1. Who we are
We are Mark Andrew Developments (MAD) Limited (company number: 04335090) (“we”, “our” and “us”). We operate a number of venues within the MAD brand including Hula, the Fitzgerald, Tusk, Walrus, Rosylee, Lazy Lizard and Blue-Pig (“venues”). We also operate the website www.markandrewdevelopments.com (“website”). We are the company that collects your personal and controls how it will be used (the “data controller”).
- Scope of this policy
We are committed to respecting your privacy and protecting the personal data you share with us and that we collect about you. This policy tells you about how we use the personal data we collect about you when you use our website, visit one of our venues or otherwise communicate with us. It also provides more information about your privacy rights and how the law protects you.
Please read this policy before browsing our website, making a reservation with us, completing any in-venue form, booking any of our venues for your event, signing up to any of our mailing lists, signing up to the guest list of any event at one of our venues, completing a purchase with us (whether sold by us or on our behalf) and/or accessing the Wi-fi at any of our venues.
- What personal data do we collect and what do we do with it?
The table below sets out the personal data we may collect from you when you use our website or visit one of our venues, how this is used by us and our lawful basis for such use. Please also see the Monitoring and CCTV section below.
|Your activity||Personal data collected||How we use such personal data||Our lawful basis for such use|
|Booking a table, area or event at one of our venues by phone, by email, by social media, by post or in person||Name, email address, address, phone number, date of birth and any other personal data you may provide to us about you and anyone on whose behalf you are making the booking as part of your booking.||To process, confirm and fulfil your booking.We may also (but only if you consent) add you to our mailing list – please see the signing up to receive the latest information, news, offers, events and competitions relating to our venues section below.We may also use this information for our own analytical purposes to assist in understanding and predicting customer trends and to help with our business planning.
|Our lawful basis for use of your personal data to process, confirm and fulfil your booking is performance of a contract with you.Our lawful basis for use of your personal data for analytical purposes is pursuance of our legitimate interests of understanding our customers and assisting in business planning.|
|Purchasing tickets for any events at our venues using the website, a third party service provider’s website, by phone, by email, by post or in person||Name, email address, postal address, phone number, payment details and any other personal data you may provide to us (or our authorised representative) as part of your purchase.||To process, confirm and fulfil your booking, to collect payment from you and to administer and manage our relationship with you.We may also (but only if you provide opt in consent to this) add you to our mailing list – please see the signing up to receive the latest information, news, offers, events and competitions relating to our venues section below.||Our lawful basis for use of your personal data to process, confirm and fulfil your booking, collect payment from you and administer and manage our relationship with you is performance of a contract with you.|
|Signing up to the guest list at one of our venues||Name, email address and phone number.||To add you to our guest list for the relevant event.With your consent, to add you to our mailing list – please see the signing up to receive the latest information, news, offers, events and competitions relating to our venues section below.||Our lawful basis for using your personal data to add you to our guest list is our legitimate interests of accommodating guests at events.|
|Signing up for a MAD industry card in one of our venues||Name, email address, job title, employer, date of birth, phone number.||To add you to our MAD industry card club and enable you to benefit from exclusive offers available to hospitality staff.With your consent, to add you to our mailing list – please see the signing up to receive the latest information, news, offers, events and competitions relating to our venues section below.
|Our lawful basis for using your personal data to add you to our MAD industry club is pursuance of our legitimate interests of attracting you to our venues.|
|Signing up to receive our newsletter using the website||Email address and IP address.||To add you to the mailing list for our newsletter, send you our newsletter with your consent and to review your engagement with our newsletters.||Our lawful basis for sending you our newsletter will be your consent.Our lawful basis for retaining your IP address to measure your engagement with these messages is pursuance of our legitimate interests of ensuring that we are sending out interesting and appropriate messages to our customers.|
|Signing up to receive the latest information, news, offers, events and competitions relating to our venues||Name, email address, address, phone number, date of birth and IP address.
|To add you to our mailing list to receive the latest information, news, offers, events and competitions relating to our venues and to review your engagement with any such messages we send to you.We may use your date of birth to confirm that you are eligible to receive drinks offers and, along with your home address, to assist us in analysing the profile of our customers.
|Our lawful basis for sending you these messages is your consent.Our lawful basis for retaining your IP address to measure your engagement with these messages is pursuance of our legitimate interests of ensuring that we are sending out interesting and appropriate messages to our customers.Our lawful basis for use of your date of birth to confirm eligibility to receive drinks offers is our compliance with laws.
Our lawful basis for our analysis of your date of birth and address is pursuance of our legitimate interests of understanding our customers and being able to improve our business.
|Accessing the Wi-fi in any of our venues||Email address, device information and IP address.||To provide access to our Wi-fi and remember your details so you will automatically connect to our Wi-fi next time you are in our venue.With your consent, to add you to our mailing list – please see the signing up to receive the latest information, news, offers, events and competitions relating to our venues section below.
|Visiting our Lazy Lizard venue||IP address||To monitor the number of customers Lazy Lizard has at any time and how long such customers have stayed in the venue. This data will be anonymised once the IP address has been initially obtained.||Our lawful basis for using your personal data in this way is pursuance of our legitimate interests of monitoring our customer numbers so we can plan appropriately.|
|Browsing our website||IP address, device details and location.||To improve the functionality and usability of our website for our users.||Our lawful basis for using your personal data in this way is pursuance of our legitimate interests of improving our website and service to our customers.|
|Submitting an enquiry to us by phone, by email, by social media or by post.||Name, email address, phone number and any other personal data you may provide to us as part of your enquiry.||To respond to and deal with your query.||Our lawful basis for use of your personal information for responding to and dealing with your enquiry is our legitimate interests of servicing our customers.|
Where we send you marketing communications on the lawful basis of “consent” (please refer to the above table), you are able to withdraw your consent to such processing at any time by either contacting us using the contact details set out below or by following the “opt-out/unsubscribe” option in any marketing communications we send to you.
- Sharing of Personal Data
We do not sell your personal data to any third parties. We may share your personal data with our carefully selected third party service providers who help us provide our products and services to you, including:
- Mailchimp (The Rocket Science Group LLC) who store our mailing databases and send communications on our behalf.
- Our online reservations and booking providers (including Sevenrooms and Skiddle).
- Our Wi-fi provider, Social Wi-Fi
- Our online analytical service providers, including Google Analytics
- Our professional partners, including our marketing agencies, event facilitators and website
- Our IT and technical service providers.
- Our management system hosts, Fourth Hospitality
- Our footfall analyst, Telcom Networks Limited.
In certain circumstances we may also need to share your personal data with our legal advisers, bankers, auditors and insurers and our regulators and other authorities, including HM Revenue & Customs.
We may also share your data with third parties in the following circumstances:
- if we are under a legal or regulatory duty to do so;
- to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity;
- where such disclosure is necessary to protect the safety or security of any persons;
- if we sell or buy any business or assets in which case we will disclose your personal data to the prospective seller or buyer;
- if we or substantially all of our assets are bought by a third party, in which case personal data held by us about our customers will be one of the transferred assets; and or
- otherwise as permitted under applicable law.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and only permit them to use your personal data for specified purposes and in accordance with our instructions.
- International Transfers
Mailchimp (who holds our mailing database and sends our mailings on our behalf) is located in the United States. Mailchimp participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and is committed to protecting your personal information.
- Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such information.
Our website may include links to third-party websites, plug-ins and apps. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and apps and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website and app you visit.
- Monitoring and CCTV
Please note that for your safety and security, CCTV is in operation our venues (both inside and at the entrance(s) to and in any outdoor areas of the relevant venue). Such CCTV footage is retained for up to 30 days following initial collection, unless we need to retain this for longer as a result of a particular incident that has taken place at one of our venues.
We occasionally take videos and photos in our venues for use on our website, publications and social media but, unless you have specifically consented, you will never be the sole focus of these images. If you do see an image of you which we have taken which you would like us to remove from the relevant media and stop using, please contact us to let us know using the details set out below.
- How long will we keep your information for?
Generally, we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
Event/table bookings, ticket bookings and guest list details: where we are holding your personal data to enable us to fulfil an event/table booking, process a ticket booking and/or add you to our guest list, it will be held for three years following the date of your reservation/event, unless you have chosen to join our mailing list (in which case please see below).
Mailing lists: where we are holding your personal data on any of our mailing databases (including our newsletter), we will keep this for such time as you wish to continue to be part of our mailing list (i.e. until you “opt-out”) or if you have not ‘engaged’ with us (made an enquiry, reservation, purchased a ticket, opened an email, clicked-through from an email, logged into Wi-fi etc.) in at least the previous 3 years.
Wi-fi access: where we are holding your personal information for the purpose of allowing you access to Wi-fi in one of our venues, we will hold this for 18 months following your most recent login, unless you have chosen to join our mailing list (in which case please see above).
Customer services: where we are holding your personal data for customer service reasons or to deal with an enquiry you have submitted, it will be held for such period as is necessary to ensure that your query has been dealt with fully and properly in accordance with our usual standards, we may continue to hold this data after we have finished dealing with your enquiry to assist us in protecting our legal rights which means that your data can be retained for up to 7 years following the date of collection.
Payment processing: where we are holding your personal data for payment processing reasons, such personal data will be retained for 7 years following your purchase.
Technical Information collected whilst browsing our website: where we are holding personal data relating to your use of the website, we will hold this for 90 days following collection.
- Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the following:
- The right to request access to a copy of the personal data we are holding about you.
- The right to request that the personal data we are holding about you be updated/corrected.
- The right to request erasure of the personal data we hold about you.
- The right to object to our processing of your personal data on the basis of our legitimate interests (please refer to table above).
- The right to object to processing for direct marketing.
- The right to request that we restrict our processing of your personal data in certain circumstances.
- The right to request that your personal data be transferred to you or another provider.
- The right to withdraw your consent where we are processing your personal data on the basis of your consent (please refer to the table above).
If you wish to exercise any of the rights set out above, please contact us using the details below.
You also have the right to make a complaint to your data protection regulator (in the UK, this will be the Information Commissioner’s Office (ICO) (www.ico.org.uk ). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us first before escalating your complaint.
- Contacting us
If you have any questions about this policy or the personal data we collect about you, please contact us at GDPR@markandrewdevelopments.com, by phone to 0161 237 0637 or by post to MAD House, 9 Stevenson Square, Manchester, M1 1DB.
Our data protection manager is Rosalind Haskins.
- Changes to this Policy
We may change this policy from time to time to reflect how we are processing your personal data so you should review this policy regularly. Any updates will be published on our website and, where we are holding your personal data we will (where reasonably practicable) communicate any updates to you.