Privacy Policy

Five Guys JV Ltd - Privacy Policy

Five Guys JV Ltd ("Five Guys", "we", "us", or "our") is strongly committed to protecting personal data. This privacy policy describes how and why we collect and use personal data and provides both information about individuals' rights and how to exercise them.

Personal data is any information relating to an identified or identifiable living person and this privacy policy applies to personal data provided to us, both by individuals themselves or by others. Five Guys processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ.

Who We Are

Five Guys JV Limited is a limited company registered in England and Wales with registered number 8185191 and VAT registered number 150178823

Our registered office is Units 2-3, 1 Bard Road, London, W10 6TP

Who This Policy Applies To

This policy applies to any individual for whom Five Guys processes personal data, including (but not limited to):

  • Customers
  • Employees (current and former)
  • Commercial Suppliers
  • Vacancy Applicants
  • Auditors & Regulators

Personal Data We Collect

Five Guys only collects personal data which is relevant to our purpose of business and for which consent for its use has been provided by the individual. Such individuals may include (but is not limited to) employees, customers, vacancy applicants or suppliers and the data we collect may be personally identifiable information such as

  • Identity; name, date-of-birth, NI number, gender, marital status, passport number
  • Contact information; telephone numbers, email address; home address
  • Financial; bank name, account number, sort code; credit card number
  • Employment; visa status, disciplinary, absence, salary, pension
  • Technical; IP address, login username, password

Five Guys will only collect, store and use such data where there is a lawful basis of processing. This will typically be by obtaining explicit consent from the individual, or by demonstrating a legitimate interest which makes such processing necessary. It is the responsibility of the individual to ensure that the data we hold is current and accurate. Details of how to inform us about a change in your personal data are found further in this document

How We Will Collect Personal Data

We will ask for personal data only when we need it and each item of data which we request will be relevant to the task it is needed for. Data will be typically collected in the form of a paper document or electronically via an online portal.

Why We Need Personal Data

Five Guys processes your personal data for one of the following reasons:

  • We need to process the data under our contract with you for our services;
  • We have a legitimate interest as a business in processing your data;
  • We have a legal obligation to process the data; or
  • We have your consent (which you can withdraw at any time).

How We Protect Personal Data

We employ real-time monitoring and undertake regular security reviews to ensure your personal data is protected. Where data is transferred to external parties (acting as data processors), we undertake reasonable steps to ensure that third party data policies meet EEA legislation.

Where data is transferred outside of the EEA (i.e. the United States), such data is always transferred with adequate security mechanisms which protect data to the same standard as within the EEA and allows individuals to exercise the same rights

What We Do With Personal Data

Personal data collected by us may be:

  • Stored and Managed by Five Guys JV Ltd

    We may store personal data in digital or hard copy format in one of our restaurants, head offices, storage facilities or data centres.

  • Transferred to Other Five Guys JV Ltd Entities

    We may share personal data with other Five Guys group entities where necessary for administrative and support services.

  • Transferred to third party organisations that provide applications/functionality, data processing or IT services to us

    We use third parties to support us in providing our services and to help provide, run and manage our internal IT systems. For example, providers of information technology, cloud-based software as a service provider, identity management, website hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them.

  • Transferred to third party organisations that otherwise assist us in providing goods, services or information

    Personal data may be transferred to third party organisations who provide specific services to Five Guys. We have liaised with such organisations to ensure that personal data held on their systems, or the system of any organisations which they may have chosen to further sub-contract to, is stored with at least the same level of security as Five Guys' own standards require.

  • Transferred to Government Agencies and/or Regulators

    To adhere to any regulatory or legal requirements.

Your Rights as An Individual

Individuals have certain rights over their personal data and as a data controller we are responsible for fulfilling these rights. Advice on how to exercise such rights, along with Five Guys' response, are detailed below.

Access to Personal Data

You have the right to access personal data held by us as a data controller. To exercise this right, email personaldata@fiveguys.co.uk providing your name, contact details and details of any specific data which you would like access to.
Five Guys will verify the identity of the individual making the request and reply as soon as possible within the timescale legally required.

Amendment of Personal Data

To update personal data submitted to us, email personaldata@fiveguys.co.uk providing your name, contact details and any data item(s) requires amendment
Once we receive the request for amendment along with the corrected data, we will update your personal data with the corrected information provided.

Deletion of Personal Data

You have the right to erase any personal data which is no longer necessary in relation to the purpose of which it was originally required or for which Five Guys has no legitimate interest for continuing to store such data.
To request erasure of personal data, email personaldata@fiveguys.co.uk providing your name, contact details and any data item(s) requires amendment.
Should Five Guys determine the data is no longer required in line with the above individual rights, the data will be deleted.

Withdrawal of consent

We do not generally process personal data based on consent (as we can usually rely on another legal basis) but in any circumstances in which we do, you may withdraw such consent at any time
To withdraw consent, email personaldata@fiveguys.co.uk providing your name, contact details and indicate which personal data items the withdrawal of consent applies to

Other Data Subject Rights

This privacy statement is intended to provide information about what personal data we collect about you and how it is used. For a full list of individuals' rights, visit https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of these rights, please send an email to email personaldata@fiveguys.co.uk providing your name, contact details and which rights you would like to exercise.

The Right to Complain to the ICO

We hope you would never need to complain about Five Guys to the ICO but if you do, you may find the following information helpful:
https://ico.org.uk/for-the-public/raising-concerns/
https://ico.org.uk/concerns/

Contact information

If you have any questions about this privacy statement or have a question, comment or complaint about our use of personal data, please contact us at The Data Controller, Units 2-3, 1 Bard Road, London, W10 6TP or send an email to personaldata@fiveguys.co.uk

About This Privacy Policy

Five Guys is committed to providing full transparency of its data usage and allowing individuals to exercise their rights under EU & local legislation. This privacy policy reflects such a commitment and is applicable in all territories in which it operates. The policy will be updated accordingly when such legislation is modified

The privacy policy can be found on our company websites (www.fiveguys.co.uk, www.fiveguys.fr, www.fiveguys.de and www.fiveguys.es) and was last updated on 24th May 2018.