privacy policy

this privacy policy was last changed 5th april 2018

1 who we are

we are wagamama ireland / portalon ltd. and respect your privacy. this policy describes how we use your personal information. wagamama ireland / portalon limited (283747) operating under press up entertainment group, 41a pleasant street, saint kevins, dublin 8 ("we") respects your privacy and values the trust you place in us when you share your personal information with us. this policy sets out how we, as data controller, collect and use your personal information, why we use it, with whom we share it, the rights to which you may be entitled and your choices about our use of your personal information. [this policy covers our use of your personal information arising from use of this website as well as [registering / subscribing / buying / using our products and services]. if you have any questions or need any further clarity please get in touch. contact details are set out below.

2 your information

data collection and usage we will collect and use your personal information [to allow access to this website, register / subscribe / buy / use our products and services] and purposes set out in more detail in this section. your information may be shared with members of our group and some third parties. please click here for further details on how we use your information and with whom we may share it.

what we collect and how we use it

1 information that you give us to make a purchase, whether online or over the phone including:

• your contact details including: your name, address, email address; • your bank account details; • the details you provide to make a reservation or booking; • [the details you provide to open an [online] account with us]; • the product purchased.

we use this information, including to : • provide our products and services; • manage and administer our services; • process your order; • take payment from or give you a refund; • help us ensure that our customers are genuine and to prevent fraud; • provide a reservation or booking service; • send personalised offers.

2 information about the way you use our services including: • the things that we've provided or you've purchased; • when and where you've made the purchases; • what you paid and how; • whether you've opened electronic communications from us; • whether you've clicked on links in electronic communications from us.

we use this information, including to: • develop new services; • improve our services; • identify products and marketing that may be of interest to you; • personalise our service of things you're interested in and how you use our services; • statistical analysis and research.

3 information when you communicate with us whether in person, through our website or via email, over the phone, through social media or via any other medium, including: • your contact details (this may include your social media account if that's the way you communicate with us); • the details of your communications with us; • the details you provide to us when you complete a survey; • the details of our messages to you.

we use this information, including to: • answer any issues or concerns; • monitor customer communications for quality and training purposes. • develop new services; • improve our services; • personalise our service.

4 information provided as part of your account including : • your username; • your password; • your account settings; • your account preferences; • your email address.

we use this information, including to: • provide our services; • manage and administer our systems; • identify how you'd like to use your account.

5 information that we collect through your use of our website including: • device information such as operating system, unique device identifiers, the mobile network system; • hardware and browser settings; • date and time of requests; • the requests you make; • the pages you visit and search engine terms you use; • ip address.

we use this information, including to: • provide our services; • develop new services; • improve our services; • identify issues with the website and user's experience of it; • monitor the way our website is used.

6 information that we collect from third party partners and corporate customers which could include: • payment processing companies; • your bank; • other entities in our group; • other members of a loyalty scheme; • administrators of prize draws and competitions.

we use this information, including to: • provide our services; • manage and administer our systems; • take payment from or give you a refund; • help us ensure that our customers are genuine and to prevent fraud; • personalise our service; • statistical analysis and research into our clients; • combine this information with other types of information mentioned above.

7 information that we collect incidentally from other sources or public sources, including: • [information available in the media]; • [information presented on our social media timelines]; • [information collected by security systems].

we use this information, including to: • [maintain market awareness]; • [build and maintain social media branding]; • [provide security to our sites].

8 information that we collect from individuals representing organisations, including: • contact details of individuals working for organisations; • other personal information regarding such individuals.

we use this information, including to: • build relationships with other organisations.

[please note that when information is shared with a third party, it is also necessary to explain the legitimate interests relied on by the third party, when that is the relevant legal basis for processing].

why we collect and how long we keep your information

we collect and use your information for a variety of reasons. we need some information to enter into and perform our contract – for example your contact and payment details. some information processing is required by law due to our anti-fraud screening obligations or in the public interest such as making sure we verify our customers' identities.

some information is processed because you've given your consent to that, which can be withdrawn [in your account preferences and settings]. other information we collect because we have legitimate business interests, for example, in : • understanding how our customers use our products, services and websites; • understanding and responding to customer feedback; • researching and analysing the services our customers want; • improving our services; • receiving information from other entities in our group/[other members of our loyalty scheme] about shared customers; • understanding the type of products and services our customers buy and how they use them; • personalise our offers so we're better able to provide offers and ideas that are relevant to you; • maintaining a public profile on both traditional and social media; • providing security over our business and who we trade with; or • developing and maintaining relationships with vendors, partners and other companies and dealing with individuals who work for them [in our sector].

we will keep your information for as long as it is reasonably necessary. it will depend on factors such as whether you have any outstanding purchases or an account with us or have interacted with recent offers. we will also routinely refresh our information to ensure we keep it up-to-date.

legal requirements

your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claims. we will not delete personal information if relevant to an investigation or a dispute. it will continue to be stored until those issues are fully resolved. special information we collect certain types of personal information are more sensitive than others. this "special information" about you includes information about health, disability, race, ethnicity, criminal offences (or alleged offences), political opinions, biometrics or religion. we may collect and receive special information about you. we have identified below the types of special information we may collect or receive, how we will use it and why we will use it.

what we collect and how we use it

1 information that you give us or that we receive when using our services: • [specifying certain dietary requirements that imply specific religious beliefs or medical conditions]. we use this information to : • [provide our services].

why we collect and how long we keep your information

this information may be collected and used when it has been made publicly available. when you provide us with this information you are consenting that we may collect and use it in the way we've set out. we will keep your information for as long as it is reasonably necessary. it will depend on factors such as whether you've any outstanding purchases or an account with us or have interacted with recent offers. we will also routinely refresh our information to ensure we keep it up-to-date

use of children’s data

wagamama ireland offers some services to children which are primarily targeted at children, and others that are intended for users of all ages and their families including activities that may collect information from children. below we summarize potential instances of collection and outline how and when we will provide parental notice and/or seek parental consent. in any instance that we collect personal information from a child, we will retain that information only so long as reasonably necessary to fulfil the activity request or allow the child to continue to participate in the activity, and ensure the security of our users and our services, or as required by law. in the event we discover we have collected information from a child in a manner inconsistent with the gdpr’s requirements, we will either delete the information or immediately seek the parent’s consent for that collection.

registration for kids club

children up to the age of 12 can be registered for our kids club on the wagamama ireland website. every year on the child’s birthday we will send a birthday card to your child’s registered postal address with a voucher for a free kid’s meal. during the registration process, we ask for the parents name and email address for notification and security purposes, as well as the child’s first name and date of birth, (for age verification purposes) and a postal address.

about the collection of a parent or legal guardian’s email address

this information is collected for notification and security purposes. if you believe your child is participating in a kids club activity that collects personal information and you or another parent/guardian have not received an email confirming subscription to the kids club, please feel free to contact us at privacy@pressup.ie. we will not use parent emails provided for parental consent purposes to market to the parent, unless the parent has expressly opted in to email marketing or has separately participated in an activity that allows for such email contact.

when information collected from children is available to others

we may share or disclose personal information collected from children in a limited number of instances, including the following: • we may share information with our service providers if necessary for them to perform a business, professional, or technology support function for us. • we may disclose personal information if permitted or required by law, for example, in response to a court order.

parental choices & controls

at any time, parents can refuse to permit us to store personal information from their children in association with a particular account, and can request that we delete from our records the personal information we have collected in connection with that account. please keep in mind that a request to delete records may lead to a termination of a membership, or other service.

where a child has registered wagamama ireland’s kids club, we use two methods to allow parents to access, change, or delete the personally identifiable information that we have collected from their children: • parents can contact us to request access to, change, or delete their child’s personal information by sending an email to us at privacy@pressup.ie. a valid request to delete personal information will be accommodated within 30 days as per the gdpr legislation. • visit this url and manually remove your email address from the system. parents of wagamama ireland’s kids club members may contact us directly at: privacy@pressup.ie. in any correspondence, please include the child’s name and the parent’s email address. to protect children’s privacy and security, we will take reasonable steps to help verify a parent’s identity before granting access to any personal information.

information we share

there are certain circumstances where we may transfer your personal data to employees, contractors and to other parties. • we may share information about you with other members of our group of companies so we can provide the best service across our group. [they are bound to keep your information in accordance with this privacy policy.] • we may also share your information with certain contractors or service providers. they may process your personal data for us, for example, if we use a marketing agency. [other recipients/service providers include advertising agencies, it specialists, database providers, backup and disaster recovery specialists, email providers or outsourced call centres.]

our suppliers and service providers will be required to meet our standards on processing information and security. the information we provide them, including your information, will only be provided in connection with the performance of their function. • we may also share your information with certain third parties. we will do this either when we receive your consent or because we need them to see your information to provide products or services to you. these include credit reference agencies, anti-fraud databases, screening agencies and other partners we do business with [such as other loyalty scheme members]. if we are not able to share information with certain third party partners who are also in our loyalty scheme, we will not be able to offer that service].

your personal information may be transferred to other third party organisations in certain scenarios: • if we're discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality; • if we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you; • if we're required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the police; • if we are defending a legal claim your information may be transferred as required in connection with defending such claim.

your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data. where your information will be held

it may be necessary to transfer personal data to another press up entertainment group business or other recipient (such as franchisees, partners and third party service providers) in a country outside of the country where it was originally collected or outside of your country of residence or nationality. for many of our business purposes we use cloud based services. therefore, for technical and organizational reasons, it may be necessary that your personal data is transferred to servers located in the us, or to servers located in countries outside of the european economic area ('eea').we will only transfer data to jurisdictions outside the scope of the european general data protection regulation (gdpr) where the appropriate safeguards set out in the gdpr are in place. when we transfer the data to a country outside of the eea that does not offer an adequate level of data protection, we will ensure compliance with applicable law by way of: • eu model clauses • eu-us privacy shield-certification • other legally accepted safeguards, as applicable

3 your rights

you may have certain rights in relation to your information including a right to access or to correct the information we hold on you.

other rights may be available in certain circumstances. please click here to see more detail about the rights that may available and how you can get in touch with us. data subject rights

we've listed the rights you have over your information and how you can use them below.

these rights will only apply in certain circumstances. they will generally not be available if there are outstanding contracts between us, if we required by law to keep the information or if the information is relevant to a legal dispute. • you can remove consent, where you have provided it, at any time. • you can ask us to confirm if we are processing your information. • you can ask for access to your information. • you can ask to correct your information if it's wrong. • you can ask us to delete your information.

you have a right to be forgotten and you can ask that our systems stop using your information. • you can ask us to restrict how we use your information. • you can ask us to help you move your information to other companies.

to help with that, you have a right to ask that we provide your information in an easily readable format to another company. • you can ask us to stop using your personal information, but only in certain cases. • you have the right to complain to the relevant supervisory authority.

**how to contact us **

if you have any questions about this policy please contact our data protection point of contact: privacy@pressup.ie changes to the policy

this policy will be changed from time to time.

if we change anything important about this policy (the information we collect, how we use it or why) we will highlight those changes at the top of the policy and provide a prominent link to it for a reasonable length of time following the change. [if you would like to access previous versions of this policy please click on the link to archived policies at the top of this page.] alternately you can email the data protection point of contact for previous versions, you can get in touch at the following email address: privacy@pressup.ie

other policies

cookies

we use cookies that identify your browser or device. they collect and store information when you visit our website [or app] about how you use it. for more information about cookies, the types of cookies we use and how we use them please see our: cookie policy. security

we are committed to keeping your personal information safe. we've got physical, technical and administrative measures in place to prevent unauthorised access or use of your information.