Last updated 29 June 2018
We are Mailbox (Birmingham) Limited of PO Box 656, East Wing Trafalgar Court, Les Banques, St Peter Port, Guernsey, GY1 3PP. We are registered in Guernsey under registration number 53266 and we are subject to the laws of Guernsey (from now on, “we”, “our” and “us”). We own the Mailbox Shopping Centre, Birmingham (the “Mailbox”).
Information we collect about you
We collect different kinds of personal information about you, including:
- Identity information, such as your name, age and gender;
- Contact information, such as your address, email address and telephone number; and
- Marketing and communications information, such as your preferences in receiving marketing from us and your communication preferences; and information which you give us when dealing with us or interacting with us in any way; and
- Technical information, such as your internet protocol (IP) address, browser type and version, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Website. We may report this aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
HOW DO WE COLLECT AND USE YOUR INFORMATION?
Direct interactions: You may provide your personal information: (a) by filing in forms or corresponding with us by post, phone or email or otherwise; or (b) when you use our services and other facilities at the Mailbox. This includes information you provide when you:
- access or use the Website;
- interact with us at the Mailbox;
- communicate with us directly, such as by email, telephone, in writing or through our “help” or customer services pages or at the Mailbox;
- request marketing or email newsletters to be sent to you;
- report a problem with our Website or at the Mailbox; or
- give us feedback.
Competitions and promotions: You may be asked to provide your personal information when you participate in a prize draw, competition, survey or promotion sponsored by us. This information will be used to administer competitions and manage events, including securing your registration at an event, and selecting and contacting prize winners. If you provide the personal information of another customer for one of our events, we will assume you have the consent of any named individuals to provide their personal information for these purposes.
Management of the Mailbox: In the course of operating the Mailbox, we collect your personal information in relation to any incidents and/or accidents that occur, as well as using CCTV and other security measures to ensure your safety and for the prevention and detection of crime. Please be aware that if we are requested to provide CCTV images of you or any other personal information relating to you by the police or any other regulatory or government authority investigating suspected illegal activities, we are obliged do so.
Mailbox Wi-Fi Network: If you use the Wi-Fi network at the Mailbox, we will collect information from you in order to allow you to access the network, which may include your name and email address. We may also collect information relating to the duration of visits and identity of the device that has connected to the Wi-Fi network.
Mailbox Wi-Fi Analytics: Our Wi-Fi technology collects a MAC address (a unique device identifier) and the type of device being used by Mailbox visitors that log in and connect to our Wi-Fi. This provides us with useful information on how visitors use the public areas of the Mailbox only. For visitors who have Wi-Fi enabled but are not connected to Mailbox Wi-Fi, generalised location data is still accessible but is only analysed on an aggregated basis. The MAC address would generally be unobtainable in this instance.
Mailbox Usage Analytics: We also use personal information collected to perform essential business operations, for example: to understand usage patterns (such as foot traffic) at the Mailbox; to develop, provide, improve and personalise Mailbox products and services; and, to provide customer service/support. We may undertake additional research, analysis, and surveys, both online and at the Mailbox.
Third party sources: We and our service providers supplement the personal data we collect with information obtained from other sources (for example, publicly available information from online social media services and other information resources, third party commercial information sources, and information from our business partners).
HOW WE USE YOUR INFORMATION AND THE LEGAL BASES ON WHICH WE PROCESS YOUR INFORMATION
We will only use your personal information when the law allows us to. The purposes for which we use your personal data may differ based on our relationship with you, including the type of communications between us and the services we provide.
Most commonly, we use your personal information in the following circumstances:
- where we need to perform the contract we are about to enter into or have entered into with you;
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
- where we need to comply with a legal obligation; or
- where we have your consent to do so.
We have set out below in a table format a description of the ways we intend to use your personal information and the legal basis we rely on to do so. Please contact us if you need details about the specific legal ground we are relying on to process your personal information where more than one ground has been set out in the table below.
|Purpose / Activity||Lawful basis for processing|
|To enable us to: provide you with access to the relevant part of our Website; provide the services you have requested; or to contact you where necessary concerning our services||Performance of a contract with you. Necessary for our legitimate interests (to provide you with information in relation to the services you have requested from us)|
|To manage your queries, feedback and complaints, and handle requests for data access or correction, or the exercise of other rights relating to personal information||Performance of a contract with you. Necessary for our legitimate interests (to improve and develop our business operations and service offering, or those of a third party). Necessary to comply with our legal obligations|
|To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)||Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise). Necessary to comply with a legal obligation|
|To monitor the Mailbox for security purposes||Necessary for our legitimate interests (to ensure customer safety and for the prevention and detection of crime). Necessary to comply with a legal obligation|
|To enable you to participate in a prize draw, competition, survey or promotion sponsored by us or attend our events.||Performance of a contract with you. Necessary for our legitimate interests (to allow customers to use our services and to be invited to and participate in our events)|
|To enable you to connect to our Wi-Fi network||Performance of a contract with you. Necessary for our legitimate interests (to allow customers to use our Wi-Fi network)|
|To use data analytics to improve our website, products/services, marketing, customer relationships and experiences||Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)|
|To make suggestions and recommendations to you about goods or services that may be of interest to you||Necessary for our legitimate interests (to improve and develop our business operations and service offering, or those of a third party)|
Marketing: Where you have given your consent, we may use your information to contact you by mail, telephone or email, about our other products and services that may be of interest to you, including the latest news, events and offers at the Mailbox. We may share your personal information with a variety of third party email marketing providers to facilitate delivering our email marketing campaigns to you.
You can opt out of receiving marketing communications from us by clicking the “unsubscribe” link in our emails or by contacting us at the email address or postal address set out above.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We only keep your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
HOW WE MIGHT SHARE YOUR PERSONAL INFORMATION
We share personal information we collect about you: with other members of the Mailbox group; and with our service providers based in UK and Guernsey, such as marketing agencies, advertising partners, investment advisors; IT and system administrators; property management partners; lawyers and auditor, who help us run our business; or
We may also share personal information with any third party as a result of any merger, restructure, sale or acquisition of any company within the Mailbox group or to anyone to whom we may transfer our rights and/or obligations provided that any recipient uses information for the same purposes as it was originally supplied to us and/or as used by us.
We require all third parties to respect the security of your personal information and to treat it in accordance with data protection legislation. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
WHERE DO WE STORE YOUR PERSONAL INFORMATION?
We store your personal information in the United Kingdom, but in some circumstances, we may transfer personal information that we collect from you to third party data processors, vendors or hosting partners acting on our behalf located in countries outside of the EEA or to other entities in our group of companies in connection with the purposes set out above.
Data protection legislation provides you with certain rights when it comes to the processing of your information, which are set out below:
|Rights||What does this mean?|
|The right to be informed
|The right to rectification||You are entitled to have your information corrected if it is inaccurate or incomplete.|
|The right to erasure||This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.|
|The right to restrict processing||You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.|
|The right to data portability||You have rights to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.|
|The right to object||You have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).|
We are committed to protecting your privacy. However, if you are not happy with how we collect or process your information or want further information on your rights, you can contact us at the email address and postal address set out above.
If you are not satisfied with our response to your complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO).
LINKS TO OTHER WEBSITES
Our website uses different types of cookies. A cookie is a small file of letters and numbers that we put on your computer if you agree. These cookies allow us to distinguish you from other users of the website which helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
The cookies we use are ‘analytical’ cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they are using it. This helps us to improve the way our website works, for example by making sure users are finding what they need easily. Read more about the individual analytical cookies we use and how to recognise them here: www.mailboxlife.com/cookies.