
GET IN TOUCH
BETTER FOOD BETTER VIBES
Phone
+44 (0) 7508 916478
Address
11 Walker Street, Denton, Manchester, M34 3LH
MCR Hotbox Privacy Policy
Last Updated: 13/08/2025
1. Introduction
MCR Hotbox ("we," "us," "our") is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store, and disclose personal data.
2. Who We Are
Organisation Name: MCR Hotbox
Location: Denton, Manchester, United Kingdom
We act as the data controller, meaning we decide how and why to process your personal data. If applicable, contact the Data Protection Officer (DPO) at: [Insert Contact Details].
3. Personal Data We Collect
We collect data directly or indirectly from individuals, including:
-
Names, email addresses, phone numbers (e.g., via contact forms, bookings).
-
Payment details (if processing payments).
-
CCTV images or recordings, if monitored on-site.
-
Any additional data you choose to provide (e.g., feedback).
4. How We Collect Your Data
-
Through enquiry forms (online or in-person).
-
Reservation systems and payment processors.
-
CCTV surveillance (if applicable for security).
5. Why We Collected Your Data (Purposes)
We process your data for purposes such as:
-
Responding to enquiries and fulfilling bookings.
-
Processing payments and managing orders.
-
Ensuring premises security and safety (via CCTV).
-
Sending service updates or promotional communications if you opt in.
6. Lawful Basis for Processing
Under UK GDPR, our lawful bases include:
-
Contractual necessity (e.g., payment processing, bookings).
-
Legitimate interests (e.g., security via CCTV).
-
Consent, when applicable (e.g., marketing emails).
7. Data Minimisation & Retention
We only collect what’s strictly necessary for the stated purpose—following the principle of data minimisation Wikipedia. We retain data for as long as needed—for instance:
-
Booking and payment records: up to [e.g., 2 years].
-
CCTV footage: securely deleted after [e.g., 30 days], unless required for legal purposes.
-
Communications/feedback: until it’s no longer needed.
8. Data Sharing
We do not sell or rent your data. We may share personal data:
-
With payment processors or booking partners (only as necessary).
-
With law enforcement or public authorities if legally required.
If data is shared outside the UK, we ensure adequate protections are in place.
9. Your Rights
You have rights under UK GDPR, including:
-
Right of access: See what personal data we hold.
-
Rectification: Correct inaccurate or incomplete data.
-
Erasure: Request deletion of your data where applicable.
-
Restriction of processing and object to processing (e.g., for marketing).
-
Data portability, in specified circumstances.
To exercise these rights, contact us at: [Insert Contact Details]. You may also lodge a complaint with the Information Commissioner’s Office (ICO) Harper JamesInformation Commissioner's Office.
10. Security Measures
We protect your personal data using appropriate technical and organizational measures—like secure storage, encrypted databases, access controls, and staff training Wikipediahttps://secureprivacy.ai/.
11. Children’s Data
Our services are not directed at children under 13. We do not knowingly collect their data.
12. Policy Updates
We will update this policy whenever our data handling practices change or in response to legal requirements. The “Last Updated” date will always reflect the most recent revision.
13. Contact Us
For any questions or data protection enquiries:
-
Email: themcrhotbox@gmail.com
-
Phone: +44 (0) 7508 916478
-
Address: 11 Walker St, Denton, Manchester, United Kingdom
Why This Works for You
-
Compliant & Transparent: Covers all core UK GDPR requirements like purpose, lawful basis, retention, rights, and security Harper JamesInformation Commissioner's Officehttps://secureprivacy.ai/.
-
Simple & User-Friendly: Uses plain language and clear headings—recommended by ICO guidance GOV.UKInformation Commissioner's Office.
-
Customisable: Insert your actual contact details, retention periods, and data processes where placeholders are provided.
