GDPR- Compliant Privacy Policy

Harry’s Bar & Restaurant
3 High Street, Thorpe-le-Soken, CO16 0EA
Telephone: 01255 860250

Last updated: December 2025


  1. Introduction

This Privacy Policy applies to the website operated by Harry’s Bar & Restaurant (“we”, “us”, “our”) and explains how we collect, use, store, and protect your personal data when you visit our website, contact us online, make enquiries, or otherwise interact with us digitally.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


  1. Data Controller

Harry’s Bar & Restaurant is the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, please contact us:

  • Telephone: 01255 860250
  • Address: 3 High Street, Thorpe-le-Soken, CO16 0EA

  1. Personal Data We Collect

When you use our website or contact us online, we may collect and process the following types of personal data:

  • Contact details such as your name, telephone number and email address (for enquiries or reservation requests)
  • Booking information such as date, time, number of guests and any special requests
  • Communication records such as emails or messages sent via our website
  • Technical data such as IP address, browser type, device information, and operating system
  • Usage data about how you use our website

We do not knowingly collect personal data from children through our website.


  1. How We Use Your Personal Data

We use your personal data collected via our website for the following purposes:

  • To respond to enquiries or reservation requests made through the website
  • To communicate with you regarding your enquiry
  • To manage our services and customer relationships
  • To ensure the security and proper functioning of our website
  • To comply with legal and regulatory obligations

No payments are taken through our website. All payments are made in person at the restaurant.


  1. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases to process personal data:

  • Contract: where processing is necessary to fulfil a booking or service
  • Legitimate interests: to operate and improve our business, ensure safety and prevent fraud
  • Legal obligation: where we must comply with the law
  • Consent: where you have given clear permission, such as marketing communications

You may withdraw consent at any time.


  1. Marketing Communications

We will only send marketing communications by email or other electronic means where you have explicitly opted in or where permitted by law.

You may withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us directly.


  1. Sharing Your Personal Data

We may share your personal data with:

  • Trusted service providers, such as professional advisers or IT support
  • Authorities where required by law

We do not sell your personal data to third parties.


  1. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

  • Booking and enquiry data: typically up to 12 months
  • Financial records: as required by HMRC

  1. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

Access to personal data is limited to authorised staff only.


  1. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict processing of your data
  • Object to processing
  • Request data portability

To exercise your rights, please contact us using the details above.


  1. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We encourage you to contact us first so we can try to resolve your concern.


  1. Cookies

Our website may use cookies and similar technologies to:

  • Ensure the website functions correctly
  • Improve user experience
  • Analyse website traffic

Cookies are small text files placed on your device. You can control or disable cookies through your browser settings. Disabling cookies may affect website functionality.


  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website or legal requirements. The latest version will always be available on our website.


This privacy policy is provided for general information purposes and does not constitute legal advice.