← Home
Last updated: [DATE]
Every [BRACKETED] field below needs filling in by Mark and Danny before this is published, not left as a placeholder. This draft has not been checked by a solicitor. It's built to be technically accurate to how the site actually works, but a privacy notice is a legal document with real consequences if it's wrong, so it should be reviewed properly before it's the thing customers actually see and rely on. The ICO's own guidance and self-assessment tools are a reasonable starting point if a full solicitor review isn't happening straight away: ico.org.uk.
This site is run by [DIGZ N' LIDZ LEGAL BUSINESS NAME], [BUSINESS ADDRESS]. For the purposes of data protection law, [DIGZ N' LIDZ LEGAL BUSINESS NAME] is the data controller for personal data collected through this site, meaning it's Mark and Danny's business that decides what happens with customer data, not Sidedoor Digital.
Sidedoor Digital built and maintains the technical systems this site runs on (the website, booking system, and dashboard). Sidedoor Digital does not decide what customer data is used for and does not access customer personal data as part of its ongoing work, its access is limited to site performance and usage data through the dashboard described below.
Booking a session (family, group, or corporate): name, email address, phone number (optional), party size, and any notes you add. Used to hold your booking, contact you about it, and process any deposit.
Joining the mailing list: your email address, and whether you signed up through a booking, an order, or directly. Used to send offers and updates. You can unsubscribe at any time, [ADD UNSUBSCRIBE MECHANISM DETAIL].
Ordering food or drink: what you ordered and which seat or table it's for. No account or personal details are collected for this beyond payment, covered below.
Contacting us directly: whatever you include in your message, plus your email address to reply to you.
All card payments are processed directly by Square. Card numbers and card details are entered straight into Square's own secure payment form and never pass through or get stored on our servers or database. We keep a reference to the payment (a transaction ID) so we can match it to your booking or order, not your card details.
See Square's own privacy policy for how they handle payment data.
The site and its database are hosted on Cloudflare's infrastructure. [CONFIRM: data region / whether Cloudflare's UK/EU data localisation is in use, this affects what needs saying here about international transfers].
Booking confirmation and other transactional emails are sent through Resend. See Resend's privacy policy.
This site uses Cloudflare Web Analytics to see how many people visit and which pages are popular. It doesn't use cookies, doesn't track you individually, and doesn't build a profile of your visit. [CONFIRM: Square's payment form may set its own cookies or use device information as part of its fraud prevention, this should be checked against Square's current documentation before publishing, since it may need mentioning here or covering with a cookie banner].
A small piece of browser storage (not a cookie) is used on the homepage so the intro animation only plays once per visit. Nothing is sent to a server because of this, it stays on your device.
[ADD RETENTION PERIODS: how long booking records, mailing list entries, and enquiry details are kept, and what happens to them after]
Under UK GDPR, you can ask to see the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how it's used. To do any of this, contact [PRIVACY CONTACT EMAIL].
If you're not happy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.
Get in touch through our contact page or email [PRIVACY CONTACT EMAIL].
All systems powered and built by Sidedoor Digital