Privacy Policy

1. About this policy

This privacy policy explains how MN (MCR) Ltd, trading as My Nawaab ("we", "us", "our"), collects, uses, stores and protects the personal information you share with us through this website (mynawaab.com), by telephone, by email, or in person at our venue.

We are the data controller for the personal information described in this policy. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who we are

MN (MCR) Ltd (trading as My Nawaab)
Company number: 17367007 (registered in England and Wales)
Registered address: 1008 Stockport Road, Manchester, M19 3WN, United Kingdom
Email: info@mynawaab.com
Telephone: 0161 224 6969

3. Information we collect

We collect the following categories of personal information:

3.1 Information you give us

• Enquiry details submitted through the online enquiry form on this website: your name, phone number, email address, preferred event type, event date, preferred time of day, guest count, suite and collection preference, and any free-text notes or requirements you choose to share.
• Correspondence when you contact us by email, telephone, WhatsApp, social media, or in person — including the content of that correspondence and any information you share while arranging or attending an event.
• Contract and payment information if you go on to book with us: billing name and address, payment card details (handled by our payment processor — see section 6), invoice details, and event-specific requirements such as dietary needs and access requirements.

3.2 Information we collect automatically

• Website analytics data — pages viewed, referring site, device type, approximate location (city / country), and site performance metrics. See section 8 for the analytics tools we use and the cookies involved.

3.3 Special category and sensitive information

We do not intentionally collect special category data. If you share dietary, health, accessibility or religious information with us in order to plan your event, we will treat it in confidence and use it only to deliver the service you have asked for. Our legal basis for handling that limited information is your explicit consent, given by sharing it with us for that purpose.

4. How we use your information (purposes and legal bases)

5. The enquiry form

When you complete the enquiry form on this site, the details you provide are transmitted securely (over HTTPS) to our secure customer management system, where our coordinators will pick up your enquiry and respond to you. We do not sell your details, and we do not use them for any purpose other than handling your enquiry and any booking that follows.

6. Who we share your information with

We share your personal information only with the following categories of trusted third parties, and only to the extent necessary:

• Hosting and infrastructure providers — the providers who host this website and our customer management system, who process data on our behalf under written agreements.
• Analytics providers — Vercel, Microsoft (Clarity) and Google (Google Analytics) as described in section 8.
• Payment processor — Stripe Payments Europe, Ltd., which handles card and bank payments on our behalf under its own privacy policy. We never see or store your full card number.
• Professional advisers — accountants, auditors and legal advisers, where required.
• Regulators and law enforcement — where required by law, court order, or to protect our legal rights.

We never sell or rent your personal information to third parties for their own marketing.

7. International transfers

Most of our processing takes place within the United Kingdom or the European Economic Area (EEA). Some of our service providers (for example, Microsoft Clarity and Google Analytics) may transfer data outside the UK / EEA. Where they do, they rely on transfer mechanisms approved by the UK Information Commissioner's Office (such as the UK Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge) to ensure your information continues to be protected to UK standards.

8. Cookies and analytics

We use a small number of privacy-friendly analytics services to understand how the site is used, so we can improve it. We do not use advertising or profiling cookies. A summary is below.

• Vercel Web Analytics and Speed Insights — measures page visits and site speed. It is cookieless, does not identify individual visitors, and hashes visitor identifiers on a rolling daily basis.
• Microsoft Clarity — provides anonymised heatmaps and session recordings so we can see how pages are used. Form inputs and text are automatically masked in recordings so we never see the contents you type. Clarity sets a small number of first-party cookies (_clck, _clsk) to group visits into sessions. You can opt out at clarity.microsoft.com/opt-out.
• Google Analytics 4 — measures visits, referral sources and enquiry conversions so we can understand which pages and channels help people find us. Google Analytics sets first-party cookies (_ga and _ga_*) with a lifetime of up to two years, which it uses to distinguish visitors and group activity into sessions. IP addresses are truncated by Google before processing, and we do not link analytics data to any advertising identifiers. You can opt out for all sites by installing the Google Analytics opt-out browser add-on, or block the cookies through your browser settings.

You can also block or delete cookies at any time through your browser settings. Doing so will not affect your ability to use the site.

9. How long we keep your information

• Unconverted enquiries — we keep enquiry details for up to 24 months from your last contact with us, so we can follow up sensibly and refer back if you re-enquire.
• Bookings and contracts — we keep booking records for six years after the event, in line with UK statutory limitation periods and HMRC requirements.
• Accounting records — kept for at least six years as required by HMRC.
• Marketing preferences and unsubscribes — kept indefinitely so we can honour your choice.
• Analytics data — retained by the analytics provider according to their standard retention periods (typically up to 14 months for Google Analytics, 12 months for Microsoft Clarity).

10. Your rights

Under UK GDPR you have the right to:

• Be informed about how we use your personal information (this policy).
• Request a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information where we no longer need it.
• Ask us to restrict or stop processing your information in certain circumstances.
• Object to processing based on our legitimate interests, including for direct marketing.
• Withdraw consent at any time, where we rely on consent.
• Ask us to transfer your information to another provider (data portability).

To exercise any of these rights, email info@mynawaab.com. We will respond within one month. We may need to verify your identity before acting on your request. There is no charge for exercising your rights in most cases.

11. Marketing communications

We will only send you marketing emails if you have opted in, or if you are an existing customer and the marketing relates to services similar to those you have booked with us. Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing info@mynawaab.com.

12. Security

We take appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. This site is served over HTTPS; access to our customer management system is restricted to authorised staff and protected by strong authentication; and we regularly review our security practices.

13. Children

Our services are aimed at adults planning events. We do not knowingly collect personal information from children under 13 through this website. Guest lists for family events may include children, but those are handled as part of the event booking rather than for any online profiling.

14. CCTV and event photography

CCTV operates at our venue for the safety of guests and staff and for crime prevention. Signage is displayed on site. Where photography or videography takes place at an event, this is arranged with the event host, and any use of images in our marketing materials (including this site or our journal) will be with the host's permission.

15. Changes to this policy

We may update this policy from time to time to reflect changes in the law or in how we operate. The "Last updated" date at the top of the page indicates when it was last reviewed. Material changes will be communicated on this page, and where appropriate, by email.

16. Complaints

If you are unhappy with how we have handled your personal information, please contact us first at info@mynawaab.com and we will do our best to put things right. You also have the right to complain to the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk