Privacy policy
Whitbread (also referred to as ‘we’, or ‘us’) respects your privacy and your personal data. This Privacy Policy explains what personal data we collect and how it is used. It also explains what rights you have over your data and how you can use those rights.
Summary of how we use your data
Whitbread uses your personal data to enable users to subscribe to our alerting service to notify them of new documents and material uploaded to our website and deal with enquiries as well as to process reports of human rights or violations or environmental risks or violations of environmental obligations caused by our business activities or the business activities of one of our direct suppliers, filed via our complaints procedure channel pursuant to Section 8 of the German Supply Chain Due Diligence Act.
Our website uses cookies. In simple terms, cookies improve functionality and customise the site for you. This allows us to send you Whitbread promotional material we think is most relevant for you, based on your use of our site. If your settings allow us to, our cookies capture grouped data to understand how our site works for users. This helps us improve our site.
Information we collect from you
We collect information from you on certain occasions, and this may cover your name, IP address, email, date of birth, gender, phone number, address, telephone conversations and correspondence. In particular:
- We keep information you give us directly such as contact details, address, comments, feedback and marketing preferences.
- If you engage with us online via our website our cookies will capture your IP address, your location, and record how you use the site to help improve it and improve your user experience.
- If you post information online about us or provide feedback, we may keep a record.
- If you give feedback we will record details and all related information such as emails, letters and phone calls
- If you report human rights or environmental risks or violations of human rights or environmental obligations caused by our business activities or the business activities of one of our direct suppliers via our complaints procedure channel pursuant to Section 8 of the German Supply Chain Due Diligence Act, we will process your data (provided that the report was not made anonymously) in order to process the report. If the report was filed anonymously, the data controller for the corresponding data processing is our service provider, who operates the platform for the complaints procedure channel. For further information, please refer to their information on data protection.
Strictly necessary cookies
These cookies are always active and are necessary for this website to function. They cannot be switched off. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences.
You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
| Function provider | Cookie name | Data stored | Purpose | Duration |
|---|---|---|---|---|
| Youtube.com | LOGIN_INFO, 1p_JAR, ANID, APSID, CONSENT, DSID, GPS, HSID, SID, SSID, IDE, NID, OGP, OGPC, PREF, SAPISID, SID, SIDCC, SSID, VISITOR_INFO1_LIVE, YSC, permutive-id, permutive-session, watched_video_id_list, demographics | Various unique identifiers, as well as login information that may relate to a Google account. | Video functionality | Some of the cookies expire up to 20 years after your last visit to a page containing a Youtube video, although some expire sooner. |
| whitbread.co.uk | PHPSESSID | Works by creating a unique id (UID) for each visitor and stores variables based on this UID. | Session cookie | When browsing session ends. |
| moove_gdpr_popup | Cookie set by the UK cookie consent plugin to record that you accept the fact that the site uses cookies. | 30 days | ||
| pum-* | These control the repeated display of popups in the browser. Cookies are assigned an identification (ID) number formatted as ‘pum-{integer}’. | 14 days | ||
| BrighterIR | AWSALB, AWSALBCORS | Cookie set by Amazon Web Services Load Balancer to preserve server session stickiness. | 1 week | |
| XSRF-TOKEN | Cookie set by Laravel framework to protect against cross-site exploits. | 2 hours | ||
| Laravel_session | Cookie set by Laravel framework to preserve session data on investor relations tools. | 2 hours |
Performance cookies
These cookies allow us to count visits and traffic so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular, and see how visitors move around the site.
All information that is collected by these cookies is aggregated, and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies are set by the Google Analytics service, but hosted by whitbread.co.uk.
| Host | Cookie name | Duration |
|---|---|---|
| whitbread.co.uk | _ga | 1 year |
| whitbread.co.uk | _gat | 1 minute |
| whitbread.co.uk | _gid | 24 hours |
Targeting cookies
We do not currently use targeting cookies.
How we use information and the legal basis
To do what we need to in order to run our business (and ‘pursue our legitimate interests’),
- we use your information to provide and improve our website and businesses, and respond to any comments or complaints you may send us
- we monitor the Whitbread website and responses to email marketing,
- to maintain records for our administrative purposes
We may, if you give us consent:
- send you electronic marketing in relation to our relevant products and services, or those of other Whitbread companies and carefully selected partners of ours.You can subscribe or unsubscribe from our marketing communications online through their account settings.
- pass your personal data on to Whitbread Group PLC to assist in providing the administration of the site and its services such as the subscription service,
- place cookies and use similar technologies – for more information on our use of Cookies click here,
- use data for other purposes where we explain that purpose when we ask for consent.
Where we are required to process your data by law:
- In response to requests by the government or law enforcement authorities conducting an investigation.
- in connection with complaints, legal claims, compliance, regulatory and investigative purposes as necessary
- If you exercise your rights under data protection legislation such as where you wish to subscribe or unsubscribe from our marketing communications
- To fulfil our legal obligation under Section 8 of the German Supply Chain Act Due Diligence Act to establish a complaints procedure.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent to process your personal data, you will always be able to withdraw that consent, although we may have other legal grounds for processing it, such as those set out above. Nevertheless, you have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.
When you give consent, you are able to withdraw that consent at any time by contacting us. If you do so we can only continue to use your data if another legal basis applies, such as when we’re required to do something by law.
Data Sharing
Whitbread PLC is part of the Whitbread group of companies and data is shared within Whitbread PLC with Whitbread Group PLC.
We use third party providers for the following services
- Hosting and maintenance of the website
- Marketing, such as customer insight, relationship management and research
- To provide and operate the complaints procedure channel pursuant to Section 8 of the Supply Chain Due Diligence Act
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business, in which case you will be notified.
Personal data may be shared with government authorities and/or law enforcement officials if required by law or if required for a legal claim.
International Data Transfers
Your personal data will not be transferred outside the European Economic Area (the EU plus Iceland, Lichtenstein and Norway).
Cookies and similar technologies
Our website uses cookies. Full information is in our cookie policy. This includes information on how to adjust your browser settings to accept or reject cookies.
Data Retention
We keep information on active subscribers, until you advise us you no longer wish to receive notifications from us.
Customer interactions are stored, depending on the nature of the interaction and any applicable law. We look to keep information for the minimum time in line with data protection principles and our processes.
If you unsubscribe from marketing communications, we keep a record of this request indefinitely to ensure we do not send you direct marketing again.
Your rights
You have rights over your personal data. You can ask for a copy of your information. You can ask for information to be corrected or deleted. You can ask for us to limit or restrict processing. You can object to us processing your data. You can ask for a copy to be sent in structured digital format or ask for us to send it to another party.
Some rights may however be limited, for example we may be obliged by law to keep information, and as we have to respect other people’s privacy so we may not be able to meet your request where that would reveal personal data about someone else. Sometimes there may be a compelling legitimate interest to keep processing data.
To process a request from you, we will need to confirm your identity to ensure we’re accessing the right data.
If you have a data protection question or concern, or have previously worked at Whitbread and have queries in relation to your personal data, please contact us at privacyofficer@whitbread.com
or write to Whitbread Customer Services, Porz Avenue, Whitbread Court, Dunstable, Beds LU5 5XE.
You have a right to complain to an EU data protection authority. This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office (the “ICO”).
Contact details
For any queries relating to data protection please contact privacyofficer@whitbread.com or by writing to them at Privacy Officer, Whitbread Group PLC, Whitbread Court, Houghton Hall Business Park, Porz Avenue, Dunstable, Bedfordshire, LU5 5XE.
If we make any changes or updates to this notice we will communicate these.
Which Whitbread entity is the controller?
Whitbread Group PLC, Whitbread Court, Houghton Hall Business Park, Porz Avenue, Dunstable, Bedfordshire, LU5 5XE is the data controller.
