we use your personal data?
We want to give you the best possible customer experience. One way to achieve that is to get the richest picture we can of who you are by combining the data we have about you. We then may use this to offer you promotions, products and services that are most likely to interest you.
The data privacy law allows this as part of our legitimate interest in understanding our customers and providing the highest levels of service.
Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.
Here’s how we’ll use your personal data and why:
- To respond to your queries, refund requests and complaints. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
- To process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests. This also helps to protect our customers from fraud.
- With your consent, we will use your personal data, preferences and details of your transactions to keep you informed by email and web about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on.
Of course, you are free to opt out of hearing from us by any of these channels at any time.
To send you relevant, personalised communications by post in relation to updates, offers, services and products. We’ll do this on the basis of our legitimate business interest.
You are free to opt out of hearing from us by post at any time:
- To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, marketing data misuse issues, and legally required information. These service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
- To administer any of our prize draws or competitions which you enter, based on your consent given at the time of entering.
- To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests.
- To comply with our contractual or legal obligations to share data with law enforcement.
- To send you survey and feedback requests to help improve our services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you.
Of course, you are free to opt out of receiving these requests from us at any time by unsubscribing from our email database when you receive an email, or contacting us here: Sukhothai Restaurants Head Office, 4 St. Anne’s Road, Headingley, Leeds, LS6 3NX, or email info@sukhothai.co.uk.
- How is personal data protected?
We will treat your data with the utmost care and take all appropriate steps to protect it.
We regularly monitor our system to identify ways to further strengthen security.
- Website
What specific information is obtained?
Our website does not collect specific, detailed information about you as a visitor to our site.
Where information is gathered, we will inform you of this along with the explanation of why it is required. This information will be for purposes such as responding to an enquiry made and we will ask for this information in order for us to get in touch and provide the relevant information which has been requested from you.
Are any payment details stored?
Payment card details are not stored by Sukhothai Restaurants and are used solely for individual transactions to which they have been provided for. Additionally, customer details are not shared with any 3rd parties.
What information is retained?
Google Analytics is used for the reason of website improvement and understanding how you use it. This information is not shared with anyone other than Sukhothai Restaurant employees.
The personal information we collect via Google Analytics is the following: –
- Browser used (Bing, Chrome, Internet Explorer etc.)
- Location (based on IP address)
- Gender
- Age group
- Site searches
- Device(s) used
- Frequency on Site
- Session duration (time spent on the site)
- Page(s) visited
- Page session duration (time spent on specific page)
We currently use the following companies that may process your personal data through website usage. Facebook, Twitter, LinkedIn and Google.
Our Details
If you need to contact us then please find the relevant details on our website here.
- Customers / Enquirers
We hold information about customers as it is necessary for us to conduct our business activities.
What personal information is held?
The personal information we collect and hold is the following: –
- Full Name
- Email Address
- Phone Number
- Comments Given
This information may be linked together with what has already been gathered (as stated in the “what information is retained?” section) via Google Analytics.
How is this information gathered?
We gather information from comment cards that are given out at the end of a meal. These cards provide us with vital feedback and personal information we obtain through them are collected and often put on to our mailing database, if consent is given on the card. We also gather it from newsletter sign ups and online feedback forms.
Are any payment details stored?
Payment card details are not stored by Sukhothai Restaurants and are used solely for individual transactions to which they have been provided for. Additionally, customer details are not shared with any 3rd parties.
How long will the data be kept for?
For a reasonable period of time after you have stopped being an active customer, we may continue to contact you with information relating to our products and services. We deem a reasonable period of time to be three to five years. After this time, the data we hold will be cleansed.
Who will the data be passed to?
This information will not be passed on to anyone other than authorised employees of Sukhothai Restaurants and relevant third parties.
Your data is never passed on or sold to anyone.
What is the reason for holding/using the information held?
If we have your personal data, you have expressed a legitimate interest in us, and we keep your information for marketing purposes only.
- Data Subject Rights (Subject Access Request, Erasure, Rectification)
You have the right to ask for information we hold for you (Subject Access Request) which will be provided free of charge and if requested, can be presented in a spreadsheet based format.
The data we hold will be corrected when we are notified of errors.
Information we hold for you will no longer be processed if requested to do so.
Information we hold for you will be deleted if requested to do so. It is possible we may contact you at a later date as we will hold no record of you.
You have to right to withdraw consent at any time.
You have the right to stop the use of your personal data for direct marketing through selected or all channels.
You have the right to stop processing your personal data under legitimate interest for individual reasons. We will comply.
- To stop the use of personal data for direct marketing:
Click Unsubscribe Link in any email communication that we send you. We will then stop all future emails.
- Summary
Sukhothai Restaurants incorporating all branches obtains and holds personal data for marketing purposes only. All data Sukhothai Restaurants currently hold has been provided by the individual. Every data subject we currently hold has shown a legitimate interest in one of our restaurants and has opted to receive communication from us. The communication we send is purely marketing material.
- Our details
If you would like to contact us then please write to: Sukhothai Restaurants Head Office, 4 St. Anne’s Road, Headingley, Leeds, LS6 3NX, or email info@sukhothai.co.uk.