For the purposes of the applicable data protection laws (the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR), together with any implementing legislation, in particular, the Data Protection Act 2018), the company responsible for your personal information is Gracie Barra Bath, Gracie Barra Paulton, and Gracie Barra Twerton Mill. This Policy applies to information obtained by us through your use of the information, software, products and services made available through the graciebarrabath.com website.
Gracie Barra Bath, Gracie Barra Paulton, and Gracie Barra Twerton Mill collects information that, alone or in combination with other data, could be used to identify you (Personal Information), such as your e-mail address, name, physical address, telephone number, or employment information. Gracie Barra Bath, Gracie Barra Paulton, and Gracie Barra Twerton Mill may also collect anonymous demographic information which is not unique to you, such as your postal code and preferences (Non-Personal Information). Non-Personal Information is not linked to your Personal Information (for example, your IP address).
Gracie Barra Bath, Gracie Barra Paulton, and Gracie Barra Twerton Mill will collect your Personal Information in a number of ways, including when you contact us through the Website, by telephone, post, e-mail or through the other means set out below.
We collect Personal Information about you from third parties such as social media networks. We use this information to source potential customer leads.
When you visit our Website, we automatically collect information about your computer hardware and software such as your IP address, browser type, domain names, access times, operating system, cookie information, referring website addresses, pages visited, links clicked, text entered, and Internet Service Provider. We analyse and use this information to better understand how our users use the service, to maintain and improve our service, and in some cases, to publicly disclose aggregated statistics regarding our services.
Gracie Barra Bath, Gracie Barra Paulton, and Gracie Barra Twerton Mill collects and uses your Personal Information as necessary to perform our contract with you and for our legitimate business interests, including to:
With your consent, we will send you direct marketing emails from our third party partners.
Unless a longer retention period is required or permitted by law, we will only hold your Personal Information on our systems for the period necessary to fulfil the purposes outlined in this Policy, or until you request that the information be deleted in accordance with your right of erasure (see “Your rights” section below).
Even if we delete your Personal Information, we reserve the right to maintain a copy for legal, tax or regulatory purposes, but in such event, we will do so only as long as necessary to fulfil those legal, tax or regulatory purposes.
We will only disclose Personal Information to third parties:
We may disclose Personal Information to a member of our group, which means our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006.
As part of the services offered to you through the Website, the Personal Information you provide to us will be transferred to and stored in the United States and in certain circumstances, other countries outside of the European Economic Area (EEA). By way of example, a transfer of your Personal Information may happen if one of our service providers is located in a country outside of the EEA.
We will only transfer Personal Information outside of the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your Personal Information, for example, by way of data transfer agreement incorporating the current standard contractual clauses adopted by the European Commission, or by self-certifying to the EU-US Privacy Shield Framework in the event that the organisation in receipt of the information is based in the United States.
To ensure that your Personal Information receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Personal Information with. This ensures your information is treated by those third parties in a way that is consistent with data protection laws.
The Website uses “cookies” to help you personalise your online experience. A cookie is a text file that is placed by us or our remarketing partners on your hard drive by a web page server. Our cookies do not run programs or deliver viruses to your computer. Cookies are uniquely assigned to your computer, and can only be read by a web server in the domain that issued the cookie to your computer.
One of the primary purposes of cookies is to provide a convenient feature to save you time. The cookie tells the server that you have returned to a specific page. For example, if you personalise the Website pages, or register with the Website, a cookie helps the Website recall your specific information on subsequent visits. This simplifies the process of recording your Personal Information, such as your billing address or site preferences. When you return to the same Website, the information you previously provided can be retrieved, so you can easily use the Website features that you customised.
We may place the following cookies:
If you do not want to receive cookies, you can usually choose to opt-out by modifying your browser settings to decline them. If you choose to decline cookies, you may not be able to access all or parts of, or to fully experience the interactive features of, the Gracie Barra Nottingham, Gracie Barra Arnold, and Gracie Barra Bakersfield services or web pages you visit.
For more information generally on cookies, including how to disable them, please refer to aboutcookies.org. This site also provides details on how to delete cookies from your computer.
Gracie Barra Nottingham, Gracie Barra Arnold, and Gracie Barra Bakersfield is committed to taking reasonable and appropriate steps to protect the Personal Information that we hold from misuse, loss, or unauthorised access. We do this by using a range of technical and organisational measures including measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your personal information, please let us know immediately.
However, while we do our best to protect your Personal Information, we cannot guarantee the security of all data which is transmitted to the Website or to another website via the internet or similar connection.
Under the GDPR, you have various rights in relation to your Personal Information, such as the rights of access, rectification, restriction, objection, portability, and erasure. Please note that these rights are subject to certain limitations set forth in applicable law.
To exercise these rights, please contact our DPO. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of applicable laws. Please note that we may keep a record of your communications to help us resolve any issues you raise.
We do not intend to solicit or collect Personal Information from anyone under the age of 18. If you are under 18, do not enter information on this Website or engage our services. If you believe a child or yours under the age of 18 has entered Personal Information, please contact us to have the data removed and terminate the child’s account.
We will occasionally update this Policy to reflect company and customer feedback. Rocket Lawyer encourages you to periodically review this Policy to be informed of how we are protecting your Personal Information.