Privacy Policy
Welcome to the Yokoso Privacy Notice.
Yokoso is dedicated to safeguarding your personal data and values your privacy. This privacy notice will provide you with information regarding the manner in which we manage your personal data when you visit our website, irrespective of the location from which you access it. Additionally, it will inform you of your privacy rights and the legal safeguards that are in place to protect you.
This privacy notice is presented in a layered format, allowing you to easily access the specific sections outlined below.
Important Information and Who We Are
a) Purpose of this Privacy Notice
The purpose of this privacy notice is to provide you with information regarding the collection and processing of your personal data by Yokoso through your use of this website. This includes any data that you may provide through the website when you:
- Make an order or booking
- Register to use our services
- Opt-in to receive email marketing from us
- Provide feedback or complete a survey
This website is not intended for children, and we do not knowingly collect data related to children.
It is crucial that you review this privacy notice in conjunction with any other privacy notice that we may provide on specific occasions when we are collecting or processing personal data about you. This will ensure that you are fully informed about the manner in which and the rationale behind the use of your data. This privacy notice is intended to complement the other notices and not to supersede them.
b) Controller
Yokoso is the controller and responsible for your personal data (collectively referred to as “Yokoso”, “we”, “us” or “our” in this privacy notice).
You are entitled to file a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), at any time. Please do not hesitate to contact us in the first instance, as we would be grateful for the opportunity to address your concerns before you approach the ICO.
c) Changes to the Privacy Notice and Your Duty to Inform Us of Changes
It is crucial that the personal data we possess regarding you is both precise and up-to-date. Please inform us of any modifications to your personal information that occur during your association with us.
d) Third-party Links
This website may contain links to external websites, plug-ins, and applications. Engaging with those links or activating those connections may permit third parties to gather or disseminate information regarding you.
We lack control over these third-party websites and bear no responsibility for their privacy policies. Upon exiting our website, we advise you to review the privacy policy of each website you visit.
The data we collect about you
Personal data, or personal information, refers to any information that can identify an individual. It excludes data from which the identity has been anonymized.
We may collect, utilise, store, and transfer various categories of personal data about you, which we have categorised as follows:
- Identity Data: Includes first name, last name, title, date of birth, and gender.
- Contact Data: Includes physical address, email address, and telephone numbers.
- Financial Data: Includes payment card details.
- Transaction Data: Includes details about payments from you.
- Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Includes purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We additionally gather, utilise, and disseminate Aggregated Data, including statistical or demographic information, for any purpose. Aggregated Data may originate from your personal data; however, it is not classified as personal data legally, as it does not directly or indirectly disclose your identity. Nonetheless, if we amalgamate or link Aggregated Data with your personal data in a manner that can directly or indirectly identify you, we will regard the combined data as personal data, which will be utilised in accordance with this privacy notice.
We do not gather any Special Categories of Personal Data regarding you, which encompasses information about your race or ethnicity, religious or philosophical beliefs, sexual life, sexual orientation, political opinions, trade union affiliation, health information, and genetic or biometric data.
We do not gather any data regarding criminal convictions or offences.
If you fail to provide personal data
If we are legally obligated to collect personal data, or if it is required under a contract with you or for a prospective contract, and you do not provide the requested data, we may be unable to fulfil the existing contract or initiate a new one with you (for instance, to deliver our services or to process your booking). In this instance, we may need to annul the service you have requested or attempted to request from us, or a reservation you have made or attempted to make with us; however, we will inform you if this occurs at that time.
How is your personal data collected?
We use different methods to collect data from and about you, including:
a) Direct Interactions
You may provide us with your Identity, Contact, Financial, Transactional, and/or Profile Data when you:
- Make a reservation directly with us.
- Communicate with us via phone, email, or other means.
- Acquire services.
- Request marketing materials.
- Provide feedback, complete a survey, or submit a complaint, among other actions.
b) Automated Technologies or Interactions
While you interact with our website, we may automatically gather Technical Data regarding your device, browsing activities, and patterns. We collect this personal information through:
- The use of cookies, server logs, and analogous technologies.
- Technical Data gathered when you access other websites utilizing our cookies.
For additional information, refer to our cookie policy.
c) Third Parties
We may receive personal data about you from various third parties, including:
- Technical Data from analytics providers, such as Google, based outside the EU.
- Identity, Contact, Financial, and Transaction Data from providers of technical, payment, and delivery services, such as PayPal and Stripe, based inside the EU.
- Identity and Contact Data from providers of other services and platforms, such as Fork, Open Table, Mailchimp, Designmynight, and Wireless Social, each based inside the EU.
Additionally, you may provide data when you:
- Request marketing to be sent to you.
- Provide feedback, complete a survey, or submit a complaint.
How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract, we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Promotional offers from us
We may utilise your Identity, Contact, Technical, and Profile Data to assess your potential preferences or needs, as well as to determine what may captivate your interest. This is the method by which we determine the services and offers that may be pertinent to you (referred to as marketing).
You may receive marketing communications from us if you have requested information or explicitly opted in to receive such communications, provided you have not opted out of them.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any company outside the Yokoso for marketing purposes.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
Change of purpose
Your personal data will solely be utilised for the purposes for which it was collected, unless we reasonably determine that it is necessary to use it for an alternative reason that aligns with the original purpose.
Be advised that we may process your personal data without your awareness or consent, in accordance with the aforementioned regulations, when mandated or authorized by law.
Disclosures of your personal data
We may have to share your personal data with the parties set out below:
- Internal and External Third Parties.
- ‘PayPal’, ‘Stripe’, ‘Fork’, ‘Open Table’, ‘Designmynigh’, ‘Mail Chimp’, ‘Google’, ‘Wireless Social’ etc.
- Third parties to whom we may decide to sell, transfer, or merge portions of our business or assets. Alternatively, we may pursue the acquisition of other businesses or engage in mergers with them. Should a transition occur within our business, the new proprietors may utilise your personal data in accordance with the stipulations outlined in this privacy notice.
Data Security
We have implemented suitable security measures to avert the accidental loss, unauthorised use or access, alteration, or disclosure of your personal data. Furthermore, we restrict access to your personal data to employees, agents, contractors, and other third parties who require it for business purposes. They will process your personal data solely according to our directives and are bound by a duty of confidentiality.
We have established protocols to address any suspected personal data breach and will inform you and any relevant regulator of a breach when legally mandated.
Data Retention
How long will you use my personal data for?
Your personal data will be retained solely for the duration necessary to achieve the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations.
To ascertain the suitable retention duration for personal data, we evaluate the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, the feasibility of achieving those purposes through alternative methods, and the relevant legal obligations.
Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
What we may need from you
We may require specific information from you to verify your identity and validate your entitlement to access your personal data or exercise any of your other rights. This is a security protocol designed to prevent the unauthorised disclosure of personal data. We may contact you to request additional information regarding your request to expedite our response.
Time limit to respond
We endeavour to address all valid requests within one month. At times, it may require more than a month to address your request if it is especially intricate or if you have submitted multiple requests. In this instance, we will inform you and provide ongoing updates.