Privacy Policy - Swan Bar and Grill

1. Introduction

The Swan Bar and Grill ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect personal data when you use our website, make a booking, place an order, or otherwise interact with our business.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered business address is 45 Baptist End Rd, Netherton, Dudley, West Midlands.

2. Information We Collect

We may collect and process the following personal data:

Identity data: your name, title, or other identifiers you provide when making a booking or enquiry.
Contact data: your email address, telephone number, and postal address.
Booking and order data: details of reservations, orders, dietary requirements, or special requests you make.
Technical data: your IP address, browser type, operating system, and browsing actions on our website, collected through cookies and similar technologies.
Communications data: records of correspondence if you contact us by email, phone, or through our website contact form.

3. How We Use Your Data

We use your personal data for the following purposes:

To process and confirm table bookings and takeaway or delivery orders.
To respond to enquiries, feedback, or complaints.
To manage our relationship with you, including notifying you of changes to our services or policies.
To improve our website and services based on how visitors use our site.
To comply with legal obligations.

Lawful Basis for Processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

Contract: processing is necessary to fulfil a booking or order you have placed with us.
Legitimate interests: processing is necessary for the purposes of running and improving our business, provided these interests are not overridden by your rights.
Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as marketing communications.
Legal obligation: processing is necessary to comply with a legal requirement.

4. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

Delivery service providers, where necessary to fulfil your order.
Payment processors, to handle transactions securely.
IT and website hosting providers who support the operation of our website.
Professional advisers, including legal and accounting services, where necessary.
Law enforcement or regulatory bodies, where required by law.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Booking and order records are typically retained for up to 24 months. Contact form enquiries are retained for up to 12 months. We may retain data for longer periods where required for legal, accounting, or regulatory purposes.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to those employees and third parties who have a business need to know.

7. Cookies

Our website uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience. Cookies are small text files placed on your device by our website.

We use the following types of cookies:

Strictly necessary cookies: required for the operation of our website.
Analytical cookies: allow us to recognise and count the number of visitors and understand how visitors navigate our site.

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

8. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your personal data in certain circumstances.
Right to restrict processing: you can ask us to suspend the processing of your data in certain circumstances.
Right to data portability: you can request the transfer of your data to another party in certain circumstances.
Right to object: you can object to the processing of your data where we are relying on a legitimate interest.
Right to withdraw consent: where we rely on consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

9. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or our data practices, or if you wish to exercise your data protection rights, please contact us:

The Swan Bar and Grill
45 Baptist End Rd, Netherton, Dudley, West Midlands
Email: [email protected]
Phone: 07403 068174

12. Supervisory Authority

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO can be contacted at ico.org.uk or by telephone on 0303 123 1113.