Privacy Policy

INTRODUCTION

Welcome to Nights Lifestyle Marketing Limited

We recognise the importance of your personal information security therefore this privacy notice explains what we do to look after your personal data. It tells you:

  • Where and how we collect your personal information
  • What we do with your information and how we keep it secure
  • What your privacy rights are and how the law protects you
  • How we look after your personal data
  • How to contact us with any queries that you have
  1. IMPORTANT INFORMATION AND WHO WE ARE

a. What does this privacy notice cover?

This privacy notice applies to you if you are a Nightscard member or non-member, if you are contracted with or is an intermediary between Nights Lifestyle Marketing Limited and its customers or contracted as a delivery and payment services partner/user for the provision or reception of our services whether done online, by phone, in person, through written forms, through mobile applications or through interacting with us on social media. This privacy notice gives effect to our commitment to protect your personal information and is available on all our membership products websites and apps. You can find out more about Nightscard by clicking the below link:

https://nightscard.com/

It is important that you read this privacy notice together with any other privacy information we may provide, on specific occasions, when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

b. Who we are

Nights Lifestyle Marketing Limited is the owner of Nightscard. Nights Lifestyle Marketing Limited is committed to protecting and respecting your privacy whilst remaining compliant with the General Data Protection Regulation (EU GDPR) 2016 and the United Kingdom Data Protection Act (DPA) 2018. To drive compliance to the regulation and make it a company culture, we have a Personal Information Management System which is compliant with BS10012:2017.

When personal data is collected directly from you, Nights Lifestyle Marketing Limited is the Data Controller. However personal data is received from you, with your consent indirectly (via your employer, Nights Lifestyle Marketing Limited, business partners, third-parties websites or applications where you are customer of or subscribe to products and/or services), Nights Lifestyle Marketing Limited will either be a joint controller or data processor. We will therefore ensure our status, obligations and responsibilities towards your data is clearly defined in the contract we have with these companies.

For any enquiries on how your data is handled at Nights Lifestyle Marketing Limited we can be contacted using the below details:

By email: [email protected]

By post: Nights Lifestyle Marketing Limited, Unit 60, 101 Clapham High Street, Clapham, London, SW4 7TB

c. How to contact us and make a complaint

If you would like to exercise one of your rights as set out by the EU General Data Protection Regulation 2016, have a question or query or you wish to complaint about this privacy notice or the way your personal information is processed by Nights Lifestyle Marketing Limited, please contact us using the below address:

Nights Lifestyle Marketing Limited,

Unit 60,

101 Clapham High Street,

Clapham,

London,

SW4 7TB
[email protected]

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the United Kingdom (UK) supervisory authority for data protection issues. The ICO contact details are as follow:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO. So please contact us in the first instance.

d. Changes to this privacy notice and your duty to inform us of changes

This version was last updated in July 2021 and any historic versions can be obtained by contacting us as detailed in the ‘Contact section’ above.

We may change some of our company’s structures for administrative reasons however this will not impact what we do with your data or the services you receive from Nights Lifestyle Marketing Limited. If on the other hand there is a change in how your data is collected and processed as well as a change in the purpose and legal basis for processing, we will update this privacy notice to make you aware.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

e. Third Party Links

Our website, apps and other documents you may receive from us may include links to third-party websites, plug-ins and information. Following these links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. More information about how these third-parties collect, use and process your data will then be in their respective privacy notice and/or Terms and Conditions.

f. Data Deletion

It is your right to completely delete any data we have collected on you. Please send an email to [email protected] to request deletion of your data. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. 

  1. PURPOSE AND LEGAL BASIS FOR PROCESSING

For Nights Lifestyle Marketing Limited to fulfil its contractual and customer obligations around the purchase by customers of one of our membership products, there is a requirement for us to collect specific personally identifiable information relating to our customers.

Therefore, the processing of your personal data by Nights Lifestyle Marketing Limited relies on three legal bases: contractual, consent and legitimate interest.

 

a. Contractual

When registering to one of the products or services Nights Lifestyle Marketing Limited provides, customers are given the opportunity to read this privacy notice and/or agree to our terms and conditions. This, thus, allows us to process personal information in relation to the membership purchase directly or indirectly from us (i.e. as part of our Business to Business or Employee Benefit Schemes). Your data is then used to send communications that you are required to be made aware of and this is done via email and/or SMS (i.e. updates to terms, privacy notice, membership or membership related services/products).

b. Consent

In order for us to market new products and services to you as a member, your consent is required, which is given when you accept our terms and conditions when subscribing to a membership. You will always have the opportunity to unsubscribe to any communication and marketing from us by contacting us as detailed in section 1c. If you choose not to receive marketing communication from us, you will only receive communications that you are entitled to be made aware of. Your marketing preferences will then be electronically kept and maintained by the company throughout the membership life cycle.

By accepting our terms and conditions you are confirming your awareness that you may receive notifications (Push notification) from us. If you would prefer not to receive these notifications, you will always have the option to change your notifications preferences through your mobile device notification settings.

Under your consent we may also use your data, or permit selected third parties, to use your data to provide you with information about goods and services which may be of interest to you.

We do not sell, rent or lease your personal data or our customers lists to third party companies for them to market to you. We may, from time to time, following your consent obtained directly or indirectly (via our business partners) from you, as part of our affiliate marketing activities, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (e-mail, name, address, telephone number and any other details you will provide to us to facilitate your continued membership with us) is not shared with the third party.

Nights Lifestyle Marketing Limited does not keep your payment information however our payment platform providers will keep them in order to facilitate the provision of payment service to us and our payment platform users, to enhance the payment experience and to fulfil their legal / compliance obligations which require them to disclose information about us, you and our payment platform users to financial services providers, payment method providers and their service providers in order to prevent (and not limited to) fraud and anti-Money Laundering. At payment stage, you will then be required to provide us with your first name, surname, address details and card information. Nights Lifestyle Marketing Limited uses, with its payment platform providers, a token base exchange system which links your payment profile, held with our payment providers, with our records and allows the renewal of your membership.

c. Legitimate Interest

In order to provide the service to you, Nights Lifestyle Marketing Limited, relies on this lawful basis when you have signed up directly or indirectly on our website, via a refer a friend scheme or one of our landing pages. Your data is therefore processed to verify you have been referred to us by an existing member and for the same purpose of ensuring you receive communications that you are required to be made aware of.

We may also use your information for other specific legitimate interest such as:

  • To ensure that content from our websites are presented in the most effective manner for you and for your device.
  • To provide you with information, products or services that you have requested from us or which we feel may be of interest to you and where you have either consented to or we believe you have a legitimate interest in.
  • To carry out our obligations arising from any contracts entered between you and us.
  • To allow you to participate in interactive features of our service when you choose to do so.
  • To notify you about changes to our service.

In addition, we may share data with trusted partners to help us perform statistical analysis, send you communications, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to us, and they are required to maintain the confidentiality of your information.

We will mainly contact you by electronic means (e-mail, SMS, Push) or by post with information about goods and services similar to those which were the subject of a previous sale to you, where you have consented to this or we believe there is a legitimate interest. However, you will always be given the opportunity to unsubscribe with details on how to do it as mentioned in section c ‘How to contact us and make a complaint’.

  1. INFORMATION WE MAY COLLECT FROM YOU AND HOW DATA IS COLLECTED

We may collect and process the following data about you:

Information that you provide by filling in forms on one of our site (nightscard.com) or on one of our Mobile Applications (iOS and Android) such as;

  • Username and password –we collect a username and password to ensure your membership is only access by you.
  • Name, address and postcode –These data are required for identity verification when accessing your membership and to ensure your order is sent, collected and delivered to the correct place and person. This is also required to quickly find your address and identify whether our partners restaurants and services are available in your area. Finally, if location services is enabled on your smart device, we may also use it to display and/or recommend venues/restaurants/applicable services available in your area.
  • Email address –this is used to send your orders confirmation, membership sign up confirmation and to send you, if applicable, informational messages plus offers which might be of interest to you.
  • Telephone numbers –are used to contact you should there be any issues identified with your order or your membership.
  • Date of Birth –this is used to verify your identity when you contact us and may be requested to verify your age as part of any enquiry and/or order you make with us.

If you contact us, we may keep a record of that correspondence and/or call(s) for a duration of five years from the last interaction with us. Your call(s) may be recorded for quality and training purposes. Should you require to know what information we hold about you, our contact details are listed in section c ‘How to contact us and make a complaint’.

  • Although you do not have to respond to them, we may also ask you to complete surveys that we use for research and analysis purposes.
  • Details of your visits to our site and the resources that you accessed.
  • App usage data – including location services.
  • Details of where and how you have used the product, including any potential savings you have made.
  1. RECIPIENTS OF THE PERSONAL DATA AND DATA STORAGE

In order to fulfil our contractual obligations, Nights Lifestyle Marketing Limited is required to transfer personal information provided by its customers to appointed third parties.

All information you provide to us is stored on secured servers. Any payment transactions are encrypted using SSL technology (Protocol for web browsers and servers that allows for the authentication, encryption and decryption of data sent over the internet). Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website(s) or app(s), you are responsible for keeping this password confidential. We ask you not to share the password with anyone. We make reasonable efforts to ensure there is a level of security appropriate to the risk associated with the processing of your data. We maintain organisational, technical, and administrative measures designed to protect personal data within our organisation against unauthorised access, destruction, loss, alteration, or misuse. Within the organisation your personal data is only accessible to who need access to the information to perform their duties and documented encryption/classification tools are used by staff when sharing your personal information. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reasons to believe that the service we provide to you is no longer secure (for example if you feel that the security of your membership has been compromised), please contact us immediately. In addition, we cannot guarantee the security of your data transmitted to our site. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.

As defined in section 1159 of the UK Company Act 2006 we may disclose your personal information to any company associated with and/or a subsidiary of Nights Lifestyle Marketing Limited.

We will not disclose your information to any third party for marketing purposes.

We can provide you with contact details of our third parties, external business partner and trusted partners upon request. You can do this by contacting us using the details provided in section c ‘How to contact us and make a complaint’ above.

  1. INTERNATIONAL DATA TRANSFER & SAFEGUARDS

To facilitate our service to you, Nights Lifestyle Marketing Limited have to transfer personally identifiable information to contracted processors which are not all located in the EEA (European Economic Area). When your data is transferred outside the EEA, as our data processors are contractually oblige to, Nights Lifestyle Marketing Limited will ensure controls and adequate set of policies and procedures have been put in place by the processors and their sub-processors in order for them to be compliant to the European Union General Data Protection Regulation 2016 and/or (when applicable) the European Union (EU) Standard Contractual Clauses. All the above measures are to ensure that the level of data protection is not undermined and that security controls implemented by our processors and their sub-processors (where applicable) match (or when applicable) surpass the level of data being transferred.

Should you wish to have details of such safeguards and others safeguards put in place by Nights Lifestyle Marketing Limited to protect your data, please contact us using the details provided in the ‘How to contact us and make a complaint’ section c of this policy.

  1. RETENTION PERIOD

Nights Lifestyle Marketing Limited retains all customer information for 5 years after they last interacted with us. At the end of these 5 years, from the end of membership, should there be no interaction identified between the organisation and the customer, customer data will be anonymised and, when no more necessary/where required by the data protection law completely, completely erased.

  1. RIGHTS OF DATA SUBJECTS

a. Opt out from receiving electronic communication from us

As a Data Subject (individual) which Nights Lifestyle Marketing Limited processes information on behalf of, you have the right to withdraw consent from our marketing at any time. You can exercise this right by contacting us using the details in the ‘How to contact and make a complaint’ section. However, as customer, we will still notify you of changes to the privacy policy, terms and conditions and any other legal requirement in relation to the membership or the services/products you previously held or used from us.

b. Your data protection rights

Subject to the EU General Data Protection Regulation 2016 and the UK Data Protection Act 2018, you have the following rights with regards to the personal data we hold about you:

  • Right to be informed:this right made it compulsory for Nights Lifestyle Marketing Limited to provide you with this privacy notice.
  • Right to access:if you wish to know what information we hold about you; you have the right to make a Subject Access Request to Nights Lifestyle Marketing Limited Data Protection Officer. We welcome these requests and aim to provide answer to all requests within one calendar month from verifying your request.
  • Right to erasure:you have the right to request your data to be erased. This can be done by contacting us using the details in the ‘How to Contact us and Make a complaint’ Should there be instances where we cannot completely erase your data (i.e. when your personal data is required for the exercise of legal claims or complaints or to provide the service to you as part of our contractual obligation), we will discuss it with you upon receipt of the request and confirm, to you, when your data will be deleted.
  • Right to rectification:if you notice that any of your details are incorrect, please contact the customer service team who will be more than happy to rectify this. We will also send reminders to request that you notify us of any changes to your personal data.
  • Right to data portability:this is where you would like us to transfer your data to another organisation. To request this, please contact us using the details in the ‘How to contact us and make a complaint’
  • Right to restriction of processing:you have the right to ask us to restrict the processing of your personal information. However, it is not an absolute right and applies in certain circumstances such as where you contest the accuracy of your personal data and we are verifying the accuracy of the data, the data has been unlawfully processed (i.e. in breach of the lawfulness requirement of the first principle of the GDPR), you oppose erasure and requests restriction instead, we no longer need the personal data but you need us to keep it in order to establish, exercise or defend a legal claim or you have objected to us processing your data under Article 21(1) of the GDPR 2016, and we are considering whether our legitimate grounds override yours.
  • Right to object to processing:you have an absolute right to stop your data being used for direct or indirect marketing.
  • Right related to automated decision-making including profiling:the General Data Protection Regulation 2016 has provisions on automated individual decision-making and profiling.

You are not required to pay any charge for exercising these rights and your request will be answered to by Nights Lifestyle Marketing Limited within one calendar month.

  1. AUTOMATED DECISION MAKING, INCLUDING PROFILING & INFORMATION ABOUT HOW DECISIONS ARE MADE

We use location services throughout our applications and websites for us to tailor our marketing material to your specific behaviour and activities i.e. the types of venues you regularly visit/use. We use email monitoring services to monitor the emails we send to users. We also collect usage data using our cards, systems, apps and in doing so, we obtain information such as but not limited to:

  • Time of receipt
  • Time of opening
  • Device user to open
  • Location it was opened in
  • Purchases/orders made
  • Savings made
  • Product experiences
  • Which parts of the email you interacted with

In addition, we use systems that enable us to link your social media accounts to your membership if registered with the same email address. This enables us to tailor our promotions and products as best as possible.

Our systems are set up to enable us to collect information on your usage/order history and spending history inclusive of savings made. We link this data to your profile so that we can determine what other deals or informational emails may be of interest to you.

The usage of our products also involves a level of automated decision making. This is in relation to how the products are used by yourself.

You have the ability to stop this profiling activity and the automated decision making by contacting us using the details in the ‘How to contact us and make a complaint’ section. Please be aware that by objecting to some of this data collection the provision of our service to you might be affect and may not be complete.

  1. IP ADDRESSES

We may collect information about your device, including where available your IP address and geographic location, if you allow it when prompted by your device. This is used for statistical purpose about our users’ browsing actions and patterns.

  1. COOKIES

To enable our systems to recognise your device, improve our websites users experience and to provide features to you, we use cookies.

Should there be significant changes to the cookies located on our websites, we will communicate these changes to you and give you the opportunity to review them.

  1. CHANGES TO OUR PRIVACY POLICY

We may change this Privacy Policy from time to time.

If we make significant changes in the way we treat your personal information, or to this privacy policy, we will make it clear on our websites and apps or on an email so you are able to review the changes.

If you wish to alter your privacy settings or opt-out of marketing, you can do this by contacting us using the details in the ‘How to contact us and make a complaint’ section.