For the last 150 years, our clients and guests have been the centre of our world at the Crieff Hydro Family of Hotels. Back in the beginning, telegrams, quills and ink were the fashion. Today we’re a little more digital and like all businesses, may hold some information about you on you on file. We take great care of all personal data we hold and have high standards of security and comply with regulations regarding the protection of your data.
This privacy statement explains how and why we collect and process your personal data. This relates to personal data you share directly with us – as our guests, our members, our suppliers and our booking partners. It also relates to personal data you share with third party introducers, booking sites and group travel partners who share your data to provide you with the services that you have requested. Where a third party has shared your data with us, we expect that they have informed you about the processing and sharing of your data.
Where you are applying for employment with the Crieff Hydro Family of Hotels, please refer to our Recruitment Privacy Notice
For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’. This means that we are responsible for deciding how we collect and process personal data about you. Personal data is defined as any information relating to an identified or identifiable natural living person – a ‘data subject’. This privacy notice also provides information about your rights as a ‘data subject’.
Crieff Hydro Family of Hotels will always be transparent with you and make sure this privacy notice is available to you on our website or in paper format where required, prior to collecting and processing your personal data.
When we say ‘we’ or ‘us’ or ‘our’, we are generally referring to Crieff Hydro Ltd, our subsidiaries and the separate legal entities that make up the Crieff Hydro Family of Hotels.
Crieff Hydro Ltd is a company registered in Scotland. Company No. 000268. Our Registered Office is Crieff Hydro, Strathearn House, Ferntower Road, Crieff, Perthshire, PH7 3LQ.
We currently collect your personal data through a number of sources, such as::
The means of collecting data evolves along with our business and to ensure you are kept informed of our usage, this policy will be reviewed annually unless there is a change in legislation requiring us to review the policy sooner. We are committed to ensuring that the data we collect and process is accurate, is up to date, is appropriate, is not excessive, is not retained for longer than required and does not constitute an unwarranted invasion of your privacy.
We may process your personal data for the performance of any booking, contract or agreement we have in place with you.
We may also process your personal for the legitimate interests we have to provided that those interests do not override any of your own rights and freedoms which we will consider carefully. This includes processing for marketing, provision of future services, business development, statistical and management purposes.
The data we hold and process for you will depend on our relationship with you, the enquiries you have made with us, the bookings and services you have requested from us, along with the products or services we may request from you.
Typically, we may hold:
We may collect and store personal data for a number of reasons:
Crieff Hydro Family of Hotels will only keep your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with legal requirements under UK Company Law.
We do want to keep in touch with you, however if you have not done business with us or interacted with any of our email communications in 2 years, we will remove your details from our marketing mailing lists. You are free to remove yourself from our lists at any time by using the unsubscribe option.
We may share your personal data with third parties or other organisations and individuals where:
We may require the services of third party service providers – such as instructors, trainers, child care specialists, consultants, auditors and accountants, banking services, administration or HR services, I.T systems maintenance. We will share your data with them in order to allow us to provide the services you have requested. In these circumstances we will have an appropriate contract in place which sets out requirements that the third party can only process your data on our instruction and that they will not use it for their own purposes. They will hold it securely and delete it or return it to us once the contract has ended.
We will also share your personal data within the Crieff Hydro Family of Hotels where it is in our legitimate interests to do so, for the fulfilment of your booking and our contract or agreement with you.
We share contact information with a third party to help us send you information about the products and services offered by the Crieff Hydro Family of Hotels. These third parties will only send information about our family group.
If we intend to transfer your personal data to a third country or share with an international organisation, we will put measures in place to do so securely and with appropriate safeguards in place.
Crieff Hydro Family of Hotels are serious about taking the appropriate measures to protect your personal data.
The transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of the data you transmit to our site and we need to make you aware that any transmission is at your own risk. Where passwords are required or chosen by you to access our site or secure platforms as part of the service we provide, it is your responsibility to keep these passwords secure and confidential.
Once we have received your data, we use strict procedures and security features to prevent unauthorised access to your data.
We limit access to our properties and facilities to those who require access and have a right to be there – using passes, keys and other technology. We also have a risk framework in place including the appropriate policies and procedures required to keep your data secure. All information provided by you is held on secure servers and any payment transactions will be encrypted. We apply controls and access restrictions across all of our technology platforms and review and test these at regular intervals.
Through the contracts and security measures we put in place, any third parties that we may share your data with are obliged to keep your details secure and to use this data only to fulfil the service they provide to you on our behalf. When they no longer need your data to fulfil this service, they will dispose of the details in line with our procedures. If we pass any special category personal data onto a third party we will only do so once we have obtained your explicit consent or for the fulfilment of a contract we hold with you, unless we are legally required to do otherwise.
Whilst we are processing your personal data at the Crieff Hydro Family of Hotels, as a ‘data subject’, you have the following rights:
If you submit a Subject Access Request, the Crieff Hydro Family of Hotels can confirm the data and information held about you and how we process it. If we process your personal data, you can request the following information from us:
We will normally respond to your request to access your personal data within one month from the date it is received. However, in some cases, we may need to extend this to three months. We will always write to you within one month of receiving your original request to tell you if this is the case.
A copy of your personal data is usually provided free of charge. However, we can charge a ‘reasonable fee’ where we find that the data requested is manifestly excessive or manifestly unfounded and in particular if the request is a repetitive one. We can also charge for additional copies of the personal data.
If you wish to speak to us or question anything in this notice relating to how we collect, store or process your personal data, please email us at firstname.lastname@example.org or write to our Data Protection Officer at Crieff Hydro Ltd, Strathearn House, Ferntower Road, Creiff, Perthshire, PH7 3LQ
We hope you don’t need to make a complaint about how we process your personal data or how a complaint has been handled. If you feel you do wish to complain, you have the right to complain through our Data Protection Officer as detailed above and the supervisory authority at the contact details below:
UK Data Protection Regulator, The Information Commissioner’s Office (‘ICO’), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or email ico.org.uk/concerns/
This policy was last updated on 18th May 2018
Cookies are small text files that are placed on your computer by websites you visit. They are widely used to make websites work more efficiently, as well as provide information to the owners of the site you are visiting.
We use the following cookies:
Google Analytics – These cookies are used to collect information about how our visitors use our website. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to this site from and the pages they have visited.
Google Website Optimiser – These cookies are used to collect information about how visitors use our site. We use information to test and optimise site content and design.
Juicer – These cookies are used to display an image feed from Instagram in the ‘Picture This’ feature.
We may use additional cookies to track behaviour and usage on third party software, for example our app, and will update this policy annually to reflect new uses.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visitallaboutcookies.org
To opt out of being tracked by Google Analytics across all websites visit tools.google.com/dlpage/gaoptout
We use display ads based on Google Analytics remarketing features. You can opt-out of these ads and change your preferences with the Ads Preferences Manager.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.