Privacy Policy 1 — Crabshakk

Privacy policy.

Crabshakk Limited (“Crabshakk”, “we”, “us”, “our”) respects your privacy and legal rights.

This notice provides information about how we collect and use data from customers and visitors to our website and the persons and organisations we deal with when providing services and administering our business.  It should be read in conjunction with our website. Using our website will include the processing of your data as set out in this notice where you get in touch with us via our website.

Who we are:

For the purpose of the Data Protection Act 1998 (“DPA”) and  the UK GDPR (being the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (EU GDPR) as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 and as amended by Schedule 1 to the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (SI 2019/419)), the data controlled in respect of any personal data controlled by the company is Crabshakk Limited.

Crabshakk Limited is a Private Limited Company under the laws of Scotland, registered under number SC332511. Our registered address is Regent Court, 70 West Regent Street, Glasgow, G2 2QZ.

Personal data you give us:

When we use the term “Personal data” in this Notice, we mean information about living individuals which, alone or in conjunction with other information held by us, is capable of identifying them.  The DPA and the UK GDPR regulate our use of your personal data.

We may obtain personal data from you when you contact us, including when you call us, get in touch with us via our website or when you correspond with us using any means of communication. This includes personal data you provide to us when you:

```
Contact us with a question or enquiry;
```

Contact us or authorise anyone to contact us about employment with Crabshakk;

```
Leave a review;
```
```
Register for our mailing list;
```
```
Make a complaint;
```
```
Make a reservation;
```

Deal with us in order to provide us with goods or services.

We also collect data when you walk in and are put on a waiting list for a table. We collect your name and contact telephone number and discard that information at the end of each day.

We may also collect and retain personal data:

Obtained from public sources about you or your organisation;

Obtained from third parties, who may include our customers;

We can use any personal data we obtain for a number of purposes, as set out below.

To provide you or your organisation with information or services (we will keep this until you tell us to remove your personal data from our records for these purposes, or until we have reason to believe that you may no longer have any need for this information and our services) and to improve and to tailor how we provide those services and that information;

To deal with enquiries or requests (we’ll keep your data for so long as is necessary to deal with the enquiry or request);

To protect or pursue Crabshakk’s legitimate interests or those of our customers, or anyone else we provide personal data to, after taking into account the legitimate interests of the person the data is about;

To comply with the law, as we may be legally required to share certain personal data, which may include yours, if we are involved in legal proceedings or complying with a court order (we’ll keep your data for so long as is necessary to document our compliance with the law and our regulator’s requirements);

To assess the credit-worthiness of a person or organisation we’re considering doing business with (we’ll keep your data until we make a decision about doing business with them);

To promote the services we provide and obtain new business (we’ll keep your data unless you ask us to remove it from our records or we decide you’re not likely to be interested in our services);

We will not retain personal data for longer than is necessary for the purpose or purposes for which we use it and we also explain below generally how long we will retain personal data for a given purpose.

Personal data we may obtain from our website about web visitors:

We may automatically collect the following information, which may or may not be personal data, on anyone visiting the website:

IP addresses (static or dynamic) and other technical information relating to the virtual or physical location of a visitor and their means of access, including browser information, time zone settings and hardware information;

How visitors use the website, including dates and times and any details of how and for what duration particular resources are viewed or used; and

Clickstream data, including where users navigate to our site to and from and any searches you have made on or relating to our site.

We will use this data to:

Run our website and ensure it works properly;

Improve how we present the information on it and make browsing easier and more productive;

Maintain the site’s security and that of our visitors.

Cookies:

An HTTP cookie is a piece of data sent on behalf of a website (such as Crabshakk’s website) and stored on the user's computer by the user's web browser while the user is browsing

We may use internal resources or third party analysis services which use cookies to collect information on site usage and behaviour patterns.  We do this to find out things such as the number of visitors to the various parts of our website and improve it.  We may also share website usage data with service providers for benchmarking and site rating purposes.

We don’t use cookies in a way which allows Crabshakk to identify site users.

You can block cookies via your web browser and can screen out certain cookies using browser add-ons or other software.  This may prevent you from accessing all of our website.

How we share your data with other people and organisations:

We may provide access to your personal data to our employees, contractors and agents. Where we supply personal data to our own employees, contractors and agents, this will be for the performance of their duties or contractual responsibilities to us and to be used only in a manner which isn’t incompatible with the purposes for which we obtained it.

Where we supply other people and organisations with personal data for purposes other than their processing this data for us according to our instructions, we will consider (where allowed by law or our duties to the courts and our clients) the security and privacy of that data in the hands of the recipient.  However, we won’t be responsible for the security and privacy of data held by third parties where we don’t control their policies and practices.

We may share personal data with other people and organisations for these reasons:-

To enforce and protect our own legal rights or those of our customers and other persons (including by supplying information to our insurers);

```
If we’re required to by law;
```

Maintaining and improving our website, including the use of web analytics and search engine optimisation;

To get our customers’ feedback on our work; or

```
To market and promote our services.
```

We use MailChimp for administration of mailing lists in order to send you relevant information about our services. If you are on our mailing list this may result in your contact information being held or transferred to servers outside the UK as they are based in the USA. We understand there are appropriate safeguards in place. Further information can be found in their Privacy Policy.

We do not otherwise transfer your personal data outside the UK.

Your rights to object to direct marketing:

Like other businesses, we will sometimes use your personal data to provide you with information about the services we offer, and other topics we think might interest our customers and business contacts.

We appreciate that you may decide that you don’t want us to use your personal data in this way and we will respect that choice.  We also have a legal obligation under the DPA and UK GDPR to stop sending you marketing communications if you object, so if you don’t want us to use your personal data in this way, just let us know.  We suggest sending an e-mail to us at botanics@crabshakk.com or writing to us care of:

The Data Protection Officer,

Crabshakk Botanics

18 Vinicombe Street

Glasgow,

G12 8BE

We’ll give you the opportunity to opt out of future marketing whenever we send you marketing material.

Your rights in the personal data we process:

Under the DPA, you have the following rights in relation to your own personal data:

To prevent us using your data for direct marketing;

To have (in certain circumstances) inaccurate personal data corrected, blocked or destroyed;

To access a copy of the information comprised in your personal data that is undergoing processing (“subject access rights”);

To object to automated decisions (Crabshakk do not, however, use automated decision making);

To obtain compensation through legal proceedings for damage caused by a breach of the DPA; and

A right to object to processing that is likely to cause or is causing damage or distress.

If you want to (1) tell us to stop using your data for direct marketing; (2) exercise your subject access rights; (3) tell us about inaccurate personal data you think we hold on you; or (4) object to a use you believe we’re making of your data which is causing, or is likely to cause, damage or distress, please contact Crabshakk’s Data Protection Officer (as per the contact details above).

We will not charge you to exercise your subject access rights, but may make charge a reasonable fee reflecting our administrative costs should you request further copies of the personal data.  When you contact us to exercise any of the above rights, we will first ensure that the person requesting the data is the person whose data is being sought (or that it is being requested on that person’s behalf).  This may involve providing us with proof of your identity or your authority to act for the data subject.  We can also ask you for any information we need to help us find the personal data you’re enquiring about.

We will also provide you with the following information relating to your personal data:

The purpose for which we’re processing it;

What categories of data about you we process;

The recipients of your data, if any, including specifically international or foreign organisations;

Our expected retention period or how we’ll calculate this, if we don’t know yet;

Your rights in relation to the data; and

The source of the data, if we didn’t get it from you.