1. Who we are

We are Punch Taverns Limited, a company incorporated in England and Wales with registered number 3752645, with registered office at Jubilee House, Second Avenue, Burton-upon-Trent, Staffordshire, DE14 2WF.

We are also registered with the Information Commissioner’s Officer with registration number Z1301910. This registration covers the uses of personal information set out below.

We have a Data Protection Officer, who acts independently on our behalf to monitor and advise us on compliance with all applicable data protection laws in England and Wales. Our Data Protection Officer can be contacted on data.protection@punchpubs.com.

2. How we collect your personal information and why

Punch Taverns Limited (we, us, our, Punch) may need to collect personal information about you, and there are different ways that we might do so; this privacy notice tells you what to expect when we collect personal information on:

2.1 visitors to our website, punchpubs.com;
2.2 anyone who interacts with us or contacts us through social media
2.3 anyone who contacts us;
2.4 anyone who subscribes to receive updates.
2.5 anyone who nominates/refers a potential partner/publican
(a) Will only be contacted by Punch regarding the nomination via email or telephone once the conditions have been met.
(b) We will not use this data for marketing purposes or sell it to 3rd parties.

(i) make this website work as you would expect;
(ii) remember your settings during and between visits;
(iii) improve your and other users’ experiences of the website;
(iv) allowing you to sign up to marketing and updates if you have requested to do so;
(v) remembering if we have already asked you certain questions;
(vi) improve the speed/security of this website.
(vii) deliver targeted advertising 

2.1.2 Third party services

(a) Whenever you visit our website, punchpubs.com, we will use a third party service, Google Analytics, for our legitimate interests, to collect standard information about your website use, such as internet logs and details of your visitor behaviour patterns. The reason we use this service is so that we can find out how many people visit the website and the various parts of the website. This information helps us to find out how our website is working and how to improve it. We do not identify anyone, and we do not make or allow Google Analytics to (or attempt to) identify anyone visiting our website. You can opt-out of being tracked by Google Analytics by visiting http://tools.google.com/dlpage/gaoptout. We’d prefer you didn’t opt out, as this data is helpful to us in improving this Website.

(b) We use another third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as your email address and sign-up date) to Intercom, Inc, and utilise Intercom to collect data for analytics purposes when you visit our website. Intercom analyses your use of our website and tracks our relationship which is in our legitimate interests so that we can improve our service to you. As part of our service agreements, Intercom collects publicly available contact and social information related to you, such as your email address, gender, company, job title, photos, website URLs, social network handles and physical addresses, to enhance your user experience.

(c) We have YouTube video content embedded on our website. YouTube controls any information that is collected by viewing their content. YouTube’s privacy policy can be located at https://www.google.co.uk/intl/en-GB/policies/privacy/.

(d) We work with Reach PLC (https://www.reachplc.com) to deliver programatic advertising which enables us to track and understand where our visitors and prospective customers found our business. This also allows us to gauge the effectiveness of our personalised advertising across different media including third party websites, email campaigns and more. Turning cookies off will mean we can’t show you these personalised adverts. Reach use multiple platforms in order to deliver these services. More information and privacy details can be found here:

https://www.xandr.com/privacy/platform-privacy-policy/

https://www.lotame.com/about-lotame/privacy/lotame-and-gdpr/

2.1.3 Turning cookies off

(a) You can usually switch cookies off by adjusting your browser settings to stop it from accepting cookies. The “Help” function within your browser should tell you how. Alternatively you can visit http://www.attacat.co.uk/resources/cookies/how-to-ban or allaboutcookies.org, which provide general information about cookies and how you can manage cookies on your computer.

(b) Please be aware that switching off cookies is likely to limit the functionality of our website.

(c) It may be that if you have concerns around cookies they in fact relate to so-called “spyware”. Rather than switching off cookies in your browser you may find that anti-spyware software achieves the same objective by automatically deleting cookies considered to be invasive.

2.2 Social media

Our website contains links to our social media pages. Any information you provide to us via social media (including messaging, “liking”, “following” and other communications) is controlled by the social media network. We currently use:

(a) LinkedIn, which has its own privacy notice that can be located at https://www.linkedin.com/legal/privacy-policy
(b) Twitter, which has its own privacy notice that can be located at https://twitter.com/privacy; and
(c) YouTube, which has its own privacy notice that can be located at https://www.google.co.uk/intl/en-GB/policies/privacy/

We recommend that you read their privacy notices and contact them directly if you have any concerns regarding their use of your personal information.

2.3 Contacting us

2.3.1 Website contact

When you contact us through our website, we will receive an email containing any personal information you have provided. We will direct these details to the department within Punch that we believe is best placed to respond to your communication. The personal information you have provided will be used by us in our legitimate interests for the sole purpose of dealing with and responding to your communication. We will call you to respond to your communication on the number you have provided. If we are successful in speaking to you, we will delete the email received through our website and the treatment of your personal information will be the same as it will be treated had you made the call. If we are unsuccessful in reaching you, we will usually make two further attempts to call you, after which we will email you to inform you that we have tried to contact you and how you can call us; we will then also delete the email we received through our website.

Our website provides you with different ways to contact us. All communications are handled, reviewed and responded to internally by us.

2.3.2 Telephone contact

When we speak to you over the phone, the personal information we collect will depend on the nature of your enquiry. We will collect your name, address, email address and telephone number for our legitimate purposes of maintaining communications with you to deal with your enquiry. This personal information will be recorded on our customer enquiry system which is hosted on internal Punch servers.

If you have contacted us for the purpose of pub opportunities and recruitment, then we will also collect the following additional personal information:

• What interests you in taking up a pub opportunity;
• What your search criteria are for a pub (such as location);
• Information regarding how you found us;
• Your investment level;
• Details surrounding your funding source (if applicable); and
• Any experience you have that is relevant to running a pub.

We will also seek your permission to conduct a credit check on you. We conduct credit checks through Experian Limited, whose privacy policy can be accessed at: www.experian.co.uk/legal/privacy-statement.html. The credit check we conduct will be a “soft check” that leaves no footprint of our check on your credit rating. Whilst Experian uses an automated process to produce a credit report for us, we do not make decisions on the credit report by automated means. You have the right to refuse to allow us to carry out the credit check, however if you do so we cannot, unfortunately, proceed with administering you enquiry.

The information we collect from you in relation to a pub opportunity is processed in our legitimate interests of reviewing your enquiry and conducting the ongoing administration and management of your enquiry.

Any personal information we collect from you will we store in our CRM system which is hosted by Appian Incorporation in Dublin and/or Frankfurt. Appian will not use your personal information other than for hosting purposes and as instructed by us.

Please note that all our calls are recorded for training and monitoring purposes. We store call recording on Punch’s internal servers.

Call recordings are retained for between 6-12 months depending on capacity and which time we will record over them with new call recordings.

Please note, however, that:

(a) email monitoring or blocking software may also be used and that you have a responsibility to ensure that any email you send to us is within the bounds of the law;

(b) We use Cisco for our main call system, which provides caller ID services. We will only use this information for the purposes of handling your call and contacting you in relation to the purpose of your call.

2.3.3 Contact in relation to recruitment

Every four weeks, we will delete all personal information where we have not heard from you in over 12 months.

Please note that we may need to contact you through any of post, email or telephone. Please can you make sure that you keep us updated of any changes to your contact details.

2.4 Subscribing to updates

2.4.1 Website

We will provide you with the opportunity to receive updates about us, including promotions and reminders relating to your booking. Where you chose to receive updates we will collect your contact details (name and email address) in order to provide marketing updates. We are relying on your express consent to choose to receive these updates in order to use your personal information for this purpose.

If you ever decide you no longer wish to receive our updates you can opt-out at any time by unsubscribing from the mailing list using the link provided in the email update, or by using the contact details below. If you do unsubscribe, please note that Punch will still keep your email in a separate list on our behalf so that we can make sure we do not send you updates in the future.

We will also keep a record of the date, time and manner in which you opted into receiving marketing updates. This is also in our legitimate interests of demonstrating accountability of our data protection obligations.

2.4.2 Telephone

We will collect your contact details (name and email address) in our legitimate interest, if you have opted to receive marketing updates. We will provide you with a clear choice in your telephone application and each further communication to opt-out of receiving our marketing or updates. Where you have not completed an application or made a purchase, you may still  choose to receive our marketing updates, but you will have to opt into receiving it or contact us to explicitly ask to request it.

We will also keep a record of the date, time and manner in which you opted into receiving marketing updates. We will also confirm your marketing preference by email after any call. It is in our legitimate interests to do this in order to demonstrate our accountability with our data protection legislation obligations applicable to your personal information.

2.5 CCTV and Body Cameras

In some of our Management Partnership sites we may also collect video footage either through CCTV or Body Cameras of customers and staff in/around our premises. Where we do so, this will be clearly signposted in the site.

The video footage collected may be used to help ensure the safety of our customers and staff or in the prevention of crime and disorder. CCTV may, in some sites, be a condition of the Premises Licence.

Video footage will be retained for a minimum of 31 days and will only be accessed by the Management Partner of the site, door security, members of the Punch head office team, and local enforcement officers. Video copies of specific incidents will, subject to proper requests, be made available to local law enforcement officers and/or legal representatives where the footage is part of an official investigation or case.

3 Disclosure of personal information

Except in relation to our use of Intercom’s services, we do not transfer your personal information outside of the EEA.

We will not usually disclose your personal information other than as already explained in Section 2 above. However, there may be circumstances where we need to share personal information other than as anticipated in Section 2 above. These include:

(a) where we are legally required to disclose the information. This includes sharing the personal information with tax authorities and law enforcement agencies in their legitimate interests, for the purposes of the prevention and detection of crime;

(b) where we need to disclose the personal information for the purpose of or in connection with any legal proceedings, or for the purpose of obtaining legal advice, or the disclosure is otherwise necessary for the purposes of establishing, exercising or defending legal rights, where this is in our or a third party’s legitimate interests;

(c) disclosure is required to protect  our interests, or someone else’s interests (for example, to prevent fraud);

(d) disclosure is necessary to protect your vital interests (for example if you are unwell at one of our premises, we may need to seek medical assistance);

(e) it is to a third party for the purposes of providing administrative or processing services on our behalf. If such disclosure is required, we will take steps to ensure that the third party protects the personal information in the same way that we do and notify you of any changes to this privacy notice; and

(f) to any prospective purchaser of our business assets or organisation.

4 Keeping personal information secure

We know that you provide your personal information in good faith and expect it to be look after. This is why we take the security of your personal information seriously. This means that we have taken steps internally in order to ensure that our systems adequately protect your personal information. This includes:

(a) locating all internal Punch servers within the EU, more particularly, UK, Republic of Ireland and Germany; and
(b) ensuring strict access controls on a need to know basis.

5 Your rights

You have rights in respect of your personal information and this Section explains a bit more about those rights that are applicable to what we do with your personal information and when you can exercise them. If you would like more information about any of your rights, please contact us on the details set out below. Please allow us up to 7 calendar days to process your request and remove you from our mailing list.

5.1 Opting out from receiving marketing

5.1.1 Website

Where you have chosen to receive marketing, you can opt-out. If you wish to opt-out, please do so by sending your request in writing to us at data.protection@punchpubs.com or our address as set out below

Please allow us up to 7 calendar days to process your request and remove you from our mailing list.

5.1.2 Telephone (Recruitment Marketing)

Where you have chosen to receive marketing regarding pub opportunities you can opt-out. If you wish to opt-out, please do so by sending your request in writing to us at unsubscribe.recruitment@punchpubs.com or our address as set out below

Please allow us up to 7 calendar days to process your request and remove you from our mailing list.

5.2 Accessing your personal information

We want you to fully understand and be comfortable with how we use your personal information. You can contact us at any time to ask whether we process any personal information about you. If we do hold or use your personal information in any way, you have the right to access that personal information. All we ask is that:

(a) you make your request to access in writing to the contact details below;
(b) you verify your identity; and
(c) you are fair and reasonable with how often you make this kind of request.

Please allow us up to one month from receipt of your request in order to provide a response.

5.3 Requesting more information

We hope that you can understand that it is very difficult to cover all the possible ways in which we collect and use personal information. We have tried to be as clear and as open as we can and will continue to update this privacy notice as our use of personal information develops. However, if you have any questions regarding our use of your personal information, we will be happy to give you peace of mind by answering any questions or providing any additional information that we can. If you do have any specific questions, or need anything explaining, please get in touch on the contact details below.

5.4 Additional rights

You also have some additional rights that you may exercise as set out here. We may publish a policy, from time to time, to explain how we will handle such requests and what you can expect from us when you make a request to exercise your rights. If we do publish any such policy, we will provide a link to it here. In each instance we may ask you to make your request in writing to the contact addresses below and provide verification of your identity.

5.4.1 You have the right to request that we rectify any inaccuracy about you that we may hold, in which case we may ask you to verify the corrected information (for example, we may ask for a recent utility bill for proof of change of address).

5.4.2 You have the right to request that we erase your personal information. Please be aware that we can only comply with such a request if:

(a) your personal information is no longer required for the purposes it was collected for (for example, we need your personal information to respond to a communication);

(b) the collection, storage or use of the personal information by us is prevented by law;

(c) your personal information is not required for the purposes of establishing, exercising or defending a legal claim such as in the conduct of legal proceedings.

5.4.3 You have the right to request that we restrict or refrain from processing your personal information:

(a) for the time it takes us to verify the accuracy of your personal information where you have disputed its accuracy;

(b) where the collection, storage or use of the personal information by us is unlawful but you decide not to ask for erasure;

(c) where, we no longer need your personal information but you need them for the purposes of establishing, exercising or defending a legal claim;

(d) for the time it takes to determine whether we have an overriding legitimate ground to continue to process your personal information, where you have exercised your right to object to processing.

5.4.4 You have the right to data portability in respect of information we have collected from you based on consent or for the reason of entering into a contract. If you exercise this right, we will transfer a copy of the information that you have provided to us at your request.

5.4.5 You have the right to object to our use of your personal information:

(a) where we are using that information based on our legitimate interests, and where we do not have compelling overriding grounds to continue to use your personal information; or

(b) at any time, where we use your personal information to send you the newsletter or any other type of direct marketing, in which case it will no longer be used for that purpose, but may use it for another lawful purpose.

6. Complaints

You are important to us, and so is protecting your personal information. We have high standards when it comes to collecting and using personal information. For this reason, we take any complaints we receive from you about our use of your personal information very seriously and request that you bring any issues to our attention.

Where you are communicating with us for the purpose of making a complaint, we will only use your personal information to handle, investigate and respond to the complaint and to check on the level of service we provide. Where the complaint is about a member of our team, we may have to disclose your identity to whoever the complaint is about. You may let us know that you don’t want information that identifies you to be disclosed and we will try to respect your request; however, it may not be always possible to handle a complaint on an anonymous basis.

If you are unhappy, you can also contact the Information Commissioner’s office to make a complaint directly.

7 Updating this privacy notice

We keep our privacy notice under regular review in order to ensure that it properly reflects our use of personal information. This privacy notice was last updated on 11 June 2021.

You can contact us by:

(a) Post: Jubilee House, Second Avenue, Burton-upon-Trent, DE14 2WF.
(b) Email: data.protection@punchpubs.com

(c) Telephone: 01283501600