The Smithy, New Galloway – Privacy Policy
Our contact details
Name: The Smithy Café
Address: High Street, New Galloway, Dumfries and Galloway, DG7 3RN
Phone Number: 01644 420269
E-mail: info@thesmithy-newgalloway.co.uk
Privacy Policy completed March 2022
The type of personal information we collect
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data)
We may collect, use and store the following information:
- Your name, telephone number and email address.
We may also collect the following information:
- Your name, card number, expiration date, CVC number and postcode.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- Reserving a table
- Making in person payments
- Making payments over the telephone
We use the information that you have given us in order to ensure that we can contact you in relation to your table bookings and take payments for services and goods provided.
We do not share this information with anyone.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@thesmithy-newgalloway.co.uk
(b) We have a contractual obligation.
(c) We have a legitimate interest.
How we store your personal information
Your information is securely stored.
We keep information taken as part of our booking process for up to one month following the date of your booking. We will then dispose of your information by deletion from our booking system.
As part of our in person payment taking process our card payment provider will take card details. This data is anonymous to us and is limited to the date, value, type of card and the last 4 digits of the card number.
As part of our telephone payment taking process any personal details collected and written down are destroyed by shredding once the payment is authorised.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@thesmithy-newgalloway.co.uk if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at The Smithy, High Street, New Galloway, DG7 3RN.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk