How we are using the personal data

Dorchester Collection

How we are using the personal data	What types of personal data do we use to do that	Why it is that we can do that
To provide you with the item you have booked or ordered	Identity, Contact, Financial, Transaction, Marketing and Communications	Performance of a contract with you. Necessary for our legitimate interests (including to administer our business and keep records).
To process and take orders from the gifts & experiences webshop	Identity, Contact, Financial, Transaction, Marketing and Communications	Performance of a contract with you. Necessary for our legitimate interests (including to administer our business and keep records)
To register you as a new guest or website visitor	Identity and Contact	Performance of a contract with you
To process and book the accommodation, hospitality, spa treatment or service you have booked or ordered	Identity, Contact, Financial, Transaction, Marketing and Communications	Performance of a contract with you. Necessary for our legitimate interests (including to administer our business and keep records)
To provide you with the accommodation, hospitality, spa treatment or service you have booked or ordered	Identity, Contact, Financial, Transaction, Marketing and Communications	Performance of a contract with you. Necessary for our legitimate interests (including to administer our business and keep records). Where you provide health data to us as part of a spa booking, we will use this to perform our contract with you, but also because we have asked you for your explicit consent.
To manage payments, fees and charges, including to tokenise credit card information, and to collect and recover money owed to us	Identity, Contact, Financial and Transaction	Necessary for our legitimate interests (including to undertake invoicing, accept payments for our services and recover debts due to us). Consent when you request we store your payment details for future stays.
To manage our relationship with you, including notifying you about changes to this privacy policy or any other terms	Identity and Contact	Performance of a contract with you, Necessary to comply with a legal obligation and Necessary for our legitimate interests (to keep our records updated)
To ask you to leave a review or take a survey	Identity, Contact, Profile, Marketing and Communications	Necessary for our legitimate interests (to study how our guests and website visitors use our accommodation, hospitality, spa treatment and services)
To deliver direct marketing to you	Identity, Contact, Profile, Usage, Marketing and Communications, Technical and Tracking	Generally, necessary for our legitimate interests (to promote us and our hotels), unless the law requires, or we have chosen, that the direct marketing be based on consent.
To enable you to take part in a prize draw or competition	Identity, Contact, Profile, Usage, Marketing and Communications	Consent
To deliver relevant website content and measure or understand the effectiveness of the content we deliver	Identity, Contact, Profile, Usage, Marketing and Communications, Technical and Tracking	Necessary for our legitimate interests (to provide information about our accommodation, hospitality, spa treatment and services, and to study how our website visitors use our website and information to inform our website and general business strategy)
To deliver relevant advertisements and measure or understand the effectiveness of the advertising we place	Identity, Contact, Profile, Usage, Marketing and Communications, Technical and Tracking	Necessary for our legitimate interests (to study how effective our advertisements are, to develop them and to inform our advertising and general business strategy)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	Identity, Contact, Technical and Tracking	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud) Necessary to comply with a legal or regulatory obligation
To use data analytics to understand our business, including to improve our website, to improve our accommodation, hospitality, spa treatment and services, to improve our marketing, and to improve our guest and website visitor relationships	Technical and Usage	Necessary for our legitimate interests (to understand and define types of guests for our accommodation, hospitality, spa treatment and services, to understand and define our website content, to develop our business and to inform our strategy)
To make suggestions and recommendations to you about accommodation, hospitality, spa treatment and services that may be of interest to you	Identity, Contact, Technical, Usage and Profile	Necessary for our legitimate interests (to develop our accommodation, hospitality and services and grow our business)
To prevent and detect unlawful acts	Identity, Contact, Financial, Transaction, Technical and Tracking	Necessary for our legitimate interests (to protect our business and our guests and website visitors by undertaking fraud monitoring and suspicious transaction monitoring) Necessary to comply with a legal or contractual obligation to share personal data for the purposes of law enforcement
In order to resolve legal claims or disputes involving you or us	All relevant data categories, depending on the nature of the allegation or claim	Necessary to bring or defend a claim