A. Good Hotel Guide - Privacy Policy The Good Hotel Guide ('GHG') takes the privacy and security of your data very seriously. This privacy policy sets out how the GHG processes personal data (that is, information by which an individual can be identified) collected by us in the course of our lawful activities, and explains our obligations and your rights under the Data Protection Act 1998, the General Data Protection Regulation and any subsequent UK legislation and regulations ('Data Protections laws'). This policy has been put in place to protect your rights under the Data Protection laws, and it is important that you understand what we will do with your data and are happy with this. If you want to discuss any matter relating to how your data is used, please email us at richard@goodhotelguide.com or write to us at The Good Hotel Guide, 94 Church Lane, London N2 0TB. We may, in some cases, be required to ask that you write to us with your query. References to the processing of information includes the collection, use, storage and protection of data. GHG is the 'data controller' for the purposes of this policy, and the policy extends to its staff, freelancers and anyone else processing data on our behalf from time to time. GHG is committed to ensuring that your privacy is protected. Any personal data collected by GHG will only be processed in accordance with this privacy policy. Organisations are permitted to process data if they have a legal basis for doing so. GHG processes data on the basis that: • Express and informed consent has been given by the person whose data is being processed; and/or • GHG has a legitimate interest in processing data; and/or Where GHG is relying on solely consent as the basis for proessing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which we are able to provide services to or interact with you in future. GHG may change this policy from time to time and any such changes will be published on our website. Notwithstanding any change to this policy, we will continue to process your personal data in accordance with your rights and our obligations in law. This policy is effective from 25 May, 2018. B. What data do we collect? We collect the data necessary for GHG to pursue its stated objectives: to collect, edit and publish reviews of hotels that we have selected for our readers; to help our readers in the hotel selection process; to encourage our readers to stay at the hotels we have selected. Data collected and processed may include, but not be limited to: • Names and contact information such as telephone numbers, email and postal addresses and other data including, where appropriate, communication preferences • Such other information that is relevant and necessary for GHG to carry out its activities. Such data may be collected, for example, when you provide it through our website when you submit a hotel review, purchase a copy of the Guide, buy a GHG gift voucher, order a discount voucher, join the GHG club or when you provide us with personal data in some other way for whatever purpose. C. What we do with the data we process GHG uses the data collected to maintain accurate internal records of our customers. We do this in the event that we may need to contact our customers related to their review or order or a GHG product. We also collect the data in order to communicate with our readers and reviewers on an ongoing basis; in order to bring them information related to the hotels in the Guide. Data may be processed and viewed, to the extent necessary, by staff or freelancers in the course of GHG activities (all of whom work in accordance with this privacy policy. If you are a hotelier, we collect and process data related to your hotel. We collect the data in order to present an accurate picture of your hotel to our readers. We also collect the data in order to communicate with you on an ongoing basis a) pertaining to the accurate representation of your hotel in the GHG, and b) in order to ensure that your hotel is getting the most out of the GHG. You, as the data subject, may request deletion of your data at any time in writing, subject to any overriding legal requirement for its retention. However, GHG may keep certain data on a suppression list to prevent further unwanted contact or data processing. D. Your rights in relation to your personal data You may request details of personal information which we hold about you. Any such request must be submitted in writing. A small fee may be payable if an information request is particularly onerous. You may choose to restrict the collection or use of your personal information, but this may inhibit or limit the way in which GHG is able to interact with you. You may, at any time, change your mind about what information we hold about you, or if we continue to hold it at all, subject to any legal obligation on GHG to retain data. You are responsible for the accuracy of data you have provided to GHG. If you believe that any information we are holding on you is incorrect or incomplete, please write to us as soon as possible. We will promptly correct any information found to be incorrect. We may use your personal information to send you information about GHG and matters relating to GHG's services or activities which we think may be of interest to you. We will only share data with trusted third parties where necessary for us to communicate with you (such as mailing companies for postal communications or through email campaigns or newsletters) or as stated above, and only once we are satisfied that any such use of data will accord with our privacy policy. We will not sell or share your personal information with any other businesses or marketing companies and will not share it other than as stated above, without your explicit consent. In the case of reviews, we may share the reviews with trusted third parties but will only do so anonymously. You can obtain further information about Data Protection and privacy laws by visiting the Information Commissioner's website at: https://ico.org.uk/for-thepublic. E. Security We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, it is only processed by those required to do so. Persons processing data on behalf of GHG do so in accordance with this policy and on the basis that GHG is satisfied that they can and will adhere to our high standards for data protection and security. The transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. F. Web browsing and Cookies A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. We may also collect and store information about your browsing device, including, where available, your IP address, operating system and browser type. This is anonymous statistical data about your browsing activities and patterns, and does not contain any personal data. G. Links to other websites Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.