Privacy and Cookies Policy
St Nicholas Shopping Centre (“we”, “us” or “our”) are committed to protecting the privacy of customers. This policy explains how we will use any personal information we collect about, how this information is used and how you can access, change or delete. Please read this policy carefully.
The “data controller” for this Policy is St Nicholas Shopping Centre, a limited liability partnership registered in England and Wales with registered number
This User Privacy Notice (“Privacy Notice” or “Notice”) was last updated on 17th May 2018. This Privacy Notice may vary from time to time so please check it regularly.
1 Website – What information is collected and why we collect it.
This website collects and uses personal information for the following reasons:
1.1 Website Tracking
When you visit our website, we will automatically collect data about you. This data is used to understand how many people are using our website, how they find and use our web pages and to see their journey through the website. This is collected via a tracking software installed on our website called Google Analytics which is provided by Google.
The information recorded includes the date, time and duration of your visit, which website you came, which type of device and internet browser and its operating system. It also records your computers Internet Protocol (IP) or MAC address. However, none of the information recorded personally identifies you to us.
1.2. Contact Us Form
If you wish to contact us via our website, you can do so via the Contact Us form, found on our Contact Us Page. This form requests your name, email and telephone number, as well as your message. Your message and data collected into PHP Script, which turns the content into an e-mailable format and sent to the Centre Management team. Our server is protected by a secure SSL Certificate, meaning the email content is encrypted before being sent across the internet.
We do not store any of this data on our website or pass it to any third parties. It is simply used as a communication tool, so you can contact the Centre Management Team.
1.3. Email Newsletter
If you would like to subscribe to the St Nicholas Shopping Centre Newsletter, you can do so by entering your name and email address via the subscribe form found here. After entering your details, you will receive an email from us requesting confirmation of your subscription. You must reply to this email to confirm you would like to receive communication from us. Your details will then be forwarded and stored in MailChimp, who provide us with email marketing services.
Your email address will not be stored on this website or in any of our internal computer system. Your details will be stored in MailChimp database for as long as we continue to use their email marketing services or until you request removal from our mailing list.
To unsubscribe from our mailing list, simply click the unsubscribe links contained in any of our email newsletters or by requesting removal by contacting us here. When requesting removal via email, please ensure you include your first and last name and the email address that is subscribed to the mailing list.
This data will be accessed by a third-party marketing agency, who devise email campaigns on our behalf, via secure login, to send out any email newsletters.
If you are under 16 years of age you MUST obtain parental consent before joining our mailing list.
Whilst we hold your details within MailChimp we will send you email newsletters from time to time informing you of any news and events taking place at The St Nicholas Shopping Centre.
This website is hosted by Five Talents.
All traffic (transferral of files) between this website and your browser is encrypted and delivered over HTTPS.
2.0 Marketing – What information is collected and how we use it.
We collect and record your personal information for the following reasons:
We regularly run competitions, which may be hosted by us or a third party. To enter these competitions, you may provide us with personal data either online or through a physical form.
The data collected from these competitions will only be used to fulfill the terms of the competition. However, if you consent to subscribe to our email newsletter, your name and email address will be forwarded to MailChimp where it will be stored until you specifically request removal from the list. You can unsubscribe from this mailing list via the link on the bottom of the emails sent to you or by requesting removable by contacting us here. When requesting removal via email, please ensure you include your first and last name and the email address that is subscribed to the mailing list.
2.2. Promotional photography
We regularly take photographs of customers at our events, which may be published to our social media pages and website or shared with the local press.
To advise you when photographs are being taken, we will display signs during the event. If you have any concerns or do not wish to be photographed, please contact a member of our staff.
2.3. Social Media Interaction
Depending on the Privacy settings applied to your social media accounts, if you interact with us on social media through commenting or sharing posts, we may have access to any content you upload, such as posts, comments, page, profiles and images. We may also have access to your contact and personal information. Please check your Privacy Settings.
These social media accounts will also collect data through page insights. This data is only used to understand how our pages are performing and what posts our followers engage with, so we can tailor content to our users.
2.4. Gift Card
Should you wish to purchase at St Nicholas Shopping Centre gift card via our website you will be directed to a third party (Flexi-e-card) to process your request. The processing of any personal data is performed by this third party, who will require you to enter personal information for shipment or payment processing. You may also provide your consent to email marketing when purchasing a gift card. The St Nicholas Shopping Centre does not hold any of this personal data so please review Flexi-e-cards privacy statement before processing your order.
- WI-FI – What information is collected and how we use it.
The St Nicholas Shopping Centre offer a FREE WIFI service, which is provided by a third-party service provider. To gain access to this service you will be required to register an account collecting some personal data from you (name, postcode and email address). This personal data is used to validate you are the owner of the user account, should you ever need to contact us and will be securely held on encrypted servers to protect your data.
When registering your account, you will be given the opportunity to subscribe to receive email newsletters from The St Nicholas Shopping Centre. If you consent to receive email newsletters, your details will be forwarded to MailChimp, where it will be stored until you specifically request removal from the list. You can unsubscribe from this mailing list via the link on the bottom of the email newsletters sent to you or by requesting removable by contacting us here.
When you log into use the Free Wi-Fi service with a mobile device or laptop, our third-party service provider will automatically receive information such as your IP address, your devices MAC address, your venue location, your browser type and version, and the date and time you logged in. This information is stored on their secure servers and is used to provide customer insight through the analysis of this data.
Our Wi-Fi service is provided by a third party called Freerunner.
- Why do we collect this data?
The personal information we gather on you through our Website, Marketing and Wi-Fi is for our legitimate business interests, this includes to;
Collect email address so that we can share any news, events and promotions taking place at the St Nicholas Shopping Centre with you via an email newsletter.
Collect data obtained through your interaction on our website or social media pages for research, analysis, testing, monitoring and administrative purposes to optimise and improve your customer experience.
For the WiFi-Service and competitions, to form a legal contract with you to provide these services and promotions.
- Third Parties
We use several third-parties to process personal data on our behalf. We have ensured that they safeguard your data and you can view their Privacy Policies by clicking the links below.
Google and Mailchimp are based in the USA, so your data will leave the EU, however, they are both GDPR and EU-U.S Privacy Shield compliant.
Google – Google Analytics
MailChimp – Email Marketing
Freerunner – Wi-fi Provider
Facebook – Social Media
Twitter – Social Media
Five Talents – Website Hosting
- Links to other websites
This privacy and cookies policy only applies to this website. If you link to another website from here, you should remember to read and understand that website’s privacy and cookies policy as well. We are not responsible for any use of your information that is made by other websites.
- Website Cookies
Cookies are small files that are placed on your computer or device when visiting websites. They are used to remember things and to help provide you with a better experience.
Cookies can store a wide range of information, including personally identifiable information (such as your name, address, email address, or telephone number). However, this information can only be stored if you provide it – websites cannot gain access to information you didn’t provide to them, and they can’t access other files on your computer.
8.Centre Operations – What information is collected and how we use it.
8.1. Security Operations
As part of our security operation, St. Nicholas Shopping Centre will collect personal images relating to visitors and customers to its property from CCTV and Body Mounted Video systems. The St. Nicholas Shopping Centre appoints third party service providers to provide security services, but the information recorded through these technologies is held on systems St. Nicholas controls.
Personal data is also collected from visitors to our property. The visitor management data is held by third party system providers.
In relation to visitor data, where the data relates to St. Nicholas Shopping Centre employees, contractors or visitors, St. Nicholas considers itself to be the Controller. However, personal data relating to our tenant’s staff, contractors and employees, we consider our tenant’s to be the Data Controller.
In relation to third parties, we ensure that they will also safeguard your data.
CCTV and Visitor data is collated to pursue our legitimate interests to protect the property in question, to protect the vital interests of our visitors, tenants and customers and to assist with the prevention and detection of crime.
For CCTV and Body Mounted Video:
Generally, this data will not be held for longer than 31 days unless an incident or suspected incident has occurred.
Visitor Management Systems:
All data to be deleted where the visitor has not returned to the site within six months.
8.3. Accident and incident reporting
When an incident occurs at the property, St. Nicholas Shopping Centre is required to document the particulars of an incident which may include witness statements, CCTV footage, photographs and written reports. This information may include special categories of data depending on the nature of the incident. A third-party system is used to log details relating to these incidents, physical paperwork may also be stored on site.
The data may be shared with third parties such as insurance providers and legal advisors to defend a claim, government organisations who we are required to report on incidents by law or the police to investigate a crime.
This information is collected to ensure that St. Nicholas complies with its legal responsibilities in relation to Health and Safety investigation and reporting, and for defending future legal claims. The information can also be used to prevent and detect crime, or to protect the vital interests of individuals. Where health information is collected we may also need this for our substantial public interest for Insurance processing.
All personal data (CCTV, Witness Statements, Photographs and written reports) relating to the incident to be recorded for six years, unless there are reasons to retain it for longer, such as ongoing HSE investigation, a suspected pattern of fraud, or because an injury has been sustained by a child.
- Other third-party transfers not detailed previously:
We may also pass on or allow access to your information:
To our suppliers, contractors and professional advisors where this is necessary for them to provide services and facilities to us, for example:
- to pay for parking services;
- to any purchaser of all or part of our business or our property to which the relevant service relates;
- to sell, make ready for sale or dispose of our business in whole or in part including to any potential buyer or their advisers;
- where we are required to do so by law, court order or other legal process;
Where, acting in good faith, we believe disclosure is necessary to assist in the investigation or reporting of suspected illegal or other wrongful activity. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;
- to protect and defend our rights or property;
- to deal with any misuse of any of our Services; or
- to enforce or apply our terms and conditions and other agreements with third parties.
We may disclose your personal data to our group companies and affiliates or third-party data processers who may process data on our behalf to enable us to carry out our usual business practices.
- Your rights
You have the right to restrict what personal data is collected about in the following ways:
- You have the right to opt out of receiving any marketing information which we send you. You can unsubscribe from our mailing list by clicking the link at the bottom of any emails we send you or by contacting us
- You have the right to request information regarding the processing of your Personal Data and access to the Personal Data which we hold about you under the General Data Protection Regulation contacting us here
- You have the right to update/correct any Personal Data we hold about you if it is inaccurate or incomplete. You can do this by clicking the ‘Update subscription preferences’ link the at the bottom of our email newsletters or by contacting us here detailing your first and last name and the email address you use to subscribe to our list, along with your updates.
We will not sell, distribute or lease your personal information to third parties unless we have your permission to do so or required by law to do so.
- Changes to the Privacy & Cookies Policy
- How you can contact us