Effective 25 May 2018
This policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy, the choices you have when it comes to your personal data and how you can contact us.
Who are we
Magic Mushroom is the trading name of Magic Mushroom, a restaurant based in the United Kingdom (EU). Please see: https://www.magicmushroomrestaurant.co.uk/
Data Protection Officer
If you would like to contact us with regard to Data Protection and the use of your details, please email email@example.com
The data we will process on your behalf includes but is not exclusively:
- Your Name
- Telephone number
- Email address
- IP address (for Support reasons)
This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies with all UK national laws and requirements for user privacy.
Our legal basis for processing your personal data
We will process your data securely under the following basis:
- When you show an interest and use our secure web forms to provide your name, address, telephone number, email address so that we can get in touch
- We require this data or in order to carry out the required creative services to you
Legitimate interests pursued by us or third parties we use, are as follows:
- Your details may be shared with other members of Magic Mushroom or 3rd party partners in order to provide you with further information. These details are not shared furthermore except merely held for security or legal reasons relating to the service being provided.
|Third Party||Country||Safeguards in place to protect your Personal data||Retrieve a copy of your safeguards here|
|Microsoft 365||EU||Encryption and Password Policies||https://privacy.microsoft.com/en-us|
|Wufoo||US||Encryption and Password Policies||https://www.surveymonkey.com/mp/legal/privacy-policy/|
|US||Self-certified compliance with EU-U.S. Privacy Shield||https://policies.google.com/privacy?hl=en-GB&gl=uk|
|MailChimp||US||Certified compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework||https://mailchimp.com/legal/privacy/|
In the event that you wish to make a complaint about how your personal data is being processed by Magic Mushroom (or its third parties), please send your complaints to firstname.lastname@example.org. In addition, you have the right to lodge a complaint directly with the supervisory authority which is the ICO (https://www.ico.org.uk/).
Specific Online Privacy Statement
How we use your information online
What are cookies?
Cookies are small files saved to the user’s computer’s hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
We use anonymous session cookies (short-term cookies that disappear when you close your browser) to help you navigate the website and make the most of the features. If you log into the website, application or a course as a registered user, your session cookie will also contain your user ID so that we can check which services you are allowed to access.
Should users wish to deny the use and saving of cookies from this website onto their computer’s hard drive, they should take necessary steps within their web browser’s security settings to block all cookies from this website and its external serving vendors.
What personal information does Magic Mushroom collect about you?
Whilst using our website or services, you may be required to provide personal information (name, address, email, telephone number). We will use this information to administer our website, applications, client databases and marketing material. We will ensure that all personal information supplied is held securely in accordance with the General Data Protection Regulation (EU) 2016/679, as adopted into law of the United Kingdom in the Data Protection Act 2018. Further, by providing telephone, and email details, you consent to Magic Mushroom contacting you using that method. You have the right at any time to request a copy of the personal information we hold on you. Should you wish to receive a copy of this, or would like to be removed from our database, please contact us at email@example.com.
Magic Mushroom will process data in line with GDPR guidelines and the requirement for legal and accounting records.
Why do Magic Mushroom need to collect and store personal data?
In order for us to contact you and provide you any level of service required, we need to collect personal data for correspondence purposes. In any event, we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy.
In terms of being contacted for marketing purposes Magic Mushroom would contact you for additional consent, unless you have formerly ticked the consent option on our contact form.
Will Magic Mushroom share my personal data with anyone else?
We may pass your personal data on to third-party service providers contracted to Magic Mushroom in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to fulfil the service they provide you on our behalf. When they no longer need your data to fulfil this service, they will dispose of the details in line with Magic Mushroom’s procedures.
How will Magic Mushroom use the data it collects about me?
Magic Mushroom collects information in two possible ways:
a. When you directly give it to us (“Directly Provided Data”)
When you sign up to our website or communicate with us, you may choose to voluntarily give us certain information – for example, by filling in text boxes or completing registration forms. All this information requires a direct action by you at that time in order for us to receive it.
b. When you give us permission to obtain from other accounts (“User Authorised Data”)
Depending on your settings or the privacy policies for other online services, you may give us permission to obtain information from your account with those other services. For example, this can be via social media or by choosing to send us your location data when accessing our website from your smartphone.
How long do we keep your data for?
Magic Mushroom will not retain your personal information longer than necessary. We will hold onto the information you provide either while your account is in existence, or as needed to be able to provide the Services to you, or (in the case of any contact you may have with our team) for as long as is necessary to provide support-related reporting and trend analysis only.
If legally required or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our Terms and Conditions, we may also retain some of your information for a limited period of time as required, even after you have closed your account or it is no longer needed to provide the Services to you.
Do we make automated decisions concerning you?
We do not carry out automated decision making or automated profiling.
Can I find out the personal data that the organisation holds about me?
Magic Mushroom, at your request, can confirm what information we hold about you and how it is processed. If Magic Mushroom does hold personal data about you, you can request the following information by contacting firstname.lastname@example.org:
- Identity and the contact details of the person or organisation that has determined how and why to process your data.
- Contact details of the data protection officer, where applicable.
- The purpose of the processing as well as the legal basis for processing.
- If the processing is based on the legitimate interests of Magic Mushroom or a third party, information about those interests.
- The categories of personal data collected, stored and processed.
- Recipient(s) or categories of recipients that the data is/will be disclosed to.
- If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely.
What forms of ID will I need to provide in order to access this?
Magic Mushroom accepts any of the following forms of ID when information on your personal data is requested:
- Driving licence
- Another form for ID which leaves no doubt of the data owner
Magic Mushroom will not sell or rent your personally identifiable information, gathered as a result of filling out the site registration form, to anyone.
Choosing how we use your data
We understand that you trust us with your personal information and we are committed to ensuring you can manage the privacy and security of your personal information yourself.
With respect to the information relating to you that ends up in our possession, and recognising that it is your choice to provide us with your personally identifiable information, we commit to giving you the ability to do all of the following:
- You can verify the details you have submitted to Magic Mushroom by contacting us at email@example.com. Our security procedures mean that we may request proof of identity before we reveal information, including your e-mail address and possibly your address.
- You can also contact us by the same method to change, correct, or delete your personal information controlled by Magic Mushroom regarding your profile at any time. Please note though that, if you have shared any information with others through social media channels, that information may remain visible, even if your account is deleted.
- You are also free to close your account through our account settings. If you do so, your account will be deactivated. However, we may retain archived copies of your information as required by law or for legitimate business purposes (including to help address fraud and spam).
- You can always feel free to update us on your details at any point by contacting firstname.lastname@example.org with the changes required, or by clicking “Update Profile Settings” at the bottom of any email.
- You can unsubscribe from receiving marketing emails from us by clicking the “unsubscribe” link at the bottom of any email. Once you do this, you will no longer receive any emails from us.
- You can request a readable copy of the personal data we hold on you at any time. To do this, please contact us at email@example.com.
Please note, we are constantly reviewing how we process and protect data. Therefore, changes to our policy may occur at any time. We will endeavour to publicise any changes.