Website and data collection policy
About this policy
On The Waterfront Exeter and South Devon Hospitality Limited are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible way. This policy outlines the situations where we may obtain personal data about you, the type of information we collect, how your information is used, stored and retained, and your rights as a ‘data subject’ in connection with the personal data that we hold.
Please ensure you understand this policy in its entirety and take your time to read it.
Definition of Personal Data
Personal Data means any data that relates to an identifiable person who can be directly/indirectly identified from that data. In this case, it means personal data that you give to us via our site, by email, over the telephone or in person when you visit our restaurants. It may also include personal data collected by automated technology when you interact with our website.
By providing your personal data, you agree that we can use your personal data in accordance with this policy.
Who are we?
On The Waterfront is a restaurant based in Exeter, trading under the name On The Waterfront.
We are part of a group of restaurants known under South Devon Hospitality Limited, which also includes The Kents, Torquay.
Our registered address is: 7a Dartmouth Road, Paignton, Devon, England, TQ4 5AA
How do we collect information from you?
We collect information from you when you:
- use our websites; ( www.waterfrontexeter.co.uk / www.thekentstorquay.co.uk )
- make a booking or an enquiry;
- visit one of our restaurants;
- express an interest in working with us; and/or
- sign up to our marking emails.
What type of information is collected from you?
Bookings & Enquiries
You may be asked to submit personal information about yourself when you make a booking or submit an enquiry. We will collect this information so we can fulfil your booking request and you may dine at our venue.
When you make a booking, we may collect information such as:
- title
- name
- e-mail address (used for booking confirmation and post-dining feedback emails)
- home or work address
- billing information taken for deposits, ticketing, or holding credit card information for use in the case of no-shows (where applicable)
- telephone number
- company name
- dietary requests (preferences, allergies etc)
- marketing preferences (whether you opt-in or opt-out)
Visiting our Restaurants
In addition to the above, when you dine at On The Waterfront and The Kent’s, we may collect information such as:
- marketing responses (where applicable)
- survey responses
- current and past restaurant reservation details
Websites
When you access our sites, there is “Device Information” about your computer hardware and software that is automatically collected by South Devon Hospitality Limited. This information can include:
- device type (e.g. mobile, computer, laptop, tablet)
- cookies
- operating system
- IP address
- browser type
- browser information (e.g., type, language, and history)
- domain names
- access times
- settings
- referring website addresses
- other data about your device to provide the services as otherwise described in this policy.
Location information:
If you use our website, we may receive your generic location (such as city or neighbourhood).
Careers:
You may submit your CV if you’re interested in working for us to info@waterfrontexeter.co.uk or info@thekentstorquay.co.uk. This information may include:
- personal details
- employment details
- education
- salary history
- other relevant details
We will use this information to assess your application. We may also keep it in our records for future reference. Please get in contact if you would no longer like us to hold your records at info@waterfrontexeter.co.uk.
How is your information used?
Our use of your personal data will always have a lawful basis, either because it is necessary to complete a booking, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests.
Our ‘legitimate interests’ includes our wish to better understand your needs and thereby provide you with a better service. This means that we may wish to use your information for the following reasons:
- Internal record keeping.
- Send you service emails (booking confirmation and post-dining feedback).
- Improve our products and services.
- Provide you with a high quality and more personalised dining experience.
- Send marketing communications if you have opted in to receive them.
- To customise our website according to your interests.
Who has access to your information?
We will not sell, distribute, or lease your personal information to third parties. Any personal information we request from you will be safeguarded under current legislation.
We will only share your information with companies if necessary to deliver services on our behalf. For example service providers (e.g. ResDiary for the provision of online bookings), third-party payment processors, and other third parties to provide our Sites and fulfil your requests, and as otherwise consented to by you or as permitted by applicable law.
Third parties (including Flywheel and BigWave media, our website host) whose content appears on our Site may use third-party Cookies, as detailed below. Please refer to ‘Use of Cookies’ for more information on controlling Cookies. Please note that we do not control the activities of such third parties, nor the data they collect and use and advise you to check the privacy policies of any such third parties.
You may choose to restrict the collection or use of your personal information at any point. Please refer to the Your Choices section of this Privacy Policy for details.
How and where do we store data?
We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Typically this means that we will only keep your personal data for a maximum of 18 months in order to use it as described in this privacy policy, and/or for as long as we have your permission to keep it. The exception to this is if we hold a contract with yourselves which necessitates a longer retention period, the length of which will be stipulated within your contract.
For reservations taken through ResDiary software, your data will only be stored in the UK.
ResDiary data is stored securely in data centres managed by Rackspace.
Other requests such as charity voucher requests, complaints, or lost property may mean we have to store your details within our Dropbox Business account. This is kept privately and securely and is compliant with GDPR.
Security
Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected through our Site. This data is accessible by our password protected booking system.
Profiling
We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. These might be in the form of relationship status, gender, gender and racial or ethnic origin.
Your choices
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not pass your details to any third parties for marketing purposes unless you have expressly permitted us to. Furthermore, you can change your marketing preferences at any time by contacting us by email at info@waterfrontexeter.co.uk
Your rights
You have a right to request a copy of the personal information that South Devon Hospitality Limited holds about you and have any inaccuracies corrected. Any such requests should be made to this email address: info@waterfrontexeter.co.uk.
You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
You have the right to object to our processing of your personal data if you believe that your rights and freedoms outweigh our legitimate interests as described in this Policy. You also have the right to object where we are processing your personal data for direct marketing purposes.
You have the right to request that our processing of your personal data is restricted while you are requesting that it be corrected or erased, or are contesting the lawfulness of our processing.
You have the right to request the transfer of your personal data to you or to a third party.
Use of ‘cookies’
Like many other websites, we use cookies. We use them to help you personalise your online experience.
A cookie is a text file that is placed on your hard disk by a web page server which allows the website to recognise you when you visit. Cookies only collect data about browsing actions and patterns, and do not identify you as an individual.
We may use cookies for the following purposes:
- Authentication, personalisation and security: cookies help us verify your account and device and determine when you log in, so we can make it easier for you to access the services and provide the appropriate experiences and features. We also use cookies to help prevent fraudulent use of login credentials.
- Performance and analytics: cookies help us analyse how the services are being accessed and used, and enable us to track the performance of the services. For example, we use cookies to determine if you viewed a page or opened an email. This helps us provide you with information that you find interesting. We also use cookies to provide insights regarding your End Users and your sites’ performance, such as page views, conversion rates, device information, visitor IP addresses, and referral sites.
- Third Parties: Third Party services may use cookies to help you sign into their services from our services. We also may use third-party cookies, such as Google Analytics, to assist with analysing performance. Any third party cookie usage is governed by the privacy policy of the third party placing the cookie.
- Opting Out: You can set your browser to not accept cookies, but this may limit your ability to use the services.
Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
What happens if our business changes hands?
We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part. The new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.
In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner or controller.
Restaurant groups
We may share your information (such as meal or seating preferences and special occasions) with other restaurants in the same restaurant group. This is to enhance the hospitality experience that we (South Devon Hospitality Limited) provide you when you dine with us (such as, trying to seat you by a window, if you previously expressed a preference for window seating) (“customised service”) and to improve our table and shift planning.
In addition to providing you with more customised service, we may, when permitted by the customer, share your information with our restaurant affiliates to support operations, such as to perform analytics, tailor marketing to you, support a loyalty program that you have chosen to participate in, and improve services.
For more information, please feel free to contact us at: info@waterfrontexeter.co.uk.
Changes to this statement
South Devon Hospitality Limited will occasionally update this Privacy Policy to reflect company and customer feedback. South Devon Hospitality Limited encourages you to periodically review this statement to be informed of how South Devon Hospitality Limited is protecting your information. This policy was last updated in Jan, 2023.
Contact Information
South Devon Hospitality Limited welcomes your comments regarding this Privacy Policy. If you believe that South Devon Hospitality Limited has not adhered to this Privacy Policy, please contact South Devon Hospitality Limited at info@waterfrontexeter.co.uk. We will aim to use commercially reasonable efforts to promptly determine and remedy the problem.
You also have the right to complain to the Information Commissioner. You can do this be contacting the Information Commissioner’s Office directly. Full contact details including a helpline number can be found on the Information Commissioner’s Office website (www.ico.org.uk). This website has further information on your rights and our obligations.