See how we are securely protecting your data and your privacy.
At Casa we take your privacy seriously. The following document outlines how we collect, use and protect your personal data across our website and also in our restaurants and when you contact us by phone, email, post or social media.
What personal data is being collected?
Whilst you are using our Websites we may ask you for some personal data, such as your name, email address, address and phone number, demographic information such as your age, gender, location, restaurant preferences and interests when you take part in any of our customer surveys, offers, newsletters and competitions or when you make an online booking. We may also collect your IP address in order to serve you location specific content and tailor our Websites to you. Where you make payment in any of our restaurants using a credit or debit card, we will collect and hold details of such payment card.
How is the personal data collected?
Personal data is collected across the Website as you use the relevant sites. Personal data collection takes place during the following actions – making dining reservations, entering competitions. We may also collect your personal data for the purpose of processing payments in our restaurants, when dealing with any customer service queries and if you complete one of our in-store cards to sign up to receive our latest news and offers.
How is the personal data stored / secured?
Your personal data and privacy is of the utmost priority to us. We are committed to ensuring that any personal data/information gathered is securely stored. To ensure no personal data is collected or disclosed against your will or any unauthorised access is gained, we have implemented the necessary physical, electronic and managerial procedures to safeguard and secure the personal data we collect from you. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Websites; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access. The length of time for which we will securely store any personal data you share with us will depend on the type of personal data and the purpose for which it is being held. The following are indicative periods for which we will retain your personal data:
where we are holding your personal data to enable us to carry out a reservation, until such reservation has been completed (i.e. the date on which you dine with us and for such period thereafter as is necessary for our internal administrative purposes), where we are holding your personal data for payment processing reasons, 3 months following the collection of such personal data.
where we are holding your personal data for customer service reasons, for such period as is necessary to ensure that your query has been dealt with fully and properly in accordance with our usual standards.
Why do we collect this data?
We would like to collect your personal data in order to provide you with the best possible experience and service and to tailor our communications to you. If you choose to provide us with your age, gender, location and any other demographic or preference information, this personal data will be subject to automated processing to create a profile of you and your preferences which will then be used to seek to tailor our communications to you. If you are not comfortable with this automated processing, please contact us using the details below to let us know. By allowing us to collect your IP address and cookies, your experience on our Websites will be maximised as our sites rely on some of the personal data you supply to function at their optimum level. This personal data will not be used for any other purpose.
What is our lawful basis for our use of your personal data?
Where we are using your personal data for direct marketing purposes, our lawful basis for such processing will be your consent. Where we are using your personal data to make a booking/reservation, process a payment or provide our customer services to you, our lawful basis for such processing will be performance of a contract.
You may withdraw your consent at any time
As noted above, some of our processing is subject to the lawful basis of “consent”. You are able to withdraw your consent to such processing at any time by either contacting us using the details set out below, following the “opt-out” link in any marketing communications we send to you or adjusting your preferences in our members area.
Sharing your data
We do not sell your personal information to any 3rd party organisations. We do, however, share your data with certain third parties in order to provide our highest quality service to you, this includes: our marketing agents, our email mailing list provider, our IT service provider, our payment processor and our online booking provider. In addition, we may make the following disclosures of your personal data to third parties where required:
In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Checking your details
If you wish to amend or verify the details you have submitted to us you may do so by contacting us via the email address or address given below. Our security procedures mean that we will request proof of identity before we reveal information.
Deleting your data
If at any point you no longer want to receive communications from Casa and you wish to permanently delete your personal data records we will, subject to not requiring such personal data to be retained for any legal or other valid reason, facilitate this without undue delay upon receiving your communication. This action can be instigated at any time by the following methods (please note that if you do make such a request by phone, we will also require confirmation of this in writing for our records): Phone – 0441225251053 Email – email@example.com
Your rights in respect of your personal data
In addition to your right for your personal data to be deleted (as set out above) you have various other rights in respect of your personal data, as follows:
a right of access to a copy of the personal data we hold about you;
a right to object to processing that is likely to cause or is causing damage or distress to you;
a right to prevent processing for direct marketing;
a right to object to decisions being taken by automated means;
a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
a right to claim compensation for damages caused by a breach of the Act.
We may make changes to this policy
Your right to make a complaint in respect of our use of your personal data
You have the right to complain to your relevant supervisory authority in respect of our use of your personal data. If you are a UK resident, your complaint would normally be addressed to the Information Commissioner’s Office. Please contact us before you escalate your complaint.
We are always pleased to hear from our customers. We are always grateful for any time you spend providing us with the knowledge we need to ensure our customers are completely satisfied – we want to work with you and want you to recommend us to your friends, family and associates. If you have any questions or feedback about this statement, or if you would like us to stop processing your personal data, please do not hesitate to contact us and will be delighted to answer any questions you may have. You can either contact us by Emailing firstname.lastname@example.org or calling 0441225251053.
Privacy Notice – Test & Trace
To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.
By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.
As a customer you will be asked to provide some basic information and contact details. The following information will be collected:
• the names of all customers
• a contact phone number for each customer
• date of visit and arrival time and departure time
As the data controllers for the collection of your personal data Casa will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.
The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.
NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.
For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).
We may require you to pre-book reservations or to complete a form on arrival.
Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.
However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.
Your information will always be stored and used in compliance with the relevant data protection legislation.
Casa Cookies Policy
You will be given the opportunity to opt in/opt out of certain cookies (including those that collect personal data about you) we use but as mentioned above opting out could disable the functionality and features they add to our Websites. Once you have agreed to opt in we will always provide you with the opportunity to opt out at any time. You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of our Websites and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of our Websites. Therefore it is recommended that you do not disable cookies.
The Cookies We Set
When you submit personal data to us through a form such as those found on contact pages, competitions, bookings or comment forms cookies may be set to remember your user details for future correspondence or relevant content sharing.
Third Party Cookies