Privacy policy

This Privacy Policy describes the personal information practices of St Austell Brewery Company Ltd and its associated owned brands including Bath Ales, Graze, Brewer & Bean, Tribute, Korev and St Austell Wines. Our Privacy Policy describes the categories of personal data we process and for what purposes. We are committed to collecting and using such data fairly and in accordance with the requirements of the General Data Protection Regulation (GDPR).

The Privacy Policy will become effective from 25th May 2018.

Any queries?

If you have any questions about this privacy policy, Tribute Ale or St Austell Brewery’s practices, or feel that your privacy has been compromised, please contact us at privacy@staustellbrewery.co.uk 

  • St Austell Brewery takes your privacy seriously and here you can find out more about your privacy rights and how we gather, use and share your personal information. This includes the information we already hold about you and any further personal information we might collect about you, either from you or from a third party. How we use your personal information will depend on the products and services we provide to you.

    Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by email privacy@staustellbrewery.co.uk  or by post at St Austell Brewery Data Protection Officer, 63 Trevarthian Road, St Austell, Cornwall, PL25 4BY should you have any questions about how we use your personal information.

    This Privacy Policy provides up to date information and will update any previous information we have given you about using your personal information (also referred to as personal data). We will update this Privacy Policy if we make any significant changes affecting how we use your personal information, and if so we will contact you to let you know about the change.

  • We* are what is known as a ‘Data Controller’ for the purpose of the General Data Protection Regulation (GDPR) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and any successor legislation to the GDPR or the Data Protection Act 1998. We are registered with the Information Commissioner’s Office (ICO) under registration number Z5808722.

    *When we say ‘we’ or ‘us’ in this Privacy Notice, we mean St Austell Brewery Company Ltd, 63 Trevarthian Road, St Austell, Cornwall, PL25 4BY, United Kingdom (Registered Number: 107021) and our associated brands Bath Ales, Graze, Brewer & Bean, Tribute, Korev and St Austell Wines as well as pubs, hotels and inns owned and operated by St Austell Brewery. These are: The Atlantic – Isles of Scilly, Borough Arms – Bodmin, Central Inn – Newquay, Chain Locker  – Falmouth, County Arms – Truro, Fort Inn – Newquay, The Globe – Topsham, Graze – Bath, Graze – Bristol, Great Western Hotel – Newquay, Harbour Inn – Porthleven, Havener’s Bar & Grill – Fowey, Holmbush Inn – St Austell, Hope & Anchor – Kingsbridge, Lifeboat Inn – St Ives, Masons Arms – Seaton, Old Custom House – Padstow, Old Market House – Brixham, Old Success Inn – Sennen Cove, Oystercatcher Bar – Wadebridge, Pedn Olva – St Ives, Pier House Hotel & Harbourside – Charlestown, Port William – Trebarwith Strand, Rashleigh Arms – Charlestown, Rose & Crown – Yealmpton, Samuel Jones – Exeter, Ship Inn – Mousehole, The Ship – Plymouth, Shipwrights – Padstow, St Austell Brewery Visitor Centre – St Austell, The Wellington – Horfield, The Tap Room and Shop – Hare Brewery – Warmley.

    This privacy policy is for individuals only and does not apply to business customers, tenancies or suppliers of St Austell Brewery, or to websites or mobile apps operated by them.  Please refer to their privacy notices for information on their practices with respect to personal information.

  • The GDPR refreshes individuals’ existing rights by clarifying and extending them, and introduces new rights. Not all these rights are absolute rights and may vary depending on any contractual and/or obligations we may have.

    You can contact us via any of our online contact forms or by emailing privacy@staustellbrewery.co.uk to exercise any of your following privacy rights:

    • Right to object. You can object to our processing of your personal information. Please contact us as noted above, providing details of your objection.
    • Right to withdraw consent. If you have given us your consent to use personal information, you can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or contacting us as noted above. Please note that if you opt out of receiving marketing communications from us, we may still send communications to you concerning any outstanding transactions.
    • Rectification. You can ask us to change or complete any inaccurate or incomplete personal information held about you. Before we are able to correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request.
    • Erasure. You can ask us to delete your personal information when it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it. We will delete your data securely within one month of your request.
    • Portability. You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
    • Restriction. You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
    • Make a complaint. You can make a complaint about how we have used your personal information to us, by contacting us via the details on our websites, or to a supervisory authority – for the UK this is the Information Commissioner’s Office at ico.org.uk (Link opens in a new window).
    • Access to your personal information. You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.

    You can make a request for access by contacting our DPO at ‘St Austell Brewery Data Protection Officer, 63 Trevarthian Road, St Austell, Cornwall, PL25 4BY’. Please make all requests for access in writing, and provide us with evidence of your identity.

    We will not make any charge for responding to any request from you to exercise your privacy rights, and we will respond to your requests in accordance with our obligations under data protection law.

  • The types of personal information we may collect (directly from you or from third party-sources) and our privacy practices depend on the nature of the relationship you have with us and the requirements of applicable law:

    We endeavour to collect information only to the extent relevant for the purposes of processing. Below are explained the legal bases, the ways we collect information and how we use it.

  • We will collect the following personal information provided you have opted-in to marketing communications and have confirmed you are over 18 years old:

    • Name; and
    • Email address.

    This data will be used for consumer-facing programs, including but not limited to newsletters sent on a regular basis with news and offers about St Austell Brewery and/or any of our associated brands. A preference centre is available to update your marketing preferences as well as your details.

    The legal basis for this processing is Consent and you can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or contacting us on marketing@staustellbrewery.co.uk

    We use a third party provider, Campaign Monitor, to deliver our e-newsletters. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.

    Any data provided is stored securely in Campaign Monitor web servers in accordance with current regulations. For more information, please see Campaign Monitor’s privacy notice (Link opens in a new window).

    A copy of the data is also kept in a database hosted on our encrypted Managed VPS at HeartInternet. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

    If you do not interact with any of our marketing communications (ie open newsletter) sent during the next 13 months following your subscription, all personally identifiable data stored will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • We may collect the following personal information provided you have opted-in to be contacted about your enquiry and have confirmed you are over 18 years old due to the nature of our business:

    • Contact details including title, name, postal and email addresses, postcode, contact telephone numbers – this data will allow us to contact you with regards your enquiry; and
    • Details about your enquiry.

    We may provide a consent box to opt-in to receive marketing communications from St Austell Brewery and our associated brands and you can withdraw your consent at any time by contacting us on marketing@staustellbrewery.co.uk

    The legal basis for this processing is Contract to enable us addressing any enquiry in a timely manner. The data provided will be used exclusively to contact you in relation to your enquiry and all details will be kept securely in our email servers and web servers for 13 months once your enquiry has been resolved. After this period all personally identifiable data stored will be deleted and we may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes.

    We use a third party provider, Microsoft Office 365, to store our email data securely. For more information, please see Microsoft’s privacy notice (Link opens in a new window).

    We also use a third party provider, HeartInternet, to store our website data securely. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

  • We may collect the following information provided you have opted-in to be contacted about your promotion entry and have confirmed you are over 18 years old:

    • Personal details including title, name, postal and email addresses, postcode, contact telephone numbers; and
    • Details about your promotion entry.

    The process might involve storing personal data obtained from collecting entries on our server, selecting a winner at random from the data, using it to contact winners and then to send winners their prizes or to transfer the data to the promotion’s partner to fulfil the prize.

    The legal basis for this processing is Consent and you can withdraw your consent at any time by contacting us on marketing@staustellbrewery.co.uk

    We may provide a consent box to opt-in to receive marketing communications from St Austell Brewery and our associated brands as well as another box to opt-in to receive marketing communications from our promotions’ partners. If you wish to withdraw your consent at any time please contact us on marketing@staustellbrewery.co.uk

    The data provided will be kept securely in our email servers and web servers for 13 months after the processing of the prize. After this period all personally identifiable data stored will be deleted and we may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes.

    We use a third party provider, Microsoft Office 365, to store our email data securely. For more information, please see Microsoft’s privacy notice (Link opens in a new window).

    We also use a third party provider, HeartInternet, to store our website data securely. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

  • We may collect the following personal information when you purchase products for delivery through our websites (www.staustellbreweryshop.co.uk or www.bathalesshop.co.uk ), over the phone and/or in person:

    • Your first and last name;
    • Billing and delivery postal addresses;
    • Phone numbers;
    • Email address;
    • Username and password;
    • PayPal or Payment card details; and
    • Details of any query.

    We, or third party data processors who act on our behalf, may use the personal data you provide us in the following manner:

    • To provide you with the requested goods and/or services;
    • To contact you if there is a query regarding your order;
    • In certain circumstances in order to process your order and to verify your identity, we may call your provided telephone number to perform security checks and to request that you verify certain information;
    • To enable us to comply with any legal or regulatory requirements like the detection and prevention of fraud or other crimes;
    • To assist with any of your customer queries; and
    • To provide a VAT invoice for a store purchase.

    The legal basis for this processing is Contract so we can fulfil your order.

    We provide a consent box to enable you to opt-in to receive marketing communications from St Austell Brewery and our associated brands. You can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or by contacting us on marketing@staustellbrewery.co.uk

    We may disclose personal data we collect to our third party processors in the following manner:

    • All credit/debit card holders are subject to validation checks and authorisation by the card issuer and we may share your personal information with such third parties as are necessary to enable us to do such checks.
    • We may pass your information to our chosen courier in order to fulfil and/or despatch your orders. For more information, please see Parcel Force’s privacy notice (Link opens in a new window).
    • The information on the ‘my account page’ is stored in a database hosted on our Managed VPS at HeartInternet. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).
    • Some of this data is retrieved from this server via API to work with Nexus Open Systems and stores the data on a MS Azure account owned by St Austell Brewery. For more information, please see Nexus Open Systems’ privacy notice (Link opens in a new window).
    • We may disclose your personal data where it is necessary to comply with any applicable law or an order of a governmental or law enforcement body.

    The data provided will be used to fulfil your order and all details will be kept securely in our email servers and web servers for 13 months. After this period, all personally identifiable data stored will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • We use a third party, HGem Ltd, to collect, administer and process any feedback provided via www.smiles-survey.co.uk in order to measure your experience and to identify opportunities to improve it.

    For more information, please see HGem Ltd’s privacy notice (Link opens in a new window).

    HGem will pass your personal details on to us for the following purposes:

    • to contact you in the event of a prize draw win; and
    • to send you relevant marketing information.

    HGem will request your consent separately for each purpose.

    Any data provided is stored securely in HGem web servers for 6 months. HGem will share non-personally identifiable data with St Austell Brewery for the purpose of analysing customer feedback and improving performance.

    HGem will only pass your personal details onto us when you have opted-in to receive relevant marketing information. You can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or contacting us on marketing@staustellbrewery.co.uk

     

  • Free WiFi is provided by a third party – Splash Access Cisco Meraki – which collect the following data when using such services:

    • Your first and last name;
    • Email address;
    • Mac address of your device;
    • Login time; and
    • Your assigned IP address

    For more information, please see Splash Access’ privacy notice (Link opens in a new window).

    Splash Access Cisco Meraki will only pass your personal details onto us to send you relevant marketing information when you have opted-in for this processing. Your data may also be provided to regulatory bodies where we are under a legal obligation to do this, to protect our own rights or if we feel someone’s safety is at risk.

    Any data provided is stored securely in Splash Access Cisco Meraki encrypted web servers in accordance with local regulations. If you do not login to a location for more than 13 months, all personally identifiable data stored in the servers will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • We may collect the following personal information when you book any accommodation through our websites, over the phone with our Central Reservation team and/or at our hotels or inns:

    • Contact details including title, name, postal and email addresses, postcode, contact telephone numbers;
    • Business information, such as employer details and job title, particularly from our corporate customers;
    • Transaction information, including payment and booking details;
    • Purchase history, including the hotels that you have stayed in, activities on site (e.g. food purchases and Wi-Fi use) and the date(s) of your stay;
    • Demographic information;
    • Registration information, including your password and room and other expressed preferences;
    • Customer communication preferences;
    • Customer feedback; and
    • Computer or device information (e.g. your IP address and operating system).

    We may supplement the information that you provide to us with information from trusted third parties (including travel agencies, distributors and list rental companies) for the purposes outlined in this privacy policy.

    Where you book accommodation for other people, we may ask you to provide the above information about them (e.g. we will usually ask for the title, first name and surname, e-mail address and nationality of a person for each room that you book for identification purposes). You should only provide us with information about other people if you have their permission to do so.

    We may use your information for the following purposes:

    • Administration and management of room bookings;
    • Processing transactions;
    • Sending your booking confirmation, pre-arrival email and post stay email;
    • Business, website and consumer analysis and reporting; and
    • Correspondence between us, including where you use our ‘Contact us’ form.

    The legal basis for this processing is Contract so we can fulfil your reservation. Prior to your stay this may include sending your information to the hotel or sending you pre-stay communications. Following your stay, we may also send you post-stay communications and satisfaction surveys to get feedback on your experience.

    When booking, we will seek your consent to opt-in to receive marketing communications from St Austell Brewery and our associated brands so we can inform you about new hotels or special offers. You can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or by contacting us on marketing@staustellbrewery.co.uk

    We may disclose personal data we collect to third parties to provide services in relation to our business in the following manner:

    • All credit/debit card holders are subject to validation checks and authorisation by the card issuer and we may share your personal information with such third parties as are necessary to enable us to do such checks.
    • The information on the ‘my account page’ is stored in a database hosted on our Managed VPS at HeartInternet. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

    Aside from the purposes described above, we do not share your stay information with any other third parties unless we have your consent or under special circumstances, such as:

    • when we believe in good faith that the disclosure is required by law or to protect the safety of hotel guests, employees, the public or St Austell Brewery property;
    • when disclosure is required to comply with a judicial proceeding, court order, subpoena, warrant or legal process; or
    • in the event of a merger, asset sale, or other related transaction.

    The data provided will be kept securely in our web servers and our booking management system for 84 months. After this period, all personally identifiable data stored will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

    We use a booking management system provided by Welcome Systems and any personal data is stored securely in their Microsoft Azure Platform. For more information, please see Welcome System’s privacy notice (Link opens in a new window).

    We also use a third party provider, HeartInternet, to store our website data securely. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

  • You may be asked to submit the following personal information about yourself when you make a table reservation:

    • name
    • e-mail address (used for booking confirmation and post-dining feedback emails)
    • home or work address
    • billing information taken for deposits, ticketing, or holding credit card information for use in the case of no-shows (where applicable)
    • telephone number
    • company name
    • dietary requests

    The legal basis for this processing is Contract so we can fulfil your booking request and you may dine at St Austell Brewery’s managed houses.

    We may provide a consent box to opt-in to receive marketing communications from St Austell Brewery and our associated brands. You can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or by contacting us on marketing@staustellbrewery.co.uk

    We may also provide a consent box to opt-in to receive marketing communications from the reservations software provider. Please refer to their own Privacy Policy if you opt-in.

    Any data provided is stored in the reservations software provider web servers located in the UK in accordance with local regulations. If you do not login to a location for more than 13 months, all personally identifiable data stored will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • You may be asked to submit the following personal information about yourself when you apply for a loyalty card:

    • Your name, email address, home and business address, phone number, nationality and date of birth;
    • Your membership number and pin as well as details of your memberships with any of our programme partners such as our airline or car rental partners;
    • Information that you may choose to provide in your loyalty profile, such as your personal stay and destination preferences; and
    • Marketing preferences, including how you prefer to be contacted as well as what types of information you are interested in hearing about.

    The legal basis for this processing is Contract so we can use your information to operate and provide services in connection with our loyalty programmes.

    This may include:

    • Enrolment in the loyalty programme;
    • The order and delivery of merchandise that you may redeem online;
    • Sending you updates, account statements and other information relating to your participation in one of our programmes or services;
    • Sending you marketing communications in relation to the products and services offered by St Austell Brewery and associated brands that are related to your loyalty programme; and
    • Analytics, statistical analysis and other research.

    Although provision of much of the information requested is voluntary, the failure to provide certain information may impact and/or prevent our ability to offer you certain services. Please refer to the Terms and Conditions of each loyalty programme for further information.

    The data provided will be kept securely in our web servers and our loyalty programme providers’ web servers located in the UK in accordance with local regulations. If you do not use your membership card for more than 13 months, all personally identifiable data stored will be deleted and the card will be annulled.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • When you contact us via phone, email or mail with questions, requests, compliments or complaints, we may collect the following personal information from you:

    • Contact details including title, name, postal and email addresses, postcode, contact telephone numbers – this data will allow us to contact you with regards your enquiry; and
    • Details about your enquiry.

    The legal basis for this processing is Contract to enable us addressing any enquiry in a timely manner. The data provided will be used exclusively to contact you in relation to your enquiry and all details will be kept securely for 13 months once your enquiry has been resolved.

    After this period the files containing this data will be transferred to our Archives to preserve the information and stories as part of St Austell Brewery’s history.

  • As part of any recruitment process, St Austell Brewery collects and processes personal data when you apply for a job via www.staustellbrewerycareers.co.uk. St Austell Brewery is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.

    We collect a range of information about you, this includes;

    • your name, address and contact details, including email address and telephone number;
    • details of your qualifications, skills, experience and employment history;
    • information about your current level of remuneration, including benefit entitlements;
    • whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process;
    • information about your entitlement to work in the UK; and
    • equal opportunities monitoring information, including information about your ethnic origin, and health.

    St Austell Brewery needs to process data to take steps, at your request, prior to entering into a contract with you.  In some cases, the Company needs to process data to ensure that it is complying with its legal obligations, for example, it is required to check a successful applicant’s eligibility to work in the UK before employment starts.

    St Austell Brewery has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows the Company to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job.  The Company may also need to process data from job applicants to respond to and defend against legal claims.

    St Austell Brewery only processes health information if it needs to make reasonable adjustments to the recruitment process for candidates who have a disability.  This is to carry out its obligations and exercise specific rights in relation to employment.

    This information is collected in a variety of ways. For example, data might be contained in application forms, CVs or covering letters, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including online tests.

    St Austell Brewery will also collect personal data about you from third parties, such as references supplied by former employers and information from employment background check providers and where necessary information from criminal records checks. We will seek information from third parties only once a job offer to you has been made and will inform you that it is doing so.

    We use Broadbean as our recruitment software and if your application for employment is unsuccessful, the data provided will be held on our servers and Broadbean servers for a period of 6 months. At the end of that period all personally identifiable data stored will be deleted and/or destroyed confidentially.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

    The Company will not use your data for any purpose other than the recruitment exercise for which you have applied.

    If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice.

  • When you complete our online application form through the St Austell Brewery website to register your interest on tenancy opportunities, we ask for certain pieces of personal information and certain personal financial information. This information will be used in our tenant appointment process, including for credit checking purposes, and in the context of any other business that St Austell Brewery conducts with you.

    Personal Information collected from you as a prospective tenant may include:

    • Name;
    • Address;
    • Telephone number;
    • Email address;
    • Date of birth;
    • Citizenship;
    • Educational background;
    • Criminal and other background checks;
    • Bank account information;
    • Financial information.

    The legal basis for this processing is Consent as when you submit an electronic application seeking consideration as a prospective tenant through our website, we will request your consent to be contacted by St Austell Brewery Tenancy Recruitment team with regards your application.

    On application, you will also be asked consent to be notified in a regular basis about new tenancies available and you can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or contacting us on marketing@staustellbrewery.co.uk

    All information, including Personal Information submitted by you as part of the application process, may be shared with third parties in the following ways:

    • We pass your personal information to third party suppliers and services providers who use your personal information in order to provide services to us or on our behalf;
    • As required by law;
    • Where we need to do so in order to enforce our rights or protect our interests or those of others; or
    • For the prevention of crime, fraud, money laundering and for the tracing of debtors.

    Please note, although we do not control our service providers, we do restrict them from using a tenant’s business contact information for any reason other than for the purpose for which we contracted them to do, and to protect a tenant’s business contact information in accordance with all applicable laws and the general privacy principles described in our Privacy Policy.

    We use a third party software (Focus Rent) to store and manage your application as a prospective tenant. All data provided will be held on Focus servers for a period of 36 months. At the end of that period all personally identifiable data stored will be deleted and/or destroyed confidentially if you don’t show any interest of available properties.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

    If your application for a tenancy is successful, personal data gathered during the process will become part of your tenant file and retained during your tenancy agreement. The periods for which your data will be held will be provided to you in a new privacy notice.

  • When you complete our online application form through the St Austell Brewery website to become a Proper Job Ambassador, we ask for certain pieces of personal information, certain social media details and certain beer related interests. This information will be used in our Proper Job Ambassador appointment process and in the context of any other business that St Austell Brewery conducts with you.

    Personal Information collected from prospective ambassadors may include:

    • Name;
    • Address;
    • Telephone number;
    • Email address;
    • Social Media profiles;
    • Shirt size;
    • Beer related interests information.

    The legal basis for this processing is Consent as when you submit your application seeking consideration as a prospective ambassador, we will request your consent to be contacted by St Austell Brewery with regards your application. You can withdraw your consent at any time by following the opt-out instructions in the marketing communications we send you or contacting us on marketing@staustellbrewery.co.uk

    All information, including Personal Information submitted by you as part of the application process, may be shared with third parties in the following ways:

    • We pass your personal information to third party suppliers and service providers who use your personal information in order to provide services to us or on our behalf;
    • As required by law;
    • Where we need to do so in order to enforce our rights or protect our interests or those of others; or
    • For the prevention of crime, fraud, money laundering and for the tracing of debtors.

    Please note, although we do not control our service providers, we do restrict them from using your information for any reason other than for the purpose for which we contracted them to do and to protect your information in accordance with all applicable laws and the general privacy principles described in our Privacy Policy.

    If unsuccessful, the data provided will be kept securely in our email servers and web servers for 13 months once your application has been processed. After this period all personally identifiable data stored will be deleted and we may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes.

    If your application to become an ambassador is successful, personal data gathered during the process will become part of your ambassador file and retained during the time you perform your duties as an ambassador.

    We use a third party provider, Microsoft Office 365, to store our email data securely. For more information, please see Microsoft’s privacy notice (Link opens in a new window).

    We also use a third party provider, HeartInternet, to store our website data securely. For more information, please see HeartInternet’s privacy notice (Link opens in a new window).

  • We may collect the following personal information when you book any course over the phone with our Training Team and/or at our Training Centre:

    • Contact details including title, name, postal and email addresses, postcode, date of birth, contact telephone numbers;
    • Business information, such as employer details and job title, particularly from our corporate customers;
    • Transaction information, including payment and booking details;
    • Purchase history, including other courses attended, activities on site (e.g. food purchases and Wi-Fi use) and the date(s) of your course;
    • Customer feedback; and
    • Computer or device information (e.g. your IP address and operating system).

    Where you book a course for other people, we may ask you to provide the above information about them. You should only provide us with information about other people if you have their permission to do so.

    We may use your information for the following purposes:

    • Administration and management of course bookings;
    • Processing transactions;
    • Sending you booking confirmation, pre-arrival letter and post attendance letter;
    • Business, website and consumer analysis and reporting; and
    • To communicate with you for administrative or operational reasons.

    The legal basis for this processing is Contract so we can provide the service you have requested from us. Prior to your course attendance, this may include sending your registration to awarding bodies or sending you pre-arrival communications. Following your course attendance, we may also send you post-completion communications and satisfaction surveys to get feedback on your experience.

    We may disclose personal data we collect to third parties to provide services in relation to our business in the following manner:

    • All credit/debit card holders are subject to validation checks and authorisation by the card issuer and we may share your personal information with such third parties as are necessary to enable us to do such checks.
    • For registration, examination and certification with all awarding bodies (BIIAB, WSET, True Blue Training Sessions)
    • For keeping a training record with our provider CPL

    Aside from the purposes described above, we do not share your personal information with any other third parties unless we have your consent or under special circumstances, such as:

    • when we believe in good faith that the disclosure is required by law or to protect the safety of hotel guests, employees, the public or St Austell Brewery property;
    • when disclosure is required to comply with a judicial proceeding, court order, subpoena, warrant or legal process; or
    • in the event of a merger, asset sale, or other related transaction.

    Please note, although we do not control our service providers, we do restrict them from using any candidate’s information for any reason other than for the purpose for which we contracted them to do, and to protect your contact information in accordance with all applicable laws and the general privacy principles described in our Privacy Policy.

    As an approved centre with the BIIAB and other awarding bodies we will hold candidate information for 3 years. This is for the purpose of:

    • Awarding bodies requiring information about candidates that have undertaken accredited qualifications
    • Candidates requiring details of courses taken
    • Statistical data monitoring intake of candidates

    After this period, all personally identifiable data stored will be deleted.

    We may keep an anonymised form of your personal data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

  • St Austell Brewery is committed to protect your privacy and there are instances where we will collect automatically information in order to provide you with a satisfactory online service or to comply with licensing law as we collect your personal information recorded on our CCTV systems.

  • With regards to each of your visits to any of our websites we will automatically collect the following information:

    • Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
    • Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.
  • St Austell Brewery considers the use of CCTV a necessary tool to help reduce crime, reduce the fear of crime and improve the safety of our customers and staff.

    We have installed CCTV systems in our pubs and premises as a condition of our license and for the purposes of customer and staff safety and crime prevention and detection.

    We will only disclose CCTV images to others who intend to use the images for the purposes stated above. CCTV images will not be released to the media for entertainment purposes or placed on the internet.

    Images captured by CCTV will not be kept for longer than 30 days.  However, on occasions there may be a need to keep images for longer, for example where a crime is being investigated.

    Recordings will be kept securely on password protected hard drives.

    St Austell Brewery considers that CCTV will achieve these objectives:

    • To assist in the reduction of crime, anti-social behaviour and the fear of crime on any of our premises
    • To facilitate the apprehension and prosecution of offenders
    • To assist in the prevention and detection of crime and disorder committed in any of our premises
    • To reduce the theft of and from cars in available car parks
    • To improve the personal safety of our staff and customers
    • The system will also be operated in accordance with the 12 guiding principles set out in the surveillance camera Code of practice 2013.

    As well as being the purposes for which we use your personal information, all of the above are also legitimate reasons for us to use and store personal information relating to you which is captured on our CCTV systems and legitimate interest is our legal basis for processing your personal information.

    We may anonymise any of the personal information we hold on our CCTV system (so that it does not directly identify you, for example by obscuring your face) and it therefore ceases to be your personal information.  We may use this anonymised information for any other purposes.

    You have the right to see CCTV images of yourself and be provided with a copy of the images. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Please contact privacy@staustellbrewery.co.uk.

  • Our website uses cookies to distinguish you from other users of our websites. This helps us to provide you with a good experience when you browse our websites and also allows us to improve our sites.

    For detailed information on the cookies we use, the purposes for which we use them, and how you can disable them, please see our Cookie Policy (Link opens in a new window).

  • St Austell Brewery takes the security of any personal information we hold very seriously.

    Where necessary, and in common with other websites and apps, we use SSL (Secure Sockets Layer) encryption to ensure that personal information provided to us is not visible to anybody else when in transit between your computer and our servers. You can tell when SSL is in use by the presence of a small “padlock” symbol in the status bar of your web browser.

    In addition, our web servers are housed behind a secure firewall that prevents access to our databases by unauthorised users. All of our servers are housed in a secure environment with high levels of physical security. However, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our site: any transmission is at your risk. Once we have received your information, we will handle it in accordance with our usual practices.

    Where you have chosen a password that enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

  • For the purpose of granting access to our WiFi services, parental consent will be requested for children between 13 and 18 years old and their personal data will be processed as outlined in this Privacy Policy.

    For the purpose of monitoring a job application from prospective employees aged 16 or 17 years old we will process their personal data according to the prospective employees section of this Privacy Policy.

    St Austell Brewery does not knowingly collect or solicit personal information for marketing purposes from anyone under the age of 18.

    In the event that we learn that we have collected personal information from anyone under age 18 for marketing purposes, we will delete that information as quickly as possible. If you believe that we might have any information from or about someone under 18, please contact us at privacy@staustellbrewery.co.uk

  • All changes to this Privacy Policy are effective when they are posted on this page.

    When we change the policy we will let you know via email and/or a prominent notice on our websites, prior to the change becoming effective and update the ‘effective date’ at the top of this page.

    If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this website, please contact us at privacy@staustellbrewery.co.uk