Data Protection Punch Taverns plc (the “Company”) and its subsidiaries (together the “Group” or “We”) are regulated by the Data Protection Act 1998 (the “DPA”) and are required, as we process personal information, to comply with a number of important principles regarding the privacy and disclosure of the personal information we hold.   What is personal information? Personal information is information about a living person which relates to and can identify that person. Our responsibility   All information that we hold concerning you as an individual will be held and processed by the Group strictly in accordance with the provisions of the DPA. Such data will be used by the Group to administer our relationship with you as a valued customer and to provide you with information about the Group’s activities and for related purposes.  We will not, without your consent, supply your details to any third party except where (1) such transfer is a necessary part of the activities that we undertake, or (2) we are required to so by operation of law. Your responsibility and rights In order to help us fulfil our obligation, please inform us of any changes in your personal details as soon as reasonably possible.  You have the right under the DPA to request a copy of any personal data we hold about (“Subject Access Request”).  To exercise this right, or to find out more about it, please email data.protection@punchtaverns.com. More information   For further information about your rights under the DPA, please contact our Data Protection Officer at data.protection@punchtaverns.com alternatively, please visit the website of the Information Commissioner at: http://www.ico.gov.uk/.