Kildare Village Privacy Notice

-   Introduction
-   Who we are and how to contact us
-   How we collect your personal data
-   The types of personal data and information we collect
-   Why we collect your personal data and how we use it
-   Sharing your personal data
-   Children
-   How long we keep your personal data for
-   Confidentiality and security of your personal data
-   How to access your information and your other rights
-   Changes to this Notice


Introduction

Kildare Village is committed to protecting your personal data. It’s your information, and we respect that. This Privacy Notice (the “Notice”) provides detailed information on when and why we collect your personal data, how we use it and how we keep it secure. This Notice also describes your right to request that we delete, update, transfer or provide you with access to your personal data.

This Privacy Notice relates to your visit to Kildare Village, including services you use and other data we collect during your stay.  Other Privacy Notices may also apply to our use of your personal data – for example when you engage with Privilege, use our Websites or the Village App.

Who we are and how to contact us

This Notice explains how Kildare Village, Greyabbey, Nurney Road, Co. Kildare, Ireland (and its affiliated companies) collect, use and manage your personal data. In most instances, we are the controller of your personal data described in this Notice – we have explained in this Notice where this differs.

If you have any questions about this Notice or want to exercise your rights set out in this Notice, please contact us by email at Legal@KildareVillage.com

Please see Who Are We for the entities listed are the owners and operators of retail outlet Bicester Villages (Bicester Villages) within the Bicester Village Shopping Collection brand. References in this Notice to “we”,  “us” or “our” are to the entities listed. Each of the listed entities are joint data controllers and are committed to protecting your privacy.

 As joint data controllers, we have arrangements between us to ensure that we handle your personal data properly and in accordance with data protection law. These arrangements reflect our respective roles and responsibilities in relation to you and your personal data, and consider which entity is in the best position to fulfil our services and obligations. This arrangement between us does not affect your rights under data protection law. For more information on these arrangements, feel free to contact us using the address above.

How we collect your personal data

Generally, as a guest in Kildare Village, we collect your information when you decide to use the services and facilities we offer. This could include using our village wi-fi, equipment loan, our personal shopper or other services, participation in photo or film shoots, the purchase of gift cards, recording of airmiles or other loyalty scheme points, entering prize draws and competitions.

We will also collect your personal data through our surveillance technologies which are in place to provide a safer environment for our guests.

We collect information in a number of ways which are listed below:

  • When you connect to and use our wi-fi services. This data includes your device MAC address (a unique device identifier), the type of device you are using and when you re-connect to the service. If you provide your email address, we will use it to contact you about our Privilege program.
  • When you visit our village, we process and anonymise your device ‘MAC’ address for geographic guest insight and visitor analytics. To restrict location analytics on an iphone, do not connect to the village wi-fi. To restrict location analytics on an android, please use airplane mode.
  • When you participate in photo or film shoots. We will always obtain your explicit consent when you choose to be part of our campaigns. Signage is always provided in locations where photoshoots are occurring to assist you in avoiding these locations should you wish to.
  • When you use equipment belonging to us including umbrellas, wheelchairs, motobility scooters, pushchairs or dog-strollers or when you use our valet parking, childcare, dog kennel, phone charging and left luggage facilities. This may include taking payment information or proof of identity.
  • When you ask us to record your purchases against loyalty schemes (such as airlines or membership clubs) to facilitate point allocation or when we assist you with queries about those schemes.
  • When you use our personal shopper services we will ask you to provide details of your name, contact details, date of birth, brand and style preferences, clothes and shoe sizes and other information to assist us in facilitating and personalising your experience.
  • When you purchase gift cards we may need to collect identification information to comply with anti-money laundering requirements, including proof of identity. If you purchase a gift card for another person and ask us to deliver it to them, we will collect the recipient’s name, postal address and email address.
  • When you ask us to arrange home delivery of items you have purchased in the village we will collect the delivery address details. Note that we use a third party to provide this service.
  • When you post information to publicly available social media sites, we may ask for your permission to share your posts with our social community.
  • When you enter any event, prize draws or competitions run by Kildare Village. Note that prize draws and competitions will be subject to separate terms and conditions which will be made available to you.
  • When we administer services such as lost property. If you are collecting lost property we may ask you to prove your identity or for proof of ownership.

 The types of personal data and information we collect

We only collect the information that is necessary to carry out our business and to provide the particular service or facility you’ve requested. 

Information we obtain from you

Here are some examples of information we collect about you when you interact with us – which data is collected depends on the services or facilities you use:

  • Title
  • Name and Surname
  • Email address
  • Date of Birth
  • Contact phone number(s)
  • Your home country
  • The method of transport you use to visit our village
  • Purchase information
  • Interactions with us
  • Payment details
  • Delivery address(s)
  • Proof of identity
  • Billing address
  • Attendance at events
  • Appointment booking and information given during appointment
  • Alterations and repair requests
  • Information about accidents and incidents
  • Details of children when using our childcare facilities

We may be unable to provide services and facilities to you if you do not provide the personal information we require to deliver them.

If you’d like more information about which specific personal data is collected for each service or facility you use, please contact us using the details in Who we are and how to contact us above.

Other Information we obtain:

Surveillance Technology

We use surveillance technologies such as CCTV (Closed Circuit Television), ANPR (Automatic Number Plate Recognition) and Head Count Technology.

These technologies may automatically capture your image data and vehicle registration data when you enter or as you are walking around our villages. We collect information about the number of visitors in our villages which helps us to understand visitor journeys and implement enhanced guest safety measures.

Social Media

Your information may be shared with us by independent organisations when there is a lawful basis to do so. You should check their Privacy Policy when you provide your information to them, to understand fully how they will process and safeguard your data. These independent organisations may include services like Instagram, Facebook, WhatsApp or Twitter. Depending on the sharing preferences you have set in those platforms, you may give us permission to access your personal data from those accounts or services.

Wi-Fi Services

When you connect to and use our wi-fi services. This data includes your device MAC address (a unique device identifier), the type of device you are using and when you re-connect to the service.  If you provide your email address, we will use it to contact you about our Privilege program.

Geographic Insight

We process your device MAC Address(a unique device identifier) when you visit the village for the purposes of geographic guest insight and visitor analytics. Your MAC address is anonymised at the point of collection. We do not monitor your browsing activity. If you do not wish to participate in location analytics, please do not connect to the village wi-fi for iphone or set your device to airplane for android.

Why we collect your personal data and how we use it

At Kildare Village we like to get to know our guests – after all, this is how we find new ways to provide you with an extraordinary experience. We use information about you in a number of ways, including providing services and facilities that you have requested and offering you a personalised experience.

We rely on the following legal justifications to process your personal data, where:

  • It is necessary to perform a contract with you so that you can buy goods and access services;
  • You have given us your consent;
  • We have a legitimate interest to pursue our commercial activities, improve our services and protect our employees and customers;
  • It is necessary to comply with our legal obligations; and
  • It is needed to manage legal claims.

Whenever we process your personal data we will have a lawful reason to use it in such a way to ensure that we provide the very best services and facilities to all of our guests. These include:

To carry out our business and to provide a service or carry out a contract with you:

Fulfilment of services and facilities you have chosen to use.

When you have purchased a Gift Card, the data you have provided is processed by our Gift Card provider. We do not collect or share information about the purchases you make using our Gift Card.

Where we have your consent:

When you ask us to inform your loyalty scheme membership (e.g. airmiles) of your spend in our village we provide them with details of your transactions and membership number.  Note that we act on behalf of your loyalty scheme provider as a data processor to provide this service.

To respond to guest enquiries made in the village, online, by email or on social media.

If we rely on your consent as our lawful basis for processing your data, you are able to withdraw your consent to our processing of your personal data at any time.

Please see How to access your information and your other rights for further information.

 Where we have justifiable reason (legitimate interest):

  • If you decide to attend an event at Kildare Village, we will share your personal data with any applicable third party hosting the event in order to ensure that it runs smoothly. This third party will be identifiable to you in advance.
  • Invite you to provide feedback about our facilities and services in the form of online or in-village surveys. We use this information to help us provide and design exceptional services and experiences.
  • Analyse aggregated guest information with other interactions guests may have with Village and other villages within the Bicester Village Shopping Collection in order to continually improve the services and experiences we offer.
  • The use of CCTV recording equipment in and around our premises for monitoring and security purposes. When we are required to do so in order to comply with applicable law, we may share CCTV footage with law enforcement agencies and our insurance companies relating to crime prevention, criminal activity, incident management and legal claims.

Value Retail will process personal data for the purposes of its legitimate business interests as described above. We have conducted assessments to ensure that the rights and freedoms of our guests do not outweigh our legitimate interests. For further information about that assessment, including to exercise your right to challenge our decision, please contact us using the details at Who we are and how to contact us. In exceptional cases, personal data and other information may also be processed for the purposes of crime detection and personal safety and when we are required to do so in order to comply with any applicable law, summons, search warrant, a court or regulatory order, or other valid legal process.

When we have to manage legal claims

In the unfortunate event that you have an accident or feel unwell while at Kildare Village and require first aid, your personal data may be processed for the purposes of administering first aid, liaising with insurance companies and managing legal claims.

Sharing your personal data

We use third party partners to help us deliver some of our services and to manage our technology platforms. In providing those services, your personal data will, where applicable, be used by the service provider on our behalf.

We check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your personal data. We have written contracts with them which provide assurances regarding the protections that they give to your personal data and their compliance with our data security standards and any relevant international transfer requirements. For further information about these transfers and to request details of the safeguards in place, please contact us using the details at Who we are and how to contact us.

See below for more information about our service providers and how your data is processed.

We may use third party providers to support the provision of services including:

  • valet parking services;
  • to process payments made using debit and credit cards. Kildare Village does not store any payment card numbers once your transaction has been completed;
  • to provide wi-fi services;
  • shopping packages, including bus trips;
  • home delivery services;
  • to contact you with important information relating to your booking or purchase, such as confirming your order and letting you know about important changes.

Children

If you are under the age of sixteen (16) we may be unable to provide you with our services. If we become aware that we have inadvertently collected personal data from children under the age of sixteen (16) without legally valid parental consent, we will take reasonable steps to delete it as soon as possible. We also comply with other age restrictions and requirements in accordance with applicable local laws.

Parents or legal guardians may provide explicit consent for children to participate in photographic or film shoots.

In circumstances where you use our childcare services we will collect the information necessary to provide a safe environment for your child and to comply with our legal obligations. Particular care is taken with regard to the security of the information we collect to facilitate childcare services.

How long we keep your personal data for

We keep your personal data in line with our retention schedules. We only retain information for as long as it is required for the purposes for which we collect it.

We apply careful analysis to make sure we only hold your personal data for as long as it is needed for legal reasons or identified business purposes.

Where possible, we anonymise personal data so that we can continue to use it for analytical purposes.

For further information about the period of time for which we hold your personal data, please contact us using the details at Who we are and how to contact us.

Confidentiality and security of your personal data

We are committed to keeping your personal data secure throughout its lifecycle and we will take appropriate precautions to protect it from loss, misuse or alteration. We do not sell your personal data for any purpose.

We have implemented information security policies, rules and technical measures to protect your personal data from:

  • unauthorised access;
  • improper use or disclosure;
  • unauthorised modification; and
  • unlawful destruction or accidental loss.

All of our employees and the third party partners with whom we share your personal are obliged to respect the confidentiality of the personal data of all users of our services.   

How to access your information and your other rights

You have the following rights in relation to the personal data we are processing about you:    

Right to be informed of the personal data we are processing about you

You have the right to be provided with clear, transparent and easily understandable information about how we collect and use your personal data. This is why we’re providing you with the information in this Notice.

Right of access to the personal data we are processing about you

If you ask us, we’ll confirm whether we’re processing your personal data and, if so, provide you with a copy of that personal data and information about how we use it. If you require additional copies, we may need to charge a reasonable fee.

Right to correct the personal data we are processing about you

If the personal data we hold about you is inaccurate or incomplete, you’re entitled to have it corrected. This right is applicable at all times when we hold your personal data (subject to certain exemptions).

Right to delete information the personal data we are processing about you

This is also known as ‘the right to be forgotten’. You can ask us to delete or remove your personal data in some circumstances such as where we no longer need it, if you withdraw your consent and there is no other legal justification for the use of the information, or if you object to the way we process your information and we have no overriding grounds to use it. an

Right to restrict the processing of personal data

You can ask us to ‘block’ or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it. We will still be able to store your personal data. We’ll tell you before we lift any restriction and why we have done so.

Right to portability of your personal data

You have the right, in certain circumstances, to obtain the personal data you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer it to a third party of your choice.

Right to object to the personal data we are processing

You can ask us to stop processing your personal data, and we will do so, if we: can demonstrate compelling legitimate grounds for the processing; or need to use your personal data in connection with any legal claims.

Rights in relation to automated decision making and profiling using your personal data

You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you. This right is not applicable if profiling is necessary for entering into, or the performance of, a contract between you and us.

Right to withdraw your consent to processing of your personal data

If you have provided your consent to process your personal data and that is our legal basis for processing, you have the right to withdraw that consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

Right to complain to a data protection supervisory authority

If you have a concern about any aspect of our data protection practices, including the way we are processing your personal data, you can report it to the your local data protection Supervisory Authority. Their contact details are contained in the table below.

Changes to this Privacy Notice

We may make changes to this Privacy Notice from time to time. This Notice was updated on 17/06/2019.
To ensure that you are always aware of how we use your personal data we will update this Notice from time to time to reflect any changes to our use of your personal data or when we add new services or facilities. We may also update this Notice to comply with changes in applicable law or regulatory requirements. If we make substantial changes to the way we process your personal data we will let you know if this is possible and practical.

 Who Are We

Third Party Data Controllers and Processors