Hook & Ladder DATA Privacy Statement
Who we are?
This is the Data Privacy Statement of Hook & Ladder Café, with head office based at Sarsfield Street, Limerick, phone number +353 61 413 778. We operate cafes under the brand name Hook & Ladder based in Limerick at Sarsfield Street, Castletroy & Corbally and in Waterford on the Tramore Road. We operate a café under the brand Ampersand on Sexton Street in Limerick and we operate cookery schools from Sarsfield Street in Limerick and Tramore Road in Waterford. We also sell home accessories and cater for private events.
This Data Privacy Statement is designed to demonstrate our firm commitment to privacy, our compliance with the General Data Protection Regulation (GDPR) and to inform you of the personal data that we collect and process in connection with your interaction with Hook & Ladder.
It also sets out details of what personal data we process, why we process it, with whom your personal data is shared, and a description of your rights with respect to your personal data
The personal data we hold, process and retain will be used for the management of your account, for administrative purposes, for meeting our legal and regulatory obligations and for marketing, where you give consent. We hold it and use it to protect your rights and interests and to manage our relationship with you appropriately, effectively and lawfully. At the same time, it enables us to run our business.
Where there is a need to process your data for a purpose other than those set out in this Data Privacy Statement, or otherwise outlined to you, we will inform you of this and, if required, we will seek your consent.
For sales transactions made online or over the phone, we collect your name, phone number, email address, billing and delivery address. We aim to process your credit card details at the point of sale, in which case we do not retain your credit card details. In some cases, credit card details are stored to guarantee a reservation. These are stored securely and deleted as soon as they are no longer required.
Online customers can opt to create an account, where they can review their previous orders and they can edit all of their personal data. Credit card details are not stored by us.
Payments on this website are made through our third party payment gateways Realex and Worldpay. These systems use a combination of both established and innovative techniques to ensure the security and integrity of all sensitive data. The transfer of credit card details from Hook & Ladder to Realex and Wolrdpay are encapsulated using encryption and digitally-signed protocol to ensure that the information passed is 100% secure and tamper-proof.
When operating our cookery school, we collect your personal details, including your name, email address and phone number, through an attendance sheet and a feedback form. We securely retain a copy of the attendance sheet as we use this to obtain your consent to be placed on the email marketing list. We securely dispose of feedback forms once we have reviewed them.
Customers can also place orders for collection using our app Flipdish. This requests your name, mobile number and credit card details. It may also request your location details. Flipdish have confirmed that they are fully compliant with the GDPR.
Through the contact form on our website, we collect your name, phone number, email address and a message. This is processed within our secure email system, where access to your details will be restricted to only those who need to deal with your query.
We have an email list, which we use to send a regular newsletter with information about products and offers. We always seek your explicit consent to be placed on this list and you can unsubscribe at any time.
We may also use your personal data to contact you in relation to customer surveys and questionnaires, but will only do so if you have consented to be contacted by us for these purposes.
We use social media, including Facebook, Twitter and Instagram. From time to time we run competitions and promotions, but we do not collect personal data.
We hold onto sales transaction data for customers who are account holders indefinitely in order to provide them with a full purchase history. Once a customer holding an account has been inactive for over five years, all their personal data is deleted. For sales made as one-time purchases, we retain the personal data relating to sales transaction data for fives years only. Your personal data on our marketing list is retained until you withdraw consent.
Your personal data may be disclosed to third parties where we are legally obliged to do so. It will also be disclosed during activities where we have lawful contractual agreements in place that enable us to operate our business.
Where we have sub-contractors in place to handle activities such as operating the cookery school or managing our CCTV, we have professional service contracts in place, which ensure their compliance with GDPR.
Below is a list of third party software providers with whom we share personal data:
- Mailchimp (email marketing)
- Gmail (email and document storage)
- Elive.net (website host)
- Flipdish (online food ordering system)
- WooCommerce (online sales)
- Facebook (advertising)
- Realex (payments)
- Worldpay (payments)
All software providers we work with are either fully compliant or working diligently to ensure compliance.