Privacy policy

Agate Properties, trading as Winnie’s Café (“we”), are committed to protecting and respecting your privacy.

This policy, together with our terms of use and any other documents referred to in it, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read it carefully to understand our views and practices regarding your personal data and how we will treat it. For the purposes of the General Data Protection Regulation (GDPR), the data controller is Agate Properties of 109 Hammersmith Grove, London, W6 0NQ (registration number 904057).

This policy is published on our website, given to current staff and made available to every person whose information we process.

Questions about this policy or our privacy practices should be sent to reservations@staysecondnature.com, or in writing to Thomas Breen, Data Protection Officer, Lamington Serviced Apartments, 109 Hammersmith Grove, London, W6 0NQ.

This policy applies only to activity on our own website. If you leave via a link, you will be subject to that website provider’s policy. We have no control over it, so you should check its policy before continuing.

We only collect and process personal data where we have a lawful basis. These include consent, where you have given it; contract, where processing is necessary to perform a contract with you; and legitimate interests.

We may process your personal data for our legitimate interests, provided that this processing does not outweigh your rights and freedoms. Please contact our Data Protection Officer if you have questions about the lawful bases on which we collect and use your personal data.

We may collect information you provide by completing forms on our website. This includes information provided when subscribing to our mailing list, completing a job application, making a booking or requesting further contact.

We may ask for information when you report a problem with our site. The information you give us may include your name, address, email address, phone number, financial and payment-card information, or personal description and details.

If you contact us, we may keep a record of that correspondence for a reasonable period for future reporting or contact. We may also ask you to complete optional surveys used for research.

We keep basic information when you visit our website and recognise the importance of keeping it secure and explaining what we will do with it.

This may include the full URL clickstream to, through and from our site, including date and time; pages viewed or searched for; page response times; download errors; length of visits; booking behaviour; page interactions such as scrolling, clicks and mouse-overs; methods used to leave the page; and any phone number used to call our general contact number.

We may collect information about your device, including your IP address, operating system and browser type, for system administration and to improve your browsing experience. This is statistical information about browsing actions and patterns and does not itself identify an individual.

We may obtain information about general internet usage through cookies stored on your device. Cookies help us improve our site and provide a more personalised service. They may enable us to:

• Estimate audience size and usage patterns.
• Remember preferences and tailor the site to your interests.
• Speed up searches and recognise you when you return.
• Make advertising more relevant.
• Allow pages to be shared with social networks.

You can refuse cookies through your browser settings. Doing so may prevent access to parts of the site. Unless your browser is set to refuse cookies, our systems may issue them when you use the site.

Your data may be transferred to and stored outside the European Economic Area by one of our data processors. It may also be processed by staff outside the EEA who work for those processors, including for order fulfilment, payment processing and support services. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.

Information you provide is stored on secure systems and payment transactions are encrypted. If you have a password for any part of our site, you are responsible for keeping it confidential and should not share it.

Transmission over the internet is not completely secure. Although we do our best to protect personal data, we cannot guarantee the security of data sent to our site. Once received, we use appropriate procedures and security features to help prevent unauthorised access.

We will delete your information from our systems if we have not had meaningful contact from you for seven years, unless we still need to process it for the purpose for which it was collected. Meaningful contact includes completing an enquiry form or making a booking.

We may use information held about you to:

• Present our site effectively for you and your device.
• Provide information, products or services you request, or that may interest you where you have consented to contact.
• Carry out obligations arising from bookings or other contracts with you.
• Provide interactive features you choose to use.
• Notify you about service changes.
• Provide products, offers and services.
• Measure advertising effectiveness and deliver relevant advertising.

We may combine information received from other sources with information you provide and information we collect, and use it for the purposes above where appropriate.

We or selected third parties may use your information to tell you about goods and services that may interest you, by post, email or telephone. If you do not want us to use your information for marketing, contact reservations@staysecondnature.com. You can also unsubscribe from marketing emails at any time.

We may disclose personal information to partners acting as data processors, advertisers and advertising networks, and analytics or search providers that help us improve and optimise the site.

If we sell or buy a business or assets, personal information may be disclosed to a prospective seller or buyer. We may also disclose or share information where required by law, including for fraud prevention and credit-risk reduction.

We uphold the rights provided by applicable data-protection legislation, including the UK GDPR and Data Protection Act 2018. Requests should be addressed to the Data Protection Officer using the contact details in this policy.

• The right to be informed: this policy explains how we use your information.
• The right of access: you can ask for a copy of personal information we hold about you.
• The right to rectification: you can ask us to correct or update inaccurate information.
• The right to restrict or object: you can ask us to stop marketing or object to processing based on legitimate interests.

Our website may contain links to partner, advertiser or affiliate websites. These sites have their own privacy policies, and we do not accept responsibility or liability for them. Please review those policies before providing personal information.

You can ask for all or part of the information we hold about you to be deleted. Where processing is based on consent, you may withdraw that consent at any time. To request deletion, contact reservations@staysecondnature.com.

Changes to this privacy policy will be posted on this page and, where appropriate, notified to you by email. Please check this page periodically for updates.

Questions, comments and requests should be addressed to the Data Protection Officer at Lamington Group, 109 Hammersmith Grove, London, W6 0NQ. Please put “Personal Data Query” in the subject line. If you believe your rights have not been upheld, you may complain to the Information Commissioner’s Office at ico.org.uk.