Privacy Policy
The Latte Lounge

The privacy and security of your personal information is important to us at the Latte Lounge and we are committed to ensuring that your privacy is protected. Any personal data collected by us will only be processed in accordance with this privacy policy, as explained in the following sections:

A. About this Policy
B. Why do we process your data?
C. What data do we collect and process?
D. How do we store your personal data?
E. Security
F. Web browsing and Cookies
G. Links to other websites
H. Your rights in relation to your personal data

A. About this Policy
This privacy policy sets out how we at the Lattelounge.co Limited (‘Latte Lounge’) process personal data (that is, information by which an individual can be identified) collected by us in the course of our lawful activities, in accordance with the Data Protection Act 2018, the General Data Protection Regulation and any current or subsequent related legislation in force from time to time (‘Data Protections laws’). This policy has been put in place to protect your rights under the Data Protection laws, and it is important that you understand what we will do with your data and are happy with this. If you want to discuss any matter relating to how your data is used, please email katie@lattelounge.co.uk or write to Katie Taylor, The Latte Lounge, Suite 3, Caspian House, The Waterfront, Elstree Road, Elstree, WD6 3BS. We may be required in certain instances to ask that your request for information be submitted in writing.

References to the processing of information includes the collection, use, storage and protection of data. Latte Lounge is the ‘data controller’ for the purposes of this policy, except where otherwise stated, and the policy extends to our staff and anyone else processing data on our behalf from time to time.

This privacy policy was last revised on 1 June 2018. Please note that we may need to update this privacy policy from time to time to reflect changes in our practices and the law. We recommend that you check this page regularly to ensure that you have read the most recent version and that you are happy with any changes.

B. Why do we process your data?
Organisations are permitted to process data if they have a legal basis for doing so. We process data on the basis that:

  • Express and informed consent has been given by the person whose data is being processed; and/or
  • We have a legitimate interest in processing data; and/or
  • It is necessary in relation to a contract or agreement which someone has entered into with us or because someone has asked for something to be done so they can enter into a contract or agreement with us; and/or
  • We have a legal obligation to process data.

If and to the extent that we are relying on solely consent as the basis for processing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which we are able to provide services to or interact with you in future.

C. What data do we collect and process?
We collect the data necessary for us to offer and provide services to those who engage with us as members or otherwise, including but not limited to newsletters and information about topical issues that we consider may be of interest, promotions and special offers from or information about businesses or other services, news, competitions and opportunities relating to matters of interest to our members and others. Data collected and processed may include, but not be limited to:

  • Names and contact information such as telephone numbers, email and postal addresses
  • Such other personal information as may be necessary to provide services to our members and others, including where appropriate, payment information
  • Personal information about staff, our advisory team and those who work for or with us or who engage with us to advertise or promote products or services
  • Such other information that is relevant and necessary for us to provide services to the public, maintain our activities and meet our legal obligations.

Such information may be collected when it is provided directly to us or submitted through our website or social media, when someone is subscribing for a service, making an enquiry of us, completing any promotions, surveys or competitions we may offer from time to time or when personal information has been lawfully shared with us in order for us to provide services to members and others. This may also include information about you or your computer that we collect automatically each time you visit the website.

We do not knowingly collect information from individuals who are under the age of 16. If you are under 16, please do not provide any information about yourself to us. If you have already done so, please contact us.

We may use the information that you give to us:

a. To provide information to you that you request from us;

b. To administer your participation in any promotions, awards, surveys or competitions that we run including in any online or offline publicity in relation to winners, where you have consented to such use;

c. To provide subscribers with our regular newsletter;

d. To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

e. To administer any registration you have with us or to provide any vouchers and services you request from us and to carry out our obligations and exercise our rights arising from those requests;

f. To communicate with you about any comments, queries or feedback you might have about us or the website;

g. To enable you to participate in interactive features of our website, when you choose to do so;

h. To ensure that content from our website is presented in the most effective manner for you and for your computer;

i. To provide you with news and information about us and the discounts and services we offer that we feel may interest you by post, telephone, email and/or SMS. We will send that information by electronic mail only if: (i) you have consented to this, for example, by opting in when you sign up for our newsletter; or (ii) the information is about our products and services similar to those which were the subject of a previous sale or negotiation of a sale to you and you have not opted out of receiving such marketing messages; or (iii) where we are permitted to do so by law without consent, for example, if you have provided us with a company email address. If you do not want us to use your personal data in this way, please let us know using our contact details at the end of this privacy policy; and

j. To inform you of any changes to our website and/or services.
We may use information about you that we collect automatically:

k. to administer our website and for internal operations, including troubleshooting, data analysis, testing, researching, statistical and survey purposes;

l. to improve our website to ensure that content is presented in the most effective manner for you and your computer;

m. to allow you to participate in interactive features on the website, if you choose to do so; and

n. to measure or understand the effectiveness of any advertising we serve to you and others and to deliver relevant advertising to you.

o. We use the information about you that we collect from other sources in combination with the information you give to us and the information about you that we collect automatically. We will only use such information for the purposes set out above.

p. Where you provide information about people other than yourself, you confirm that you have a lawful basis to provide us with such information and that they have had the opportunity to read, understand and agree to the terms of this privacy policy, including how we may use such information.
We may share some of your data in the following ways and for the following purposes:

q. We may share your information with selected third parties including:

i. our business partners, suppliers and sub-contractors who we engage to assist with our administrative or business functions and to deal with any other matters in connection with our website and any agreements we enter into with you;

ii. advertisers and advertising networks that require anonymised data to select and serve relevant adverts to you and others. We may provide them with aggregate information about our users (for example, we may inform them that 150 women aged 35-45 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, men in a particular location). We may make use of the information we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience;

iii. analytics and search engine providers that assist us in the improvement and optimisation of the website;

iv. in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

v. if the website is acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; and

vi. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our various terms, policies and other agreements; or to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with companies and organisations for the purposes of fraud protection and credit risk reduction.

D. How do we store your personal data?
We will only retain and use your personal information for as long as we need it for the purposes set out in this privacy policy or as otherwise required by law.

The information that we collect from you may be transferred to a destination outside the European Economic Area (‘EEA’), including the United States of America, where it will be stored by us or by one of our suppliers. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

In particular please note the following:

a. All information you provide to us is stored on servers hosted by Bluehost Inc, whose servers are located in the United States of America. Their privacy policy can be found here: https://www.bluehost.com/terms/privacy-policy.

b. We use Mail Chimp to provide marketing automation services and their servers are located in the United States of America. The Mail Chimp privacy policy can be found here https://mailchimp.com/legal/privacy/.

c. Such suppliers and staff may be engaged in, among other things, the provision of support services. We will take reasonable steps to ensure adequate security for any of your information transferred outside the EEA, but please be aware that destinations outside the EEA to which your information may be transferred may have data protection laws which do not offer the same level of protection for your information as those in force in the EEA. By using our website and submitting your information to us, you agree to the transfer, storing and processing of such information outside the EEA as set out in this privacy policy.

d. Unfortunately, the sending of information via the internet is not totally secure and on occasion such information can be intercepted. We cannot guarantee the security of data that you choose to send us electronically and therefore sending such information is entirely at your own risk.

E. Security
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data we process. Persons processing data on behalf of the Latte Lounge do so in accordance with this policy and on the basis that we are satisfied that they can and will adhere to our high standards for data protection and security.

F. Web browsing and Cookies
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

We may also collect and store information about your browsing device, including, where available, your IP address, operating system and browser type. This is anonymous statistical data about your browsing activities and patterns and does not contain any personal data. To read more about how we use cookies, please see here.

G. Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.

H. Your rights in relation to your personal data
You, as the data subject, may request deletion of your data at any time in writing, subject to any overriding legal requirement for its retention, such as the need, where appropriate, to comply with the requirements of Companies House, Her Majesty’s Revenue and Customs or other regulatory authorities, or to prevent the commission of or assist in the investigation of an actual or suspected criminal offence. We may keep certain data on a ‘suppression list’ so we know, if requested, not to contact you or process your data in future until further notice.

You may request details of personal information which we hold about you. Any such request must be submitted in writing and we reserve the right to seek verification of the identity of persons making such requests before we respond. A small fee may be payable if an information request is particularly onerous.

You have the right to ask us not to process your personal data for marketing purposes. If you would like to do so, just let us know using our contact details given above. However, if you exercise your right to opt-out of receiving marketing messages from us, please be aware that you may continue to receive certain non-marketing communications from us. For example, we may still need to contact you about important changes to our services or website that affect you or about any agreements we may have entered into with you.

You may choose to restrict the collection or use of your personal information, but this may impact or limit the way in which the Latte Lounge is able to interact with you. You may, at any time, change your mind about what information we hold about you, or if we continue to hold it at all, subject to any legal obligation we have to retain data, as stated above.

You are responsible for the accuracy of data you have provided to the Latte Lounge. If you believe that any information we are holding on you is incorrect or incomplete, please write to us as soon as possible. We will promptly correct any information found to be incorrect.
In the unlikely event that there is any kind of a breach of our duties and obligations under this policy or the Data Protections laws, we will take immediate steps to isolate and rectify the problem. Should the breach be serious one (where there is a risk of, for example, discrimination, damage to reputation, financial loss or loss of confidential information) we have a duty to report that matter to the individuals affected and to the Office of the Information Commissioner.

You can obtain further information about Data Protection and privacy laws and your rights by visiting the Information Commissioner’s website at: https://ico.org.uk/for-thepublic.