Privacy Policy

Privacy Policy

Midsummer Place - Midsummer Place Limited Privacy Policy

This is the privacy policy for Midsummer Place Limited, the property company managing Midsummer Place. We are committed to safeguarding your privacy, so please read this policy to understand how the information we hold about you will be treated on our website, when you visit us in person and when you otherwise interact with us.

If you have any questions in relation to this policy, please email customerservice@midsummerplace.co.uk with subject header “data protection query” or write to Centre Management, Midsummer Place, 67 Midsummer Boulevard, Central Milton Keynes, Buckinghamshire. MK9 3GB.

We do occasionally update this policy so you should return to this page and read it through again from time to time.

Information we collect about you and our collection methods:

“Personal data” is information about you from which we can identify you (either on its own, or by piecing it together with other information). Personal data does not include aggregated data where you cannot be identified (e.g. statistics about usage in general or in categories).

We may, from time, collect your personal data in ways other than those set out in this policy, where we do so, we will provide you with relevant privacy notices at the appropriate time. This privacy policy supplements the other notices and is not intended to override them.

The types of personal data we collect about you are:

Contact data

Information provided when you interact with us directly through the site including when registering with us, or participating in promotions and competitions, or completing customer surveys – this may include your title, name, postal address, email address, telephone number(s), and information about your use of our Centre.

Preferences & Profile data

Information about your preferences, including brands and content you like, dislike, click on or share with others;

Information provided when you interact with us directly (e.g. telephoning, writing or emailing us, buying services from us, participating in promotions and competitions);

Demographic information. This includes gender and date of birth, although these are optional at the point of Wi-Fi sign up. The reason we collect this information is to provide relevant marketing communications;

Data collected when you interact with us or otherwise make accessible via third parties, including:

through brand partners and social media platforms (see section 8 below), and

through third party surveys and market research you participate in);

Other information which you provide us with when dealing with us or interacting with us in any way including via third parties;

Financial data

Your credit and/or debit card number and expiry date may be collected if you make a purchase from us;

Image data

CCTV footage, including Body-worn Video (BWV), featuring your image; BWV may also include audio recording.

Vehicle registration number and details (via Automatic Number Plate Recognition (ANPR) systems where it is in operation at our Centre car parks);

Technical / Usage data

Information about your use of the sites. Some of this information may be automatically collected, such as your Internet Protocol (IP) address, unique device identifier, browser type, browser language and access times;

Technical Data from analytics providers;

Details you provide when using our Wi-Fi in a Centre. This is provided by Purple who are the captive portal to the Wi-Fi network in our centre. You will find their Privacy Policy on their platform to view when you sign into the Wi-Fi.

How we use your personal data

We will ensure that in all circumstances, the personal data we hold about you will be adequate to fulfil the purpose for which it was collected, relevant, and not excessive.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal data for an unrelated purpose, we will notify you, where necessary or appropriate, and we will explain the legal basis which allows us to do so.

Please note that we will process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected (including for the period of any contract/agreement we have with you, and for a period of time after in the event of any potential issue), unless we are required by law to retain your personal data for a longer period (e.g. where you make a rights request, and we maintain records to demonstrate how we comply with such requests).

We may use your personal data to:

Provide you with information, products, services or experiences that you request from us;

Process payments for purchases;

Provide reservation or booking services;

Compile a user profile for you where you have requested that we do so through your use of relevant services;

Provide and personalise our products and services to you, including making predictions about your interests or preferences and to display targeted content, features, deals and offers that match your profile or that we believe will be of interest to you;

Keep track of your activity patterns and preferences in order to improve the level of service you receive and to increase the functionality of the sites, including monitoring and analysing usage and trends, determining the effectiveness of our content and personalising and improving the sites;

Link or combine with other information we get from third parties to help understand your needs and provide you with better service.

Inform you of products, services, experiences or promotions which we feel may be of interest to you where you have indicated that you wish to be contacted for such purposes by email, SMS, post, telephone, through the sites or social media platforms, or by other means of electronic communication (and where you have indicated that you are happy to be contacted by specific third parties, you may be contacted about products, services, experiences or promotions by those third parties);

Ensure that content from our sites is presented in the most effective manner for you and for your computer/tablet/mobile;

Send you push notifications;

Interact with you on social media platforms;

Allow you to participate in any interactive features of our products, services and experiences, when you choose to do so;

Manage and administer any of our promotions/competitions which you enter;

Request feedback from you;

Respond to your emails, submissions, questions, comments, requests or complaints and provide customer service;

Send you surveys, updates, security alerts and support and administrative messages and to facilitate your use of, and our administration and operation of, the sites, including to notify you about important changes; and

To deter and to detect fraud and combat criminal and antisocial behaviour.

To ensure we comply with our legal obligations.

International transfers

Your personal data may be transferred outside of the UK. However, we have taken the steps outlined in section 4 below to protect the security of your personal data and comply with our legal obligations when transferring of your personal data to countries outside the UK by ensuring that adequate technological and legal measures are in place to permit such a transfer.

We may transfer your personal data outside of the UK:

In order to store it.

In order to enable us to provide goods or services to you and fulfil our contract with you. This includes order fulfilment, processing of payment details, and the provision of support services.

Where we are legally required to do so.

In order to facilitate the operation of our group of businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights.

We currently transfer Personal data outside the UK:

When you subscribe to our database via the sign-up option on our website, the personal data you supply is collected, stored and processed by Mailchimp, our email marketing provider. You can find out more about how they will store and process your data here; www.mailchimp.com/legal/privacy/
Mailchimp is based in the US.

Purposes for which we use your data – summary

We have set out below, in a table format, a broad summary of the ways we use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data on more than one lawful ground if we are processing the same information for more than one specific purpose.

How we keep your personal data safe

We have a number of measures to keep your data safe and secure:

Your personal data is held on a secure database.

We have policies, rules and technical measures in place to protect the personal data that we have under our control from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss.

All of our employees and data processors that have access to, and are associated with, the processing of your personal data are obliged to respect the confidentiality of your personal data.

All third parties supporting our sites as external data processors are engaged under appropriate contractual and confidentiality protections.

We ensure that your personal data will not automatically be disclosed by us to government institutions or authorities. However, if required by law, or when we receive a request from regulatory bodies or law enforcement organisations, we may disclose your information.