Privacy Notice

This sample notice explains how Crown & Thyme Hospitality Limited would use personal information. It must be reviewed against the restaurant’s actual systems, suppliers and lawful bases before launch.

1. Who we are

Crown & Thyme Hospitality Limited is the data controller for information collected through this website. Contact: hello@crownandthyme.example, 18 King Street, Manchester, M2 6AG.

2. Information we collect

Reservation details, including contact information, party size, date, time and requests.
Order details, delivery address, payment status and transaction references.
Enquiries, feedback and correspondence.
Marketing preferences and consent records.
Technical information such as IP address, browser type and cookie choices where applicable.

3. Why we use it

Purpose	Typical lawful basis	Example retention
Manage reservations and orders	Contract / steps before contract	Up to 24 months
Respond to enquiries and complaints	Legitimate interests / legal obligation	Up to 24 months
Food allergy or access requests	Explicit consent or substantial public interest where applicable; obtain specialist advice	Only as long as needed for the visit and records
Marketing emails	Consent or permitted soft opt-in where applicable	Until withdrawal or suppression
Accounting and tax records	Legal obligation	According to statutory requirements

4. Sharing information

Information may be shared with reservation platforms, payment providers, delivery providers, website hosting, email suppliers, professional advisers and authorities where legally required. Supplier contracts and international transfer safeguards must be documented.

5. Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, objection, portability and withdrawal of consent. You may complain to the UK Information Commissioner’s Office.

6. Security and changes

We use proportionate technical and organisational measures. This notice should state its effective date, version and material changes.