PRIVACY POLICY

Maintaining the privacy and security of your personal data is a priority at HBG, and we are committed to respecting your rights and handling your personal data fairly and legally at all times. We will also be transparent about what data we collect about you and how we use it.

This policy applies to the personal data that HBG collects and holds about you whether you: visit our centres, contact our call centre, or visit our websites at www.hollywoodbowl.co.uk, www.amf-bowling.co.uk, www.hollywoodbowlgroup.com and www.puttstars.co.uk. It provides you with information about:

What personal data we collect

How and when we use and process this data for our legitimate business interests

The safeguards we have in place to ensure your privacy is maintained

Your legal rights relating to personal data and how you can instruct us if you prefer to limit the use of this data

We may collect data from you:

• When you purchase services or products from us
• When you browse our websites or receive emails from us
• If you contact our customer contact centre team
• If you visit one of our centres
• If you respond to a feedback survey, enter a competition with us, request your bowling or mini golf score or discount code or interact with our social media channels

This data may include the following:

• Name, gender and date of birth
• Contact details including your address, telephone numbers and email address
• Records of your transactions including what and when you purchased from us
• Browsing activity on our websites including your location; which may be passively collected by us through the use of cookies, log files and other technologies. This online usage may be linked to a unique identifier but we do not link online usage to named individuals
• Passwords you create for your online account
• Payment card details (although these are not stored by us after a purchase is completed)
• Marketing preferences and your survey responses
• Correspondence and communications with HBG
• CCTV and bodycam recordings within our centres or accident and incident reports
• Other publicly available personal data, including any which you have shared via a public platform (such as Twitter or public Facebook pages)

Our websites are not intended for use by children and we do not knowingly collect personal data relating to persons under the age of 16. We ask that parents and guardians ensure that children do not submit personal data via our websites or in our centres.

This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an online account, or send an email to our customer contact team. Other personal data is collected indirectly, for example, through your website browsing or transaction activity.

HBG and selected partners acting on our behalf may process and use your personal data

• to provide leisure services and products to you
• to make websites available to you
• to improve our understanding of our customers and to improve the services we provide to them
• to manage accounts that you set up with us
• to verify your identity
• for crime and fraud prevention and detection
• for the purposes of maintaining the safety and security of our customers and team members
• for market research purposes after your visit
• to help us manage customer service communications with you
• to contact you about promotional offers and services which we think may interest you
• where we have a legal right or duty to use or disclose your data for example for maintaining adequate accounting records; or in relation to an investigation by a public authority; or in a legal dispute or insurance claim.

HBG never rents or sells personal data to third parties for their marketing purposes.

Marketing communications

HBG may use your personal data for electronic marketing purposes primarily where we aim to update you about offers and services which we believe are of interest and relevance to you. We will only do so where we have a lawful basis to do so.

• You have the right to opt out of receiving marketing communications at any time, by:
• the “unsubscribe” link in emails or the “STOP” number for texts; and/or
• changing marketing preferences via your HBG account;
• contacting HBG via the contact details listed below.

In order to contact you about services and offers that are relevant to you, we may analyse your browsing and purchasing activity, both on-line, via our customer contact centre or in our centres as well as your responses to our marketing communications. We may use software and other automated technology to help us to do this analysis.

Online advertising

If you visit our websites, you may subsequently see banner advertisements from us whilst browsing other websites. These advertisements are provided by HBG via specialist media providers using ‘cookies’ placed on your computer or other devices. Please see our cookie policy for further information.

Sharing data with third parties

In order to provide our services, securely fulfil transactions and provide you relevant marketing communications, we may need to share your personally identifiable data or anonymised data with selected partners including payment processing companies, IT service providers (such as hosting companies), analytics companies and marketing services agencies.

• HBG only allows its service partners to handle your personal data when they conform to the appropriate data protection and security controls. Our service partners have obligations relating to data protection and security restricting their use of your data to provide services to HBG and to you, and for no other purposes
• We never sell or rent our customer data to other organisations for marketing purposes

Aside from our service partners, HBG will not disclose your personal data to any third party, except as listed below

• governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are legally required to do so
• to comply with our legal obligations
• to exercise our legal rights (for example in court cases)
• for the prevention, detection, investigation of crime or prosecution of offenders; and
• for the protection of our team members and customers.

We will not retain your data for longer than necessary for the purposes set out in this Policy. In general, we will keep your data for the duration of our relationship with you and for a certain period afterwards. In considering how long to keep it, we take into account the nature of the information, the nature of the relationship with you, the relevance of the information, and our obligations to comply with applicable laws and regulations. The longest we hold any personally identifiable data is 4 years after your last order, interaction with our marketing communications, contact with our customer contact centre or visit to one of our centres. After that time, we anonymise any transactional data that we hold for the purposes of accounting records or business analysis.

HBG is committed to keeping your personal data safe and secure and we follow strict security procedures, technical and organisational measures which include:

• Cyber security assessments of all service providers who handle your personal data
• Regular incident management reviews to ensure we are ready to respond to cyber security attacks and data security incidents
• Regular network vulnerability scans
• Intrusion detection and monitoring through leading network infrastructure solutions
• Security controls which protect the HBG IT infrastructure from external attacks and unauthorised access
• Real time scanning to protect against malicious threats to HBG IT infrastructure
• Internal policies setting out our data security approach
• Data security and data processing training for team members
• Secure WEEE disposal of all redundant IT hardware

Extra EEA Transfers

If you are based within the EEA, please note that we may transfer personal information to countries outside the EEA. Not all countries provide the same level of protection in relation to personal information as within the EEA. Where necessary to make such transfers, we will comply with our legal and regulatory obligations in relation to the personal information. This will include having a lawful basis for transferring personal information and putting appropriate safeguards in place to ensure an adequate level of protection for the personal information.

We process customer data on a carefully considered and specific legal basis. This basis may be where you have given your consent; or for the performance of a contract; or where necessary to comply with a legal obligation; or where necessary to protect the safety or other vital interests of an individual; or where it is necessary for the purposes of the legitimate interests of HBG or another party. Examples of the “Legitimate interests” of HBG, include the interests of HBG in conducting and managing our business to enable us to provide the best experience to our customers including:

• Operating networks and systems to allow us to securely sell and supply our goods and services
• Processing and analysing data to get a more informed picture of our customers’ behaviour, activities, preferences and needs
• Using this insight to help us enhance the products and services we offer our customers
• To better understand how customers interact with our websites to help us improve the functionality and content of our customer’s online experience
• Promoting, marketing and advertising our services and determining the effectiveness of these campaigns to help us improve the relevance of our communications to our customers
• Protecting customers, team members and other individuals and maintaining their safety and welfare
• Handling customer contacts, queries, complaints or disputes including managing insurance claims
• Protecting HBG, our team members and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to HBG
• Preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies
• Handling any legal claims or regulatory enforcement actions taken against HBG
• Complying with our legal and regulatory obligations
• Fulfilling our duties to our customers, our team members, our shareholders and other stakeholders

When we process your personal data based on our legitimate interests we make sure we consider and balance any positive or negative impacts on you and your data protection rights against our rights and interests. We will not use your personal data for activities where our interests are over ridden by the impact on you (unless we have your consent or are otherwise permitted by law). Whenever we process your data we ensure that we always take account of your rights.

Subject to certain exemptions, you have the following rights relating to updating, rectifying and deleting your personal data held with us:

• The right to opt out of any marketing communications that we may send you
• The right to ask what personal data that we hold about you and receive a copy of it
• The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you
• The right to erasure of your personal data in certain circumstances or to restrict the processing of your data rather than having it erased
• The right to object to the processing of personal data when HBG processes personal data for legitimate purposes but you do not feel that your interests or fundamental rights or freedoms have been protected
• With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice
• You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us
• If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time
• The right to lodge a complaint about how your data is being used or processed with a supervisory authority (in the UK, that’s the ICO, see their website at https://ico.org.uk/concerns/ or call their office on 0303 123 1113)
• If you wish to exercise any of the above rights, or to get in touch about our privacy policy and procedures, please contact our Data Protection Officer using the form located here

If you have any questions about how HBG uses your personal data that are not answered here, please

• Contact us using the form located here
• Email us: [email protected]
• Call us on 01442 840202
• Write to us : Data Protection Officer, Hollywood Bowl Group , Focus 31 , West Wing, Cleveland Road , Hemel Hempstead , HP2 7BW

Any changes we make to this privacy policy will be posted on our websites and where appropriate notified to you by email. We encourage you to bookmark this page and review the privacy policy regularly.

This policy was last updated in January 2020.