We are committed to preserving the privacy, integrity and security of the personal data and information that we hold about our customers and those who make contact with us.
We have developed this privacy policy to explain how we manage and use this personal data and information and to ensure we comply with our legal obligations under applicable data protection laws.
Welcome to the privacy policy of Côte Restaurant Group Ltd.
We are committed to preserving the privacy, integrity and security of the personal data and information that we hold about our customers and those who make contact with us. We have developed this privacy policy to explain how we manage and use this personal data and information and to ensure we comply with our legal obligations under applicable data protection laws.
It is important that you read this privacy policy carefully so that you are fully aware of how we collect and process personal data and information.
CÔTE RESTAURANTS GROUP LTD – WHO WE ARE
This privacy policy covers the personal data and information and personal information collected and processed by Côte Restaurants Group Ltd (“Côte“, “we” “us” and “our“). You can find out more about our business at our website www.cote.co.uk
THE CONTROLLER OF YOUR PERSONAL DATA AND INFORMATION
The controller of, and the person responsible for, the personal data and information covered by this policy is Côte Restaurants Group Ltd, 47C Kensington Court, London, w8 5DA Other contact details for the controller are set out below under “HOW TO CONTACT US“.
PERSONAL DATA AND INFORMATION WE COLLECT AND PROCESS AND THE PURPOSE FOR WHICH WE USE IT
This privacy policy applies to all personal data and information collected by or on behalf of us about, or provided to us by our customers, business contacts and suppliers, job applicants and individuals that contact us (including through our website, in person, by letter, phone, email or text) or enter competitions run by us or use wi-fi services offered at one of our restaurants.
CUSTOMERS
The following section of this policy sets out how Côte may process personal data and information (as a controller) and information about its customers.
What personal data and information do we collect from our customers?
The personal data and information we collect may include:-
We may also collect information about any medical or health conditions (such as disabilities, dietary or allergy information) in order to protect your wellbeing. By freely providing us with such information, you explicitly consent to us processing such information.
How is our customers’ personal data and information collected?
We may collect, use, store and transfer different kinds of personal data and information about you which you provide to us through: the online forms on our website (including in relation to contacting us), booking a table at one of our restaurants, dining at one of our restaurants, buying a gift voucher and/or joining our marketing email list, entering a competition, promotion or survey, ordering a takeaway, connecting to wi-fi at one of our branches, telephone or email communication, and information we receive from other sources, including from third parties that operate loyalty points, booking or delivery programmes or platforms, or send marketing communications on our behalf.
Legal basis for processing our customers’ personal data and information
The legal bases we principally rely upon in order to process your personal data and information are that:
Occasionally we may also rely upon the following legal bases for processing: –
Basis on which we process your data and right to withdraw consent
If we consider it necessary to obtain your consent in relation to use your personal data and information, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data and information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving any of our marketing communications, please follow the unsubscribe instructions included in each electronic communication or contact us at privacy@cote.co.uk. Once we have received notification that you have withdrawn your consent, we will action your request within one month and will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
What do we use our customers’ personal data and information for?
We intend to use your personal data and information for the following purposes:-
BUSINESS CONTACTS / SUPPLIERS
The following section of this policy sets out how we may process personal data and information (as a controller) and information about our business contacts and (current, previous and/or potential) service providers (and employees of service providers).
What personal data and information do we collect from our contacts?
The personal data and information we collect may include: name, email address, home and/or business address, date of birth, phone number; place of work; job title; and marketing preferences.
How is our contacts’ personal data and information collected?
We will collect this data from you when you or your employer provides it to us by phone, email, post, through our website or in person.
Legal basis for processing our contacts’ personal data and information
The legal bases we principally rely upon in order to process your personal data and information are that:
Occasionally we may also rely upon the following legal bases for processing:-
Basis on which we process your data and right to withdraw consent
If we consider it necessary to obtain your consent in relation to the use your personal data and information, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data and information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving any of our marketing communications, please contact us at privacy@cote.co.uk or follow the unsubscribe instructions included in each electronic communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
What do we use our contacts’ personal data and information for?
We intend to use your personal data and information for the following purposes:-
JOB APPLICANTS
The following section of this policy sets out how Côte may process personal data and information (as a controller) and information about applicants of jobs or placements and potential workers and contractors.
What personal data and information do we collect from job applicants?
In connection with your application for work with us, we may collect the following personal data and information:
Special Category Data
We may also collect, store and use the following “special categories” of sensitive personal data: [Information about your race or ethnicity, religious beliefs, sexual orientation and political opinions, information about your health, including any medical condition, health and sickness records and/or information about criminal convictions and offences.]
We may use your sensitive personal data in the following ways:
We will collect information about your criminal convictions history if we would like to offer you the work or a position (conditional on checks and any other conditions, such as references, being satisfactory). We are entitled to carry out a criminal record check in order to satisfy ourselves that there is nothing in your criminal convictions history which makes you unsuitable for the role.
How is the job applicant’s personal data and information collected?
We may collect personal data and information about candidates from the following sources:
Legal basis for processing our job applicants’ personal data and information
The legal bases we principally rely upon in order to process your personal data and information are that:
Basis on which we process your data and right to withdraw consent
If we consider it necessary to obtain your consent in relation to the use your personal data and information, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data and information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving any of our marketing communications, please contact us at privacy@cote.co.uk or follow the unsubscribe instructions included in each electronic communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
What do we use our job applicants’ personal data and information for?
Your personal data and information may be processed by Côte for the following purposes:
Once we receive your CV and covering letter or your application form we may process that information to decide whether Côte has any suitable vacancies and if you meet the basic requirements to be shortlisted for that role. If you do, we will decide whether your application is strong enough to invite you for an interview. If we decide to call you for an interview, we will use the information you provide to us at the interview to decide whether to offer you the work. If we decide to offer you the work, we will then take up references before confirming your appointment.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
If your application is successful, the information you provide during the application process will be retained by Côte as part of your employee file and held in accordance with the privacy section of Côte’s staff handbook and our data retention policy or applicable laws.
If your application is unsuccessful, the information you have provided will be retained by Côte for six (6) months after we have communicated our decision to you. We retain your personal information for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. We may also add your details to our Talent Bank so that we can inform you of other relevant roles. After this period, we will securely destroy your personal information in accordance with our data retention policy or applicable laws and regulations.
VISITORS TO OUR WEBSITE
The following section of this policy sets out how Côte may process personal data and information (as a controller) and information about visitors to its website.
What personal data and information do we collect from visitors to our website?
The personal data and information which we collect may include:
We also work closely with third parties (including, for example, sub-contractors in technical, payment and delivery services) and may receive information about you from them.
How is the personal data and information about visitors to our website collected?
We use different methods to collect data from and about visitors to our website, including:
Legal basis for processing information relating to visitors to our website
The legal bases we principally rely upon in order to process your personal data and information are that:
Basis on which we process your data and right to withdraw consent
If we consider it necessary to obtain your consent in relation to the use your personal data and information, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data and information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving any of our marketing communications, please contact us at privacy@cote.co.uk or follow the unsubscribe instructions included in each electronic communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
What do we use the personal data and information of visitors to our website for?
Your personal data and information may be processed by Côte for the following purposes:
Links to websites
Where our website provides links to other websites, we are not responsible for the data protection/privacy/cookie usage policies of such other websites, and you should check these policies on such other websites if you have any concerns about them. If you use one of these links to leave our website, we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting a linked website and such websites are not governed by this policy. You should always exercise caution and review the privacy policy applicable to the website in question.
CALLS TO OUR RESERVATIONS DEPARTMENT
Please note that calls made to both our Reservations Department and Restaurants may be monitored or recorded for training and quality purposes.
At certain times, and for group bookings, we may require a deposit to be held in the event of last minute cancellation. We will never request these details over the phone, instead you will receive an email from our booking partner OpenTable with information about entering your card details in to a secure vault.
MARKETING TO YOU
Your personal data and information may be used to send you details of those products or services that we offer that we have identified as likely to be of interest to you.
You may receive marketing communications from us:
Email Communications
We may use tracking technologies to determine whether (and where) you have read, clicked on, or forwarded certain email communications which are sent to you by us, or on our behalf, so that we can make our communications more helpful and interesting. If you do not wish us to confirm whether (and where) you have opened, clicked on or forwarded our communications, you will need to unsubscribe, as it is not possible for us to send these emails without tracking enabled. Registered subscribers can update their communication preferences at any time by contacting us, or you can unsubscribe following the instructions in the individual email communications you receive from us.
You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time using the contact details set out under “HOW TO CONTACT US” below or by emailing privacy@cote.co.uk.
IF YOU FAIL TO PROVIDE PERSONAL DATA AND INFORMATION REQUESTED
Where you fail to provide that data when requested, we may not be able to perform the contract in place or which we are trying to enter into with you. In this case, we may have to cancel a service you have with us (including a reservation at one of our restaurants) but we will notify you if this is the case at the time.
SHARING YOUR PERSONAL DATA AND INFORMATION WITH OTHERS
We may disclose personal data and information or information which we hold about you:
In the event that we sell any business or assets, or seek investment into our business, we may disclose personal data and information we hold about you to the prospective and actual buyer of such business or assets or investors. If a change happens to our business, then the new owners may use your personal data and information in the same way as set out in this Privacy Policy. In the unlikely event of our insolvency, winding up or liquidation, we may also disclose personal data and information we hold about you to a successor in interest.
We will not disclose personal data and information we hold about you to any other third parties except where required by law, or where the disclosure is ‘necessary’ for purposes of national security, taxation and/or criminal investigations, or we have your consent.
We may require pre-payments (including but not limited to: set menus, large group booking, experiences and event tickets.): If a pre-payment is required to secure your booking, you will need to enter your credit card details for us to charge the relevant deposit in line with our table booking cancellation policy, which will be presented to you the point of booking. Payment processing services are provided by Stripe. By inputting your email (where required) and payment card details, you are consenting to the use of such details by Stripe the operator, and us for the purpose of securing your booking and charging your card.
TRANSFERRING YOUR PERSONAL DATA AND INFORMATION OUTSIDE THE EEA
We do not generally transfer any personal data and information we hold about you to a country outside the UK or the European Economic Area (“EEA“).
However, some of our appointed third party providers and their sub-processors (including, but not limited to: booking software provider OpenTable, and payment processor, Stripe) may be based in the US or other countries and where necessary may hold personal data and information. Where this is the case, they are obliged to ensure that there is equivalent protection for your Personal Information as would be the case within the UK and the European Union by ensuring at least one of the following safeguards applies.
DATA SECURITY
We have put in place appropriate security measures to prevent your personal data and information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data and information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data and information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data and information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
HOW LONG DO WE KEEP YOUR PERSONAL DATA AND INFORMATION FOR?
We will only retain your personal data and information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data and information, we consider the amount, nature, and sensitivity of the personal data and information, the potential risk of harm from unauthorised use or disclosure of your personal data and information, the purposes for which we process your personal data and information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you can ask us to delete your data: see the YOUR RIGHT TO ACCESS YOUR PERSONAL DATA AND INFORMATION AND YOUR OTHER RIGHTS section below for further information.
In some circumstances we may anonymise your personal data and information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We will take all reasonable steps to destroy, or erase from our systems, all the personal data and information we hold about you when it is no longer required.
YOUR RIGHT TO ACCESS YOUR PERSONAL DATA AND INFORMATION AND YOUR OTHER RIGHTS
In certain circumstances, you have rights under data protection laws in relation to your personal data and information as follows:
If you wish to exercise any of the rights set out above, please contact us by using the contact details set out below under ”HOW TO CONTACT US” below or by emailing privacy@cote.co.uk.
You will not have to pay a fee to access your personal data and information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
If you wish to exercise any of those rights we may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal data and information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
COMPLAINTS
If you are not satisfied with our response to any queries or complaints you raise with us or believe we are not processing your personal data and information in accordance with the data protection laws you have the right to lodge a complaint at the Information Commissioner’s Office (ICO) (https://ico.org.uk/). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
DISCLOSURE OF PERSONAL DATA TO 3RD PARTIES
We may pass on your personal data to service providers contracted to Cote Restaurants Group Ltd in the course of dealing with you. They act as a data processor on our behalf and are obliged under contract to keep your details securely, and only use them to fulfil the services they provide on our behalf. When they no longer need your data to fulfil this service, they dispose of the details in line with legal procedures.
We will not pass on your personal data to any other third parties without your consent unless the law requires us to do so.
COOKIES
A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the website. Find out more about cookies on www.allaboutcookies.org.
We use cookies to identify you when you visit this website and to keep track of your browsing patterns and build up a demographic profile.
You can set your browser to refuse all or some browser cookies or to alert you when websites set to access cookies. If you want to know how to do this please look at the menu on your browser or look at the instruction on www.allaboutcookies.org. Please note however that turning off cookies will restrict your use of our website.
We have set out below, in a table format, a description of all the ways we plan to use your personal data and information, and the legal bases we rely on.
Cookie: Making a Reservation/Enquiry
Data collected by the cookie: Title, First Name, Surname, Email Address, Telephone Number, date of birth
Retention Period: Indefinitely or until deletion is requested
Who is this data shared with: Côte Restaurants
Lawful basis for processing: Legitimate interest
Cookie: “Contact Us” Completion
Data collected by the cookie: Name, Email Address, Telephone Number
Retention Period: Indefinitely or until deletion is requested
Who is this data shared with: Côte Restaurants
Lawful basis for processing: Performance of a contract
Cookie: Email Newsletter Sign-up
Data collected by the cookie: First Name, Last Name, Email Address, Postcode, Date of Birth, Dietary Preferences, Favourite Restaurant
Retention Period: Indefinitely or until deletion is requested
Who is this data shared with: Côte Restaurants
Lawful basis for processing: Performance of a contract
Cookie: PA Scheme Signup
Data collected by the cookie: Title, First Name, Surname, Email Address, Telephone Number, Company Name, Company Address, Job Title
Retention Period: Indefinitely or until deletion is requested
Who is this data shared with: Côte Restaurants
Lawful basis for processing: Performance of a contract
By continuing to use this site you are agreeing to the use of cookies as detailed above.
By continuing to use this site you are agreeing to the use of cookies as detailed above. If you have any queries with regards to these practices please contact us at Côte Restaurants Group Ltd, 47C Kensington Court, London,W8 5DA or email us at privacy@cote.co.uk.
CHANGES TO THIS POLICY
We may need to make changes to this privacy policy from time to time to take account of changes in law or the needs of our business. Please refer back to this page regularly to see any changes or updates to this policy.
HOW TO CONTACT US
If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details set out below:-
By Post:Côte Restaurants Group Ltd, 47C Kensington Court, London,W8 5DA
By Email:privacy@cote.co.uk