GDPR Privacy Notice

We take your privacy very seriously and treat all your personal data we collect in accordance with this privacy policy. This privacy policy sets out the basis on which any personal data we collect from you, that you provide to us, or that other third parties provide to us, will be processed by us.

This privacy policy applies to personal data collected when you: -

Visit one of our websites: www.premierinnbed.co.uk (the "websites"):

Interact with our brand (Premier Inn Hotels Ltd);

Purchase products from us or from one of our stockists;

Contact us, for example by telephone, email, post or through submitting a form on our websites;

Provide products or services to us;

Contacts

Identity and contacts of the controller or joint controllers

This site is operated by the Silentnight Group Limited, on behalf of Whitbread PLC (we, our, us). For the purposes of the applicable UK and EU data protection laws ("Data Protection Law"), the data controller is Whitbread PLC ("we","our", "us"), Whitbread Court, Houghton Hall Business Park, Porz Avenue, Dunstable, Bedfordshire, LU5 5XE, United Kingdom Our Data Protection Officer is:

Whitbread Customer Services,

Porz Avenue,

Whitbread Court,

Dunstable,

Bedfordshire

LU5 5XE. 

Email: privacyofficer@whitbread.com

What Personal Data We Use

Information that we collect about you

We may also collect and process records of any correspondence and communications that you have with us and a record of transaction history and details of transactions conducted on our websites is kept by us together with details of the fulfilment of any of your order.

We monitor, record, store and use any telephone, email or other communication you provide (including call recordings) in order to check any instructions given to us, for training purposes, for crime prevention and to improve the quality of our customer service.

As you move around our websites, subject to appropriate consents being obtained, we will collect information about your visit, such as which pages you visit, how often you visit and what links you click on.

This will include technical information such as Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, operating system and platform and information about your visit such as the full Uniform Resource Locators (URL) clickstream to, through and from our websites (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

We may also receive information about you if you use any of the other services we provide. In this case we will have informed you when we collected that personal data that it may be shared internally and combined with personal data collected on the websites for the purposes set out in this policy, including helping us to build a profile of you to get to know you better, and so that we can personalise and enhance your customer experience with us, for example; to ensure that content is relevant for you.

In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.

General information on Klarna can be found here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.

We also collect CCTV images of you when you visit one of our own showrooms. Please note that our stockists may also operate CCTV on their premises, the operation of which is subject to their own privacy policies.

Where you apply for a job with us we will take notes about your interview or application which include your personal data.

Information that you give us

When you purchase products or make enquiries about our products, enter a competition, register to use our websites or otherwise provide us with your personal data while either on our websites or through one of our local stockists, contact us with a query or complaint, apply for a job with us, visit one of our showrooms, or provide services or products to us as a supplier, you may provide us with information about yourself.

This may include your name, address (including your billing and delivery address details where appropriate), your email address, contact telephone number, date of birth, gender details of any comments or feedback which you provide to us, and job application information.

If you sign up to be kept informed about our promotions and products you will also provide us with your name and email address.

We will also require your credit/debit card details from you where you are purchasing products from us. We will use this information to supply you with the products that you have purchased and to help us prevent fraud.

Information that we receive about you from other sources

We may receive personal information about you from other sources such as retailers of our products, social media platforms where you make your information publicly available, publicly available customer lists lawfully acquired from third party vendors and from third parties who work with us in connection with our websites and services.

Where you apply for a job with us, we may also receive personal data about you when we seek references from your previous employers and other referees.

Why We Collect Your Personal Data

a) Purposes

to administer our websites and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

to carry out appropriate and necessary investigations and discharge our legal and regulatory obligations and duties, including to comply with anti-fraud and anti-money laundering requirements, and (where applicable) to safeguard our staff and other customers / users in respect of unlawful, disruptive or objectionable behaviour in any of our stores or on our websites;

to carry out our obligations arising from any agreements entered into between you and us and to provide you with the information, products and services that you request from us;

to improve our websites to ensure that content is presented in the most effective manner for you and for your computer;

to enhance our website experience to ensure you receive a personalised and continuously improving customer service;

to allow you to participate in interactive features of our websites, when you choose to do so;

as part of our efforts to keep our websites safe and secure;

for data-matching purposes in respect of your use of our websites / services and your use of certain third party services;

to deliver (whether directly or indirectly via third parties) effective and personalised marketing material and content of Whitbread PLC and where you have consented, other companies within our Group and to assist us in the improvement and optimisation of advertising, marketing material and content, our services and the websites;

to measure, understand or monitor the effectiveness of advertising, promotions, marketing material and content and any joint initiatives with our affiliates, suppliers, partners, subcontractors and other selected third parties;

to provide you with marketing information about other services or products we offer that are similar to those that you have already purchased, or services or products you have consented to receiving on the websites or in-store; to notify you about changes to our services and/or products;

to build an anonymous profile of you, your preferences and your habits, so we can provide you with advertisements and content that is more relevant to your interests & to provide customer support;

to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you where permitted; and/or

to make suggestions and recommendations to you and other users of our websites or services about products or services that may interest you or them.

Information we receive from other sources. We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).

to ensure that content from the websites is presented in the most effective manner for you and for your computer.

b) Lawful Basis

Data Protection Law requires that we meet certain conditions before we are allowed to use your data in the manner described in this privacy policy. We take our responsibilities under data protection laws extremely seriously, including meeting these conditions. To use your personal data, we will rely on the following conditions, depending on the activities we are carrying out:

Compliance with legal obligations: As an entity established under the laws of England and Wales, Whitbread PLC is obliged to comply with UK laws and guidance provided by UK regulatory bodies. In particular, we will need to process your personal information to verify your identity, establish your age and to verify your source of funds for anti-money laundering and fraud purposes.

Necessary for the entry into / performance of a contract: When you enter into a transaction with us, a contract between you and us will have been entered into. In order for us to fulfil our obligations under such contract (e.g. to allow you to purchase products from us), we will need to collect and process your personal information. Failure to provide the requisite personal information on sign-up and financial information on entering into the transaction or objecting to this type of processing / exercising your deletion rights will unfortunately mean we cannot provide our goods / services to you.

Consent: We may send you marketing messages by email about us and our products and offers where you have not unsubscribed and where you have purchased similar products from us. We provide easy ways to stop our marketing, and you can opt out at any time.

If you are not a customer of ours but have provided us with consent to use your details for marketing purposes, then we may also contact you about our products.

In each of the situations above, you have the right to withdraw your consent at any time and can object to processing of this nature.

Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we will rely on a condition known as "legitimate interests". It is in our legitimate interests to collect your personal data as it provides us with the information that we need to provide our services to you more effectively. Effectively, this requires us to carry out a balancing test of our interests in using your personal data (for example, in order to provide you with the information, products and services that you request from us), against the interests you have as a citizen and the rights you have under data protection laws (for example, to not have your data sold to third party marketing companies without your knowledge, or not store your personal data in insecure or unstable countries or regions), which is set out below.

c) Legitimate interest pursued

Legitimate interest

We have a legitimate interest in processing your information as:

You benefit from the provision of products and services;

We have a legitimate interest in recording calls to monitor staff performance, train staff, and improve our processes;

We will both benefit from the ability to enforce or apply rights under any contract between us;

We are required to ensure health and safety of our showrooms and have a legitimate interest in ensuring any processes are effective;

We have a legitimate interest in ensuring the security of our showrooms, and in assisting with the prevention and detection of crime;

We both benefit from the processing of your job application with us;

We both benefit from the provision of services and products where you are a supplier to us;

we would be unable to provide our products and services without processing your information.

Necessity

We consider that it is reasonable for us to process your personal data for the purposes of our legitimate interests outlined above as we process your personal data only so far as is necessary to achieve the purpose outlined in this privacy policy.

Impact of processing

We consider that it is reasonable for us to process your personal data for the purposes of our legitimate interests outlined above as the processing of your personal data does not unreasonably intrude on your privacy.

With Whom We Share Your Personal Data

We will disclose your information to:

business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; e.g. service providers who operate elements of our website service and process personal data on our behalf. These may include businesses who provide technology services such as hosting for our servers and email distribution, and business partners who provide delivery fulfilment services. We may also disclose your personal data to our supply and delivery partners for the purpose of processing and fulfilling your order. Where such disclosures are made, this will be under contractual arrangements with us and carried out in accordance with the requirements of the Act.

third party suppliers and service providers to the extent they assist our group with its legal / regulatory obligations e.g. providers of services in respect of anti-money laundering, fraud, verification etc.;

selected third parties so that they can contact you with details of the services that they provide, where you have expressly opted-in/consented to the disclosure of your personal data for these purposes;

analytics and search engine providers that assist us in the improvement and optimisation of our websites and other selected third parties; and

law enforcement agencies, or other appropriate third parties, where we consider your behaviour to be unlawful, offensive, inappropriate or objectionable in one of our stores or on our websites.

We will disclose your personal information to third parties:

in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

in the event of any insolvency situation (e.g. the administration or liquidation) of Whitbread PLC or any of its group;

if Whitbread PLC or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

to protect the rights, property or safety of us, our staff, our customers, or others. This includes exchanging information with other companies and organisations (including without limitation, other third parties, your employer, educational institution, email or internet provider, your parents (if you are under the age of 18) and law enforcement agencies) for the purposes of staff and customer safety (whether this is in-store or online), crime prevention, fraud protection and credit risk reduction; and

if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or regulatory requirements or in order to enforce or apply our terms of use and other agreements, or otherwise for the prevention or detection of fraud or crime.

In assessing your request for products or services, we may use your personal data for the purposes of the prevention and detection of fraud. One of the purposes for which we may disclose your address and postcode details is to check against the IMRG Security Alert or any other Fraud Prevention Scheme. At all times where we disclose your personal data it will remain secure.

Third Party Services

We may from time to time make available through our websites certain services provided by third parties. To gain access to these services, you must register with these third parties and deal with them direct. Please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How Long We Store Your Personal Data

We will only retain your personal data for as long as necessary for the purposes listed above.

Information will typically be deleted within 7 years from date of our last positive interaction with you to enable us to deal with any issues or concerns you may have about how we processed your order or otherwise, and also to allow us to bring or defend legal proceedings.

If You Don’t Provide Us Your Personal Data

You are not obliged to provide your personal data to us. However, if you do not provide your personal data to us, we may not be able to provide products to you, respond to your queries, enter you into competitions, or process your job application.

Your Rights

You have a number of rights under data protection law in relation to the way we process your personal data, although these are not absolute and in some instances we may be unable to accept your request, in which case we will respond to you to explain why. These are set out below.

You may contact us using the details on our websites (or by contacting us directly – details below) to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request.

Our Data Protection Officer is:

The Data Protection Officer

Whitbread Customer Services,

Porz Avenue,

Whitbread Court,

Dunstable,

Bedfordshire

LU5 5XE. 

Email: privacyofficer@whitbread.com

Please address any questions, comments and requests regarding our data processing practices to us in this way in the first instance.

1. You have the right to request access to your personal data

You have the right to request confirmation that your personal data is being processed, access to your personal data (through us providing a copy) and other information about how we process your personal data.

2. You have the right to ask us to rectify your personal data

You have the right to request that we rectify your personal data if it is not accurate or not complete.

3. You have the right to ask us to erase your personal data

You have the right to ask us to erase or delete your personal data where there is no reason for us to continue to process your personal data. This right would apply if we no longer need to use your personal data to provide products or services to you, where you withdraw your consent for us to market to you, or where you object to the way we process your personal data (see right 6 below).

4. You have the right to ask us to restrict or block the processing of your personal data

You have the right to ask us to restrict or block the processing of your personal data that we hold about you. This right applies where you believe the personal data is not accurate, you would rather we block the processing of your personal data rather than erase your personal data, where we do need to use your personal data for the purpose we collected it for but you may require it to establish, exercise or defend legal claims.

5. You have the right to port your personal data

You have the right to obtain and reuse your personal data from us to reuse for your own purposes across different services. This allows you to move personal data easily to another organisation, or to request us to do this for you.

6. You have the right to object to our processing of your personal data

You have the right to object to our processing of your personal data on the basis of our legitimate business interests, unless we are able to demonstrate that, on balance, our legitimate interests override your rights or we need to continue processing your personal data for the establishment, exercise or defence of legal claims.

7. You have the right not to be subject to automated decisions

You have the right to object to any automated decision making, including profiling, where the decision has a legal or significant impact on you.

Withdrawal of Consent

You have the right to withdraw your consent. You have the right to withdraw your consent where we are relying on it to use your personal data.

In the event you have provided your consent to a third party through us, you must contact that third party direct in order to withdraw your consent.

You may contact us using the details on our websites (or by contacting us directly – details below) to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request.

Our Data Protection Officer is:

Whitbread Customer Services,

Porz Avenue,

Whitbread Court,

Dunstable,

Bedfordshire

LU5 5XE. 

Email: privacyofficer@whitbread.com

International Transfer of Personal Data

Storing & Transferring Personal Data

The personal data that we collect from you is stored on secure information technology systems located in the EEA which are operated by us or on our behalf by third parties. Some data processing in relation to web and email services and delivery of any products ordered by you is carried out on our behalf by a third party. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this privacy policy and Data Protection Law.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to us; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.

Protecting Your Information

Our websites use up-to-date industry procedures to protect your personal information. We also protect the security of your data during transmission using Secure Sockets Layer (SSL) encryption software. We may vary this in the future if we feel you will benefit from greater security whilst using our websites.

We have appropriate security measures in place in our physical facilities to protect against the loss, misuse or alteration of information that we have collected from you via our websites. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

How to Complain

You have a number of rights under data protection law in relation to the way we process your personal data, although these are not absolute and in some instances we may be unable to accept your request, in which case we will respond to you to explain why. These are set out below. You may contact us using the details on our websites (or by contacting us directly – details below) to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request.

Our Data Protection Officer is:

Whitbread Customer Services,

Porz Avenue,

Whitbread Court,

Dunstable,

Bedfordshire

LU5 5XE. 

Email: privacyofficer@whitbread.com

If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner's Office. Their address is:

First Contact Team

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

SK9 5AF

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.