Privacy Policy for The Mackintosh Tearooms

About this notice

The Mackintosh Tearooms, as part of the National Trust for Scotland, is committed to protecting your personal data and ensuring it is handled in a safe and responsible way. This notice outlines how we aim to achieve this and includes the information collected when:

• you use our website https://www.nts.org.uk/visit/places/the-mackintosh-tearooms
• you make a booking on our website
• you make enquiries on our website

Who are we?

The Mackintosh Tearooms (“We”, “Us”, “Our”) is a restaurant or venue, and our address is: 217 Sauchiehall Street, Glasgow G2 3EX. 
We are part of the National Trust for Scotland (“NTS”). NTS acts as the data controller for your data.

How do we collect information from you?

We collect information from you:

• when you make a booking
• when you visit our restaurant (preferences, allergies, etc)
• when you make an enquiry
• when you sign up to marketing emails

What type of information is collected from you?

When you make a booking

You may be asked to submit personal data about yourself when you make a booking. We will collect this information so we can fulfil your booking request.

We collect information such as:

• title
• name
• email address (used for booking confirmation and post-dining feedback emails)
• home or work address
• billing information taken for deposits, ticketing, or holding credit card information for use in the case of no-shows (where applicable)
• telephone number
• company name
• dietary requirements
• marketing preferences

After you dine at our restaurant

• marketing responses (where applicable)
• survey responses
• past restaurant reservation details

When you access our sites

There is “device information” about your computer hardware and software that is automatically collected by us. This information can include:

• device type (eg mobile phone, computer, laptop, tablet)
• cookies
• operating system
• IP address
• browser type
• browser information (eg type, language and history)
• domain names
• access times
• settings
• referring website addresses
• other data about your device to provide the services as otherwise described in this policy

Location information

If you use our website, we may receive your generic location (such as city or neighbourhood).

How is your information used?

Our use of your personal data will always have a lawful basis, either because it is necessary to complete a booking, because you have consented to our use of your personal data (eg by subscribing to emails) or because it is in our legitimate interests (eg sending a request for feedback after dining).

We require the information  to understand your needs and provide you with a better service, and in particular for the following reasons:

• internal record keeping
• send you service emails (booking confirmation)
• ask for post-dining feedback
• improve our products and services
• send marketing communications if you have opted in to receive them

Who has access to your information?

We will only share your information with companies if necessary to deliver services on our behalf – for example, service providers (eg ResDiary for the provision of online bookings), third-party payment processors, and other third parties to provide our sites and fulfil your requests, and as otherwise consented to by you or as permitted by applicable law.

Third parties whose content appears on our site may use third-party cookies, as detailed below. Please refer to ‘Use of Cookies’ below for more information on controlling cookies. 

Please note that we do not control the activities of such third parties, nor the data they collect and use, and advise you to check the privacy notices of any such third parties.

How and where do we store data?

We only keep your personal data for as long as we need to in order to use it as described in this privacy notice, and/or for as long as we have your permission to keep it.

For reservations taken through ResDiary software, your data will only be stored in your local country, jurisdiction or lawful location. ResDiary data is stored securely in data centres managed by Microsoft Azure.

Your choices

We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. You can change your marketing preferences at any time by clicking Unsubscribe in any of the emails we send you, or by contacting us at themackintoshtearooms@nts.org.uk

Your rights on the information we hold about you

You have certain rights in relation to personal data we hold about you. Details of these rights and how to exercise them are set out below. We may require evidence of your identity before we are able to act on your request.

Right of access

You have the right at any time to ask us for a copy of the personal data about you that we hold.

Right of rectification

If personal data we hold about you is not accurate, out of date or incomplete, you have a right to have the data rectified, updated or completed. You can let us know by contacting us.

Right of erasure

In certain circumstances, you have the right to request that personal data we hold about you is erased.

Right to object to or restrict processing

In certain circumstances, you have the right to object to our processing of your personal data by contacting us.

Right of data portability

In certain instances, you have a right to receive any personal data that we hold about you in a structured, commonly used and machine-readable format. You can ask us to transmit that information to you or directly to a third party organisation.
The above right exists only in respect of personal data that:

• you have provided to us previously; and
• is processed by us using automated means

You can exercise any of the above rights by contacting us using any of the methods in the Contact section below.

Use of cookies

Like many other websites, we use cookies. We use them to help personalise your online experience.

A cookie is a text file that is placed on your hard disk by a web page server which allows the website to recognise you when you visit. Cookies only collect data about browsing actions and patterns, and do not identify you as an individual.

We may use cookies for the following purposes:

• Authentication, personalisation and security: cookies help us verify your account and device and determine when you log in, so we can make it easier for you to access the services and provide the appropriate experiences and features. We also use cookies to help prevent fraudulent use of login credentials.
• Performance and analytics: cookies help us analyse how the services are being accessed and used, and enable us to track the performance of the services – for example, we use cookies to determine if you viewed a page or opened an email. This helps us provide you with information that you find interesting. We also use cookies to provide insights regarding your End Users and your sites’ performance, such as page views, conversion rates, device information, visitor IP addresses, and referral sites.
• Third parties: Third-party services may use cookies to help you sign into their services from our services. We also may use third-party cookies, such as Google Analytics, to assist with analysing performance. Any third-party cookie usage is governed by the privacy notice of the third-party placing the cookie.
• Opting out: You can set your browser to not accept cookies, but this may limit your ability to use the services.

Our site may contain links to other websites. Please note that we have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy notices of any such websites before providing any data to them.