This notice is published in accordance with the General Data Protection Regulations (GDPR) and is designed to advise you of the way in which we hold and process your data and inform you of the rights you have under the in terms of reviewing and obtaining your data.
Bristol UK Limited as a Data Processor
We act as a Data Controller and Data Processor with respect of your personal data for the purposes of the GDPR.
If you have any questions with regards the holding or processing of your data, you should contact the Managing Director by post to Bristol UK Limited, Unit 1 Sutherland Court, Tolpits Lane, Watford, WD18 9SP.
Information we hold and process
The sort of information we hold includes your name and contact details including email and mobile numbers. We may hold your date of birth. We hold written correspondence you may submit to us including information on previous orders or enquiries or complaints.
The reasons we process your data
The Company needs to hold and process your data for several reasons.
§ We need to be able to liaise with you on your orders and ensure that you receive the correct products and are billed correctly for the products or services you receive from us. Without this, you may not be able to place an order.
§ We may use your data to contact you about specific offers or services which may be suitable for you. You can always opt out of any targeted marketing.
We will never process your data where our legitimate business interests are overridden by your own interests.
Sources of data
The information we hold about you will generally always be provided by you or a member of your booking party.
Sharing of data
We will only disclose information about you to third parties if we are legally obliged to do so for example the Police or the HMRC.
Your personal data will be stored in line with the Company’s retention schedule unless you explicitly require it to be removed. Please note that the right to have your data removed is not an absolute right; we may need to retain your data if required by law.
Under the GDPR you have a number of rights with regard to your personal data. You have the right to request from us access to and rectification or erasure of your personal data, the right to restrict processing, object to processing as well as in certain circumstances the right to data portability.
If you have provided consent for the processing of your data you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
You have the right to lodge a complaint to the Information Commissioners’ Office if you believe that we have not complied with the requirements of the GDPR or DPA with regard
to your personal data by clicking on the following link: http://ico.org.uk/concerns