Table of Contents
2 HOW DO WE COLLECT INFORMATION FROM YOU?. 1
3 HOW DO WE USE THE INFORMATION WE COLLECT?. 1
4 AUTOMATED DECISION/PROFILING.. 1
9 PROTECTION OF YOUR INFORMATION. 1
11 CHANGES TO THE PRIVACY & COOKIES POLICY. 1
12 HOW USERS CAN CONTACT US. 1
1 PRIVACY & COOKIES POLICY
This User Privacy Notice (“Privacy Notice” or “Notice”) was last updated on 19th January 2018. This Privacy Notice may vary from time to time so please check it regularly.
This Privacy Notice explains our privacy and information practices for our website, mobile applications, provision of Wi-Fi and related services and centres (together, “Online Services”). This Notice describes the types of information collected, how that information is used and disclosed, and how you can access, modify, or delete your information.
Land Securities Properties Limited (company number 961477) whose registered office is at 100 Victoria Street London SW1E 5JL (“we”, “us” or “our”) is the ‘data controller’ for the personal data we collect. We are registered with the Information Commissioner’s Office with registration number Z5806812.
2 HOW DO WE COLLECT INFORMATION FROM YOU?
Through our Online Services we collect information about you when you sign up to receive our Online Services, email updates, fill out a feedback form, complete a “contact us” form, buy a gift card or enter a promotion. Not all of the input fields are mandatory and so provision of the information is optional, but if you provide less information this may limit your use of the Online Services or any product or service.
Where we send you information electronically, we do review whether the communication has been opened and whether you have clicked on any links in the communication. This is because we want to make sure that our communications are useful for you.
If you use one of the Wi-Fi networks in our centres, we will collect personal information from you, such as your name and email address in order to log you on to the Wi-Fi network. Through this Online Service, we may also collect data which shows how often, how long and from which one of our centres you are accessing the Wi-Fi services, which will include recording the address of your device that connects to the Wi-Fi network.
We use Wi-Fi within some of our centres that may communicate with your (mobile) device and identify its location if the device has Wi-Fi enabled and is properly configured. This will operate irrespective of whether or not you have subscribed to the Wi-Fi service or any other Online Services. When this location information is analysed it will be aggregated to prevent any identification of individuals. To opt out of the collection of your MAC or Internet Protocol (IP) address and location, turn off your device’s Bluetooth and Wi-Fi capabilities.
If you choose to log-in to our Online Services through your own Social Media accounts, we will also have access to data that is shared from your Social Media provider. Information of what personal data is being shared should be provided to you by your Social Media provider.
We may collect information about your computer or other device, including where available your MAC address, IP address, operating system and browser type, for system administration and to analyse aggregate information. This is statistical data about browsing actions and patterns, and does not identify any individual.
We may also collect information from you automatically when you access and use our Online Services, including the time and duration of your visit, the referring URL, your Internet Protocol (IP) or MAC address, the type of device you use and its operating system. As with most websites, we also operate cookies on ours and further details can be found in the section on cookies below.
3 HOW DO WE USE THE INFORMATION WE COLLECT?
We may use and process the information you have provided for the purposes outlined below as well as for any purposes specified at the time of collection:
- to fulfil a contract by providing the relevant Online Service or information which you have requested, such as providing access to the Wi-Fi service, or fulfilling your order for a gift card;
- to deal with your enquiries;
- administer competitions and promotions;
- secure and verify payments you make;
- to pursue our legitimate interests to tailor the Online Services so the content you see is relevant to you. For example, we may request your date of birth, gender and some basic interests (such as ‘shopping’ and ‘dining’) so that we can provide you with content that we think you will be interested in;
- to pursue our legitimate interests to collect statistics, responses to any surveys and questionnaires, traffic patterns and related site information, including data analytics concerning traffic around our centres. For example, where we have a post code we will use this to understand where customers travel from to reach our centres. We aggregate this data so as it does not identify any individual visitors. We use it for research, analysis, testing, monitoring, risk management and administrative purposes including the optimisation of service delivery at our properties and to improve the customer experience; and
- to send you important notices such as communications about changes to this Privacy Notice and any terms and conditions and policies of our Online Services.
If you consent, we may use your information to contact you via email, SMS or social media channels about our new developments, services and any other information we think may be of interest to you. We may pass your details within our group of companies so that they can contact you via email SMS or social media with details of developments and activities which may interest you.
- We may also pass on or allow access to your information:
- to third parties to deliver a service to you, such as where you have purchased a gift card or where you have requested access to WI-FI;
- to our suppliers, contractors and professional advisors where this is necessary for them to provide services and facilities to us, for example:
- to enable marketing agencies to generate newsletters on our behalf;
- to put your email and preference data in a marketing database that is used to send you email marketing;
- to collate the responses you have provided through our feedback forms with our survey providers.
- to any purchaser of all or part of our business or any of our properties to which the Online Service relates;
- to sell, make ready for sale or dispose of our business in whole or in part including to any potential buyer or their advisers;
- where we are required to do so by law, court order or other legal process;
- where, acting in good faith, we believe disclosure is necessary to assist in the investigation or reporting of suspected illegal or other wrongful activity. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;
- to protect and defend our rights or property;
- to deal with any misuse of any Online Services; or
- in order to enforce or apply our terms and conditions and other agreements with third parties.
- We may disclose your personal data to our group companies and affiliates or third party data processers who may process data on our behalf to enable us to carry out our usual business practices.
4 AUTOMATED DECISION/PROFILING
We tailor our marketing communications to your interests to ensure that these are relevant to you so that you engage with the content we provide to you.
5 DATA RETENTION
We retain the information we collect for as long as necessary to provide the Online Services and any other products and services you have requested, or for other essential purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements.
6 YOUR RIGHTS
When you use our Online Services and provide us with your personal data you are agreeing that we may use your personal data for the purposes set out in this Privacy Notice.
You have the right to opt out of receiving any marketing information which we send you.
If our processing of personal data is based on your consent, you have the right to withdraw consent for future processing at any time by contacting us. Please note, however, that we may still be entitled to process your Personal Data if we have another legitimate reason (other than consent) for doing so;
You have the right to obtain information regarding the processing of your Personal Data and access to the Personal Data which we hold about you;
In some circumstances, the right to receive some Personal Data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to Personal Data which you have provided to us;
You have the right to request that we correct your Personal Data if it is inaccurate or incomplete;
You have the right to request that we erase your Personal Data in certain circumstances. Please note that there may be circumstances where you ask us to erase your Personal Data but we are legally entitled to retain it;
You have the right to request that we restrict our processing of your Personal Data in certain circumstances. Again, there may be circumstances where you ask us to restrict our processing of your Personal Data but we are legally entitled to refuse that request; and
You can also contact the Information Commissioner’s Office via https://ico.org.uk/ for information, advice or to make a complaint.
If you wish to opt out of the marketing we sent you, please contact:
westwood.x@savillspm.co.uk
If you wish for further information, or wish to exercise any other right, please contact dataprotection@landsec.com
We will respond to your request (including providing information on whether the rights apply in the particular circumstances) within the applicable statutory time period. If we are not sure of your identity, we may require you to provide further information in order for us to confirm who you are.
7 CHILDREN
Children under the age of 16 are not permitted to use Wi-Fi networks.
If you have reason to believe that a child under the age of 16 has provided personal information, please contact us and we will delete that information from our databases.
8 HOW DO WE USE COOKIES?
Cookies (and similar technologies) are small files which are sent by websites and stored on your device. They collect information about how the website is being used by those accessing it and allow websites to remember information. You can find out more about cookies at www.allaboutcookies.org.
In our website we use cookies to collect information of how many visitors there are to different parts of the website, which helps us keep our site up to date. We may also use cookies to tailor the content that you see to suit your interests. This facility also allows you to receive personalised advertising relating to products viewed whilst using our website.
Most devices will automatically accept all cookies. However, you can change your browser settings so that cookies are refused. Guidance on how to change your settings can be found at the website referred to above or look at the “help” menu of your device. Please be aware however that blocking cookies may hamper the website’s functionality or restrict how much of the website you can access.
9 PROTECTION OF YOUR INFORMATION
We have in place administrative, technical and physical measures on our website and internally designed to guard against and minimise the risk of loss, misuse or unauthorised processing or disclosure of the personal information that we hold.
From time to time we may transfer your personal information to our group companies, suppliers or service providers based outside of the European Economic Area (EEA) for the purposes described in this privacy policy. If we do this your personal information will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators (like the US ‘Privacy Shield’ scheme).
We will also ensure that where information is transferred to a country or international organisation outside of the UK / EEA, we will comply with the relevant legal rules governing such transfers.
We keep your personal information no longer than is necessary for the purpose for which it was collected.
10 LINKS TO OTHER WEBSITE
This Privacy Notice only applies to the Online Services and websites provided by us. If you link to another service and/or website from here, you should remember to read and understand that service and/or website’s privacy and cookies policy as well. We are not responsible for any use of your information that is made by other services and/or websites. Links or advertisements do not imply that we endorse or have reviewed such third parties or their privacy practices.
11 CHANGES TO THE PRIVACY & COOKIES POLICY
This Privacy Notice was last updated on 19th January 2018. If it is necessary for us to alter the terms of the Privacy Notice, we will post the revised Privacy Notice here. We encourage you to frequently review the Privacy Notice for the latest information on our privacy practices. For any material changes to the Online Services, we will also notify you by email.
12 HOW USERS CAN CONTACT US
If you have any questions about this Privacy Notice, please contact us at dataprotection@landsec.com