Publication Date:1st May 2018
What does this policy cover?
This policy describes the processing of your personal data in relation to your use of the website www.bookedit.co.uk or the Booked It app on iOS and Android (“platform”) by Licklist Holdings Limited T/A Booked It (09933601 WeWork Aldgate Tower, 2 Leman Street, London, E1 8FA) (“we”, “us” or “our”), as the owner and operator of the website and app.
For the purposes of applicable data protection law (including, the General Data Protection Regulation 2016/ 679 (the “GDPR”), we are a ‘data controller’ of your personal data.
Where applicable, this policy should be read alongside Booked It’s terms and conditions which tell you about the terms on which you may use the platform.
What personal data is collected?
- Personal data collected from you:The following categories of personal data will be collected about you in connection with your use of the platform and your interaction with us, including, but not limited to, when you fill in forms on the platform or provide us with information whilst in a bar or club, and submit user-generated reviews or ratings, engage in any social media functions on the platform, make transactions in a participating venue using a card linked to the Booked It loyalty app:
- Personal Identification Information: such as, your name, date of birth, gender;
- Contact Information: such as, email address and telephone number;
- Demographic Information: such as, postcode;
- Preference information: such as, favourite music, favourite venues, favourite drinks;
- Spending habbits and drinking habbits based on transactional data;
- Venues you visit and frequency of visit;
- Social media identification information, such your Facebook page address, your Twitter handle, your Instagram handle and profile picture;
- Photographs of you; and
- Your marketing preferences, including any consents you have given us.In addition, if you contact us by phone, email or otherwise, we may keep a record of that correspondence.Please note that Booked It will not store credit or debit card information from payments made through our services other than where it is necessary for us to complete our obligations to you.
- Personal data collected about you:
- From Others: Although we generally collect personal data directly from you, we also collect certain categories of personal data about you from other sources.
- Automatically Collected Information: [such as, web browser type and version, operating system, the platform you came from and exit to, your IP (Internet Protocol) address, your browser settings, the date and time of your visits, and details regarding your interaction with the platform (including which pages or resources on the platform you access);]
How is your personal data used, and what is the legal basis for this use?
We process your personal data for the following purposes:
- Contractual Necessity: As required to establish and fulfil a contract with you, for example: if you make a purchase from us (this will include taking payments); communicating with you and providing customer services; and in order to administer our loyalty programme.
- Legitimate Interests: As required by us to pursue our own legitimate interests, in particular:
- facilitating the creation of, and securing, online registered accounts
- managing, operating and improving online registered services (incl. enabling you to manage your marketing preferences), and customer journeys on the platform;
- monitoring any online feedback/reviews to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
- delivering tailored advertising (incl. via Facebook look-a-like and custom audience);
- we will use data in connection with legal claims which concern our company, group or partners, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);
- creating user / customer insights based on transactional behaviour segments to drive targeted direct marketing;
- creating user / customer insights based on demographic segments to drive targeted email direct marketing and also carrying out market research and surveys;
- communicating with you; and
- investigating and handling any complaints received from you about our platform, or our services.
You can obtain further information on the legitimate interests balancing exercises which we have carried out by contacting us using the contact details provided below.
- Legal Compliance: To ensure compliance with applicable laws and legal processes including, but not limited to, use in connection with legal claims, compliance, regulatory, tax, investigative purposes (including disclosure of such information in connection with legal process or litigation and to law enforcement agencies).
- Consent: Subject to the following, we will send you direct marketing by email, SMS, push notifications, telephone, post, in-App and online about Booked It services which we think may be of interest to you. This will only be sent where you have given your consent to Booked It during the online sign-up process or verbally, or (where permissible) you have been given an opportunity to opt out. You will be able to opt-out of electronic direct marketing by clicking the unsubscribe link contained in the email itself and, in all other cases, by updating your preferences on the Booked It platform.
[Visitors under 18 years of age are not permitted to Subscribe to our services use and/or submit their personal information on any of our website or applications. We do not knowingly solicit or collect information from visitors under 18 years of age.] We encourage parents and guardians to spend time online with their children and to participate and monitor the interactive activities of their children.
Who will your personal data be shared with, and where?
We will share your personal data with:
- third party service providers, who will process it on our behalf for the purposes above. Such third parties include, but are not limited to, couriers for delivery of your orders, customer service operations, and marketing providers;
- government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our own legitimate interests in compliance with applicable laws; and
- purchasers or prospective purchasers of all or part of our assets or our business, and their professional advisers, in connection with the purchase.
- Booked It partner venues for marketing campaigns providing the relevant consent has been given
- We share the information that you provide to us with our staff so that we can provide our products and services to you.
Where we store your Personal Data
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted (using SSL technology). Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
In addition, where you are a Promoter/Venue and import your database of personal information into our system, your database is stored on our secure servers. We do not, under any circumstances, sell or give access to your database. If an individual whose information is on your database complains or contacts us, we might then contact that person. Only authorised employees of Booked It have access to view this Personal Data. Please note that you may export (download) your database from us at any time.
Please note, if we detect abusive or illegal behaviour related to your database, we may share your database or portions of it with affected ISPs or anti-spam organisations.
Where we act as a data processor
If a Venue/Promoter imports its own database or other contact information it has collected into the Server, that database shall remain owned by that Venue/Promoter. The Venue/Promoter shall be the Data Controller in relation to any Personal Data collected pursuant to this clause. Booked It will be a Data Processor of this data and shall comply with its obligations as a Data Processor.
Further to this, the Venue/Promoter warrants that, where it is a Data Controller, it shall provide each Data Subject with the required information as set out in Article 14 of the GDPR, including but not limited to the identity and contact details of the Venue/Promoter, the purposes for processing their information and the categories of personal data with which the Venue/Promoter is concerned.
If a Customer, or other User, creates an account on the Lickist platform and follows a Venue/Promoter (including a Data Subject who was initially introduced to the Service through the importing of a database), that User’s data shall become part of Booked It’s database.
Where the above occurs, both Booked It and the Venue/Promoter shall be referred to as a Data Controller in relation to any Personal Data provided by a User.
Any questions you may have in this set of circumstances regarding the use of your data should be directed at the Venue/Promoter. Where you no longer wish to be contacted by a Venue/Promoter through our platform, you can unsubscribe from any communications you receive from Booked It. In addition, in these circumstances, where you wish to update any inaccuracies in your Personal Data on our system, or wish for your Personal Data to be deleted from our system, you can contact either us or the Venue/Promoter.
Venues/Promoters are allowed to use our system to contact Customers of their current and past events, so you may receive emails from our system that originate from such Venues/Promoters that we send on their behalf. If a Customer registered for an event using our platform, their email address is available to the Venue/Promoter of that event.
Venues/Promoters may also import contact information they have from external sources and send communications through our platform to those individuals, we will deliver those communications to those individuals on the Venues/Promoter’s behalf. The Venue/Promoter and not Booked It is responsible for sending these communications. The Customer has the right to opt out of such communications at any time.
Venues/Promoters may also partner with other Venues/Promoters on the Booked It platform to Co-Promote events whereby they recommend similar events by other Venues/Promoters to their Customers.
In addition to the above, there are certain exceptional circumstances in which we may disclose your information to third parties. This would be where we believe that the disclosure is:
- required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings;
- necessary to protect the safety of our employees, our property or the public;
- necessary for the prevention or detection of crime, including exchanging information with other companies or organisations for the purposes of fraud protection and credit risk reduction; and
- proportionate as part of a merger, business or asset sale, in the event that this happens we will share your information with the prospective seller or buyer involved.
- Sometimes, we share your information with our third-party providers, who help us provide and support our Services. Examples of third-party providers include payment processors, email marketing platforms, hosting services and content delivery services. We have contracts with each of these providers that specify that they will only use your data for the purposes of performing the services we have contracted them for. Anonymised data is also used for the purposes of website and app analytics.
What cookies will be used on the platform?
We don’t have access to the cookies which third parties place on the platform; other than allowing them to be served. Such companies have their own privacy policies which we encourage you to review.
Strictly Necessary Cookies
Some cookies are essential for the operation of the platform. For example, some cookies allow us to identify registered users and ensure they can access the platform. If a registered user opts to disable these cookies, the user may not be able to access all of the content of the platform.
Other cookies may be used to analyse how users use the site and to monitor site performance. This allows us to provide a high quality experience by customising the offering and quickly identifying and fixing any issues that arise. For example, performance cookies may be used to keep track of which pages are most popular and to determine why some pages are receiving error messages.
Functionality cookies are used to allow us to remember users’ preferences and tailor the platform to provide enhanced features.
Targeting cookies are used to serve users with adverts, and to collect information about users’ browsing habits and usage of the platform in order to make adverts more relevant to users and their interests. We may use remarketing technologies to enable third parties to display relevant and personalised ads to users through their networks. They are also used to limit the number of times users see an advert as well as help measure the effectiveness of an advertising campaign.
Social Media Cookies
These cookies allow users to share what they’ve been doing on the platform on social media such as Facebook and Instagram. These cookies are not within our control. Please refer to the respective privacy policies for how their cookies work.
We use Facebook services to deliver our ads to you during your browsing experience whilst you are online. You can control how Facebook uses data to show you ads by turning off ads which may be based on interests and / or your relationship with specific advertisers, in your ad preference settings. For further information, please visit the various Facebook pages which allow you to learn more about Facebook ads and tracking technologies and to update your settings:
Further, by visiting the Your Online Choices link above, you can opt out from seeing Facebook’s interest-based ads and you can also use your mobile device settings to configure your advertising preferences.
On your Facebook ad preferences, you will see that ads may be delivered to you according to ‘interests’ or specific advertisers and you can manage your ad preference settings for both of these.
Please note that where you have opted out of receiving our email marketing communications via the methods described above, you may still see our non-targeted adverts whilst you are online, if your interests settings on Facebook are aligned to an audience segment (pre-defined by Facebook) which our business is also associated with. We do not control whether these ads are displayed to you. Please see the relevant links above for details on how to learn more and manage Facebook ad settings.
Further, to learn more about adverts which are displayed to you whilst you are online, please consult the applicable platform’s privacy and cookies policy on which you see our ads and the Your Online Choices link above.
Users are always free to decline cookies if their browser permits, although doing so may interfere with their use of the platform. Please find detailed information on how to disable cookies here.
We use Smartlook to record screen activity and actions by you when you use the Booked It app. All personal information is hidden and we use these recordings to help with bug fixes and to improve the product.
Changes to this policy
Any changes we may make to the policy in the future will be posted on the platform and, where appropriate, notified to you by email or otherwise. The changes will be also available in hard-copy at our premises.
If you have any questions about this policy and / or our processing of your personal data, please contact us at firstname.lastname@example.org
Where can I find more information about the handling of my personal data?
See our fuller Privacy FAQs for further details on your rights, retention periods, and international transfers.