The Cloisters Shopping Centre Ely is committed to protecting and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how we protect it, and your rights concerning that data when you visit our website, contact us, subscribe to newsletters, or use our facilities.
The data controller responsible is:
The Ely Cloisters Estate Limited
We may collect and process the following personal data:
Identity data (e.g. name)
Contact data (e.g. email address, phone number, postal address)
Transaction data (e.g. if you enter a competition, make a booking, or purchase something via our website)
Usage data (e.g. how you use our website, pages visited, time spent, browsing behaviour)
Device & technical data (e.g. IP address, browser type/version, time zone, operating system)
Marketing & communications data (if you opt in to receive newsletters or other communications)
Special categories, only if relevant and with explicit consent (e.g. accessibility needs)
We use your data to:
Provide, operate, maintain and improve our website and services
Respond to your enquiries, requests, feedback or complaints
Conduct promotions, competitions or events, where applicable
Send you marketing and promotional materials, if you have consented to this
Analyse usage patterns to help us understand how visitors use our site and to help us improve the visitor experience
Fulfil any legal or regulatory obligations
We rely on one or more of the following lawful bases under UK GDPR when processing your data:
Consent: when you have given clear consent for us to process your personal data for a specific purpose
Contract: to fulfil a contract with you, or because you have asked us to take specific steps before entering into a contract
Legal obligation: where we are required to comply with legal or regulatory obligations
Legitimate interests: where we have a genuine business need (such as improving our services, marketing) that does not override your rights
We may share your personal data:
With third-party service providers who help us operate the website or carry out services (e.g. hosting, email delivery, analytics)
With contractors, agencies, or partners assisting with events or promotions
When required by law or to protect rights, safety, or property
If we are reorganising or selling parts of the business, your data may be transferred as part of that process
We will retain personal data only for as long as is necessary for the purposes set out in this policy, and to fulfil our legal obligations. When we no longer need your personal data, we will either securely dispose of it or anonymise it.
Under UK data protection laws, you have the following rights:
Right of access: ask us for copies of your data
Right to rectification: ask us to correct inaccurate or incomplete data
Right to erasure (“right to be forgotten”): ask us to delete your data in some situations
Right to restriction of processing: ask us to limit how we use your data
Right to object: object to our use of your data (e.g. for marketing)
Right to data portability: obtain and reuse your data for your own purposes across different services
Right to withdraw consent: if the processing is based on consent, you may withdraw at any time
If you wish to exercise any of these rights, please contact us at [Contact Email / Address].
If you believe we are not complying with data protection laws, you also have the right to complain to the Information Commissioner’s Office (ICO).
We take appropriate technical and organisational measures to protect your personal data, including but not limited to encryption, secure servers, access controls, staff training. However, no system is completely secure, so while we aim to protect your data, we cannot guarantee absolute security.
Our website may include links to other websites or services that are not owned or controlled by us. We are not responsible for their privacy practices. When you use such links, we encourage you to read their privacy policies.
We may update this policy from time to time. We will publish any changes on our website, with the date of revision. Your continued use of the website or services after changes are made means you accept them.