Privacy Policy – Airport Bowl Heathrow
Overview
Maintaining the privacy and security of your personal data is a priority at Riva Bowl LLP, and we are committed to respecting your rights and handling your personal data fairly and legally at all times. We will also be transparent about what data we collect about you and how we use it.
This policy applies to the personal data that Riva Bowl LLP collects and holds about you whether you: visit our centres, contact our centre, or visit our website at www.airport-bowl.com which provide you with information about:
1) What personal data we collect
2) How and when we use and process this data for our legitimate business interests
3) The safeguards we have in place to ensure your privacy is maintained
4) Your legal rights relating to personal data and how you can instruct us if you prefer to limit the use of this data
What data do we collect?
We may collect data from you:
- When you purchase services or products from us
- When you browse our websites or receive emails from us
- If you contact our customer contact centre team
- If you visit one of our centres
- If you respond to a feedback survey, enter a competition with us, request your bowling score or discount code or interact with our social media channels
This data may include the following:
- Name, gender and date of birth
- Contact details including your address, telephone numbers and email address
- Records of your transactions including what and when you purchased from us
- Browsing activity on our websites including your location; which may be passively collected by us through the use of cookies, log files and other technologies. This online usage may be linked to a unique identifier but we do not link online usage to named individuals
- Passwords you create for your online account
- Payment card details (although these are not stored by us after a purchase is completed)
- Marketing preferences and your survey responses
- Correspondence and communications with Riva Bowl LLP
- CCTV and bodycam recordings within our centres or accident and incident reports
- Other publicly available personal data, including any which you have shared via a public platform (such as Twitter or public Facebook pages)
Our websites are not intended for use by children and we do not knowingly collect personal data relating to persons under the age of 16. We ask that parents and guardians ensure that children do not submit personal data via our websites or in our centres.
This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an online account, or send an email to our customer contact team. Other personal data is collected indirectly, for example, through your website browsing or transaction activity.
Privacy Notice: Emailed Marketing
Who we are
We are Riva Bowl LLP, responsible for processing your personal data.
Contact:
Address: Data Protection Officer, Riva Bowl LLP, Airport Bowl, Bath Road, Harlington, Middlesex, UB3 5AL
Email: s.davis@airport-bowl.com
Phone: 0208 7597246
What personal data we collect
We collect and process your email address and basic booking information (e.g., booking reference, visit date/time) to communicate service messages linked to your booking.
How we use your data
We use your email to send you transactional and service-related messages, such as:
1) Booking confirmations and reminders
2) Updates or changes to your booking
3) Venue information and arrival guidance
4) Post-visit thank-you messages and feedback requests
These emails are limited to what is necessary to deliver the service you’ve used and do not include promotional content unless you have explicitly opted in.
Lawful basis for processing
We rely on legitimate interests under UK GDPR to send you these service messages because:
They are necessary for the performance of our service to you.
You reasonably expect updates about your booking once you provide your contact number.
We have assessed and balanced our interests against your rights and freedoms.
You can object to this processing at any time (see “Your rights” below).
For any promotional or marketing messages, we will only use your email if you have given explicit consent. No marketing messages will be sent based on legitimate interests.
Who we share your data with
Your email address is processed through our online booking platform provider and is not shared with other third parties for unrelated purposes.
Data retention
We retain your email address and booking-related communications only as long as necessary to provide service messaging and as required to comply with legal obligations.
Your rights
Under UK GDPR, you have the right to:
Access your data
Rectify inaccuracies
Request deletion
Object to processing based on legitimate interests
Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we use your data
Opt-out
To stop emails, click the unsubscribe link in the message, or by contacting us at s.davis@airport-bowl.com
What do we do with your data?
Riva Bowl LLP and selected partners acting on our behalf may process and use your personal data
- to provide leisure services and products to you
- to make websites available to you
- to improve our understanding of our customers and to improve the services we provide to them
- to manage accounts that you set up with us
- to verify your identity
- for crime and fraud prevention and detection
- for the purposes of maintaining the safety and security of our customers and team members
- for market research purposes after your visit
- to help us manage customer service communications with you
- to contact you about promotional offers and services which we think may interest you
- where we have a legal right or duty to use or disclose your data for example for maintaining adequate accounting records; or in relation to an investigation by a public authority; or in a legal dispute or insurance claim.
Riva Bowl LLP never rents or sells personal data to third parties for their marketing purposes.
Marketing communications
Riva Bowl LLP may use your personal data for electronic marketing purposes primarily where we aim to update you about offers and services which we believe are of interest and relevance to you. We will only do so where we have a lawful basis to do so.
You have the right to opt out of receiving marketing communications at any time, by:
the “unsubscribe” link in emails and WhatsApp messages, or the “STOP” number for texts; and/or
changing marketing preferences via your Riva Bowl LLP account;
contacting Riva Bowl LLP via the contact details listed below.
In order to contact you about services and offers that are relevant to you, we may analyse your browsing and purchasing activity, both on-line, via our customer contact centre or in our centres as well as your responses to our marketing communications. We may use software and other automated technology to help us to do this analysis.
Online advertising
If you visit our website, you may subsequently see banner advertisements from us whilst browsing other websites. These advertisements are provided by Riva Bowl LLP via specialist media providers using ‘cookies’ placed on your computer or other devices. Please see our cookie policy for further information.
Sharing data with third parties
In order to provide our services, securely fulfil transactions and provide you relevant marketing communications, we may need to share your personally identifiable data or anonymised data with selected partners including payment processing companies, IT service providers (such as hosting companies), analytics companies and marketing services agencies.
Riva Bowl LLP only allows its service partners to handle your personal data when they conform to the appropriate data protection and security controls. Our service partners have obligations relating to data protection and security restricting their use of your data to provide services to Riva Bowl LLP and to you, and for no other purposes
We never sell or rent our customer data to other organisations for marketing purposes
Aside from our service partners, Riva Bowl LLP will not disclose your personal data to any third party, except as listed below
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are legally required to do so
- to comply with our legal obligations
- to exercise our legal rights (for example in court cases)
- for the prevention, detection, investigation of crime or prosecution of offenders; and
- for the protection of our team members and customers.
How long do we keep your data?
We will not retain your data for longer than necessary for the purposes set out in this Policy. In general, we will keep your data for the duration of our relationship with you and for a certain period afterwards. In considering how long to keep it, we take into account the nature of the information, the nature of the relationship with you, the relevance of the information, and our obligations to comply with applicable laws and regulations. The longest we hold any personally identifiable data is 4 years after your last order, interaction with our marketing communications, contact with our customer contact centre or visit to one of our centres. After that time, we anonymise any transactional data that we hold for the purposes of accounting records or business analysis.
How do we protect your data?
Riva Bowl LLP is committed to keeping your personal data safe and secure and we follow strict security procedures, technical and organisational measures which include:
- Cyber security assessments of all service providers who handle your personal data
- Regular incident management reviews to ensure we are ready to respond to cyber security attacks and data security incidents
- Regular network vulnerability scans
- Intrusion detection and monitoring through leading network infrastructure solutions
- Security controls which protect the Riva Bowl LLP IT infrastructure from external attacks and unauthorised access
- Real time scanning to protect against malicious threats to Riva Bowl LLP IT infrastructure
- Internal policies setting out our data security approach
- Data security and data processing training for team members
- Secure WEEE disposal of all redundant IT hardware
Our legal basis for processing personal data
We process customer data on a carefully considered and specific legal basis. This basis may be where you have given your consent; or for the performance of a contract; or where necessary to comply with a legal obligation; or where necessary to protect the safety or other vital interests of an individual; or where it is necessary for the purposes of the legitimate interests of Riva Bowl LLP or another party. Examples of the “Legitimate interests” of Riva Bowl LLP, include the interests of Riva Bowl LLP in conducting and managing our business to enable us to provide the best experience to our customers including:
- Operating networks and systems to allow us to securely sell and supply our goods and services
- Processing and analysing data to get a more informed picture of our customers’ behaviour, activities, preferences and needs
- Using this insight to help us enhance the products and services we offer our customers
- To better understand how customers interact with our websites to help us improve the functionality and content of our customer’s online experience
- Promoting, marketing and advertising our services and determining the effectiveness of these campaigns to help us improve the relevance of our communications to our customers
- Protecting customers, team members and other individuals and maintaining their safety and welfare
- Handling customer contacts, queries, complaints or disputes including managing insurance claims
- Protecting Riva Bowl LLP, our team members and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to Riva Bowl LLP
- Preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies
- Handling any legal claims or regulatory enforcement actions taken against Riva Bowl LLP
- Complying with our legal and regulatory obligations
- Fulfilling our duties to our customers, our team members, our shareholders and other stakeholders
When we process your personal data based on our legitimate interests, we make sure we consider and balance any positive or negative impacts on you and your data protection rights against our rights and interests. We will not use your personal data for activities where our interests are over ridden by the impact on you (unless we have your consent or are otherwise permitted by law). Whenever we process your data, we ensure that we always take account of your rights.
Your rights
Subject to certain exemptions, you have the following rights relating to updating, rectifying and deleting your personal data held with us:
- The right to opt out of any marketing communications that we may send you
- The right to ask what personal data that we hold about you and receive a copy of it
- The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you
- The right to erasure of your personal data in certain circumstances or to restrict the processing of your data rather than having it erased
- The right to object to the processing of personal data when Riva Bowl LLP processes personal data for legitimate purposes but you do not feel that your interests or fundamental rights or freedoms have been protected
- With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice
- You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us
- If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time
- The right to lodge a complaint about how your data is being used or processed with a supervisory authority (in the UK, that’s the ICO, see their website at https://ico.org.uk/concerns/ or call their office on 0303 123 1113)
- If you wish to exercise any of the above rights, or to get in touch about our privacy policy and procedures, please contact our Data Protection Officer at Data Protection Officer, Riva Bowl LLP, Airport Bowl, Bath Road, Harlington, Middlesex, UB3 5AL
How we use your cookies
Like most websites, we use cookies to collect information. Cookies are small data files, typically made up of letters and numbers which are placed on your computer or other devices (smart phones or tablets) as your browse the website. Cookies can be used for many different purposes.
Contact us
If you have any questions about how Riva Bowl LLP uses your personal data that are not answered here, please:
- Email us: s.davis@airport-bowl.com
- Call us on 0208 7597246
- Write to us: Data Protection Officer at Data Protection Officer, Riva Bowl LLP, Airport Bowl, Bath Road, Harlington, Middlesex, UB3 5AL