Privacy Policy.
PRIVACY POLICY:
BLO BAR’s commitment to your privacy.
BLO BAR respects your privacy and your desire to understand how your information will be handled and used. This Policy explains how we collect, use and store your information. Using your information in a way that you are comfortable with and keeping your information secure is an integral part of the retail experience we aim to provide. BLO BAR will ensure that all information protection and customer legislation standards are met when handling any of your personal information.
References in this Privacy Policy to "we", "us" and "BLO BAR" are to BLO BAR.
There are various ways that you might interact with BLO BAR and the information you provide when doing so allows us to improve our service.
We are the primary data controller for the purpose of the data held.
This website / mobile application that link to this Privacy Policy (collectively, the “site”, “sites”) are owned and operated by BLO BAR.
Our Privacy Policy explains the following – What information we collect and why we collect it.
How we use that information.
How we protect that information.
How you control your information, including assessing, updating and deleting what we store.
How we share information collected.
This Privacy Policy applies to BLO BAR and its affiliates and franchisees and covers our processing activities as a data controller.
We may alter the terms in this Privacy Policy at any time by posting the amended terms.
We will announce any relevant changes and their rationale to this Privacy Policy via email.
BLO BAR is not intended for or directed at children under the age of 13 years. As such, this Site is designed for adult user interaction. We do not intentionally collect personally identifiable information from children under the age of 13.
WHAT INFORMATION WE COLLECT AND WHY WE COLLECT IT:
We collect personal information which you provide through the below means:
Visiting a BLO BAR venue.
Verbally over the phone or in person.
Digitally through the use of online forms, the online customer portal and through emails.
Personal information we collect includes –
Name and address.
Date of Birth.
Contact details including email and phone number.
This information will be collected, stored, accessed and processed in a secure manner.
We retain personal data on when and if it is necessary and relevant for our operations.
The data is retained for a period of time defined by our legitimate interest.
Once it is no longer necessary for us to hold your data we will dispose of it in a secure manner.
HOW WE USE INFORMATION:
We will only use your personal information if we have a legal basis for doing so. The purpose for which we use and process your information and the legal basis on which we carry out each type of processing is explained below.
Purposes For Which We Will Process The Information.
We use collected data to; provide and improve our services, provide a personalised experience, contact you, provide you with customer service and to provide personalised marketing.
Data is processed for services and payments, customer support and fulfilment to enable us to perform our contract with you.
Data is used to provide you with information and materials that you request from us, to personalise our services, plus our website, to you, the user.
We process data to update you on services and products and benefits we offer and to inform you of changes to our policies, other terms and conditions and other administrative information plus to administer this site for you and your computer, mobile device or other item of hardware through which you access this Site and to keep this site safe and secure.
Data is used to measure or understand the effectiveness of any marketing we provide to you and others, and to deliver relevant marketing to you.
Data is used to enforce the terms and conditions and any contracts entered into with you.
If you do not wish to provide us with your personal data and processing such data is necessary for the performance of a contract with you and to fulfil our contractual obligations to you, we may not be able to perform our obligations under the contract between us.
Where you provide consent, you can withdraw your consent at any time, but without affecting the lawfulness of processing based on consent before its withdrawal. You can update your details or change your privacy preferences by contacting us as provided in “Contacting us” above.
Data is used on the legal basis of our legitimate interest and to provide you a personalised experience and to provide you with personalised advertising and marketing which includes seasonal campaigns via email and SMS messaging. You have the right to opt out all the marketing at any time.
Note that we may process your personal data for more than one lawful ground if the data is used for several purposes. Please Contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been used.
MARKETING:
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may at our discretion share your information with third parties in order to improve your experience and service. You can opt out of third party marketing at any point through contacting us.
Third Parties may include, but are not limited to – Facebook, Twitter, Instagram, Google.
OPTING OUT:
You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by Contacting us at any time.
CHANGE OF PURPOSE:
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you in a timely manner and we will explain the legal basis which allows us to do so.
DISCLOSURE OF YOUR PERSONAL DATA:
We will not sell, rent, lease or otherwise share your personal information other than as outlined in this Privacy Policy or without obtaining your consent beforehand.
INTERNAL THIRD PARTIES:
We may share your personal information with our group companies, affiliates, subsidiaries, franchisees or contractors as necessary to carry out the purposes for which the information was supplied or collected (i.e. to provide the services and products you have requested from us).
EXTERNAL THIRD PARTIES:
Personal information will also be shared with our third-party service providers and business partners who assist with the running this site, our business, our services and products including; hosting providers, email service providers and SMS providers. Our third-party service providers and business partners are subject to security and confidentiality obligations and are only permitted to process your personal information for specified purposes and in accordance with our instructions.
We may link to or show content from third party websites as a service to you but will not share personal data without your prior consent. These third-party websites are operated by companies that are outside of our control, and your activities at those third-party websites will be governed by the policies and practices of those third parties. We encourage you to review the privacy policies of these third parties before disclosing any information to them, as we are not responsible for the privacy policies of those websites.
In addition, we may disclose information about you when we believe, in good faith, that such use or disclosure is reasonably necessary to:
Comply with law.
Enforce or apply the terms of any of our user agreements.
Protect our rights, property or safety, or the rights, property or safety of our users, or others.
In the event that we become involved in a business divestiture, change of control, sale, merger, or acquisition of all or a part of our business, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets;
If all or substantially all of our assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets;
If we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation;
If necessary to protect the vital interests of a person; and to enforce or apply our terms and conditions or to establish, exercise or defend the rights of BLO BAR our staff, customers or others.
SECURITY OF PERSONAL DATA:
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.
We use appropriate measures to safeguard personally identifiable information, which measures are appropriate to the type of information maintained and follows applicable laws regarding the safeguarding of any such information under our control. In addition, in some areas of this Site, they may use encryption technology to enhance information privacy and help prevent loss, misuse, or alteration of the information under our control. We also employ industry-standard measures and processes for detecting and responding to inappropriate attempts to breach our systems.
No method of transmission over the Internet, or method of electronic storage, can be 100% secure. Therefore, we cannot guarantee the absolute security of your information. The Internet by its nature is a public forum, and we encourage you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online. You are responsible for protecting your username and password from third party access, and for selecting passwords that are secure.
If you have any questions about security on this Site, you can contact us as provided in “Contacting us” below.
DATA RETENTION: HOW LONG DO WE KEEP YOUR PERSONAL DATA:
When you contact us, we may keep a record of your communication to help solve any issues that you might be facing. Your information may be retained for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirement.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us.
YOUR RIGHTS:
Subject to certain limitations, you have rights under data protection laws in relation to your personal data. These rights include the rights to:
Request access to your personal data – (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Note that we may refuse to comply with a request for access if the request is manifestly unfounded or excessive, or repetitive in nature.
Request correction of your personal data – this enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. Note that we may refuse to comply with a request for correction if the request is manifestly unfounded or excessive, or repetitive in nature.
Request erasure of your personal data – this enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note that we may refuse a request for erasure, for example, where the processing is necessary to comply with a legal obligation or necessary for the establishment, exercise or defence of legal claims.
Request restriction of processing your personal data – this enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Note that we may refuse to comply with a request for restriction if the request is manifestly unfounded or excessive, or repetitive in nature.
Request transfer of your personal data – we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies where your personal data is processed by us with your consent or for the performance of a contract and when processing is carried out by automated means.
Right to withdraw consent – you can withdraw your consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
YOUR RIGHT TO OBJECT:
You have the right to object where we are processing your personal data. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal information which is based on our legitimate interests. Where you object on this ground, we shall no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
EXERCISING YOUR RIGHTS:
If you wish to exercise any of the rights set out above, including withdrawing consent, please contact us giving us specific details regarding which right you choose to exercise.
What we may need from you;
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
TIME LIMIT TO RESPOND:
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Please direct any questions about your information to the Data Protection Contact identified above.