Privacy Policy

1. Who We Are

The Cheetham Arms is a restaurant located in Dunscar, Bolton. We are committed to protecting your personal data and privacy rights. If you have any questions about this privacy policy or our practices with regard to your personal information, please contact us at:

2. What Information We Collect

We collect personal information that you provide to us when:

• Making a reservation: First name, last name, email address, phone number, party size, and any special requirements
• Contacting us: Name, email address, phone number, and your message
• Using our website: IP address, browser type, pages visited, and time spent on pages (via cookies)

3. How We Use Your Information

We use your personal information for the following purposes:

• Reservation Management: To process and confirm your bookings, send confirmation emails, and contact you about your reservation
• Customer Service: To respond to your inquiries and provide customer support
• Legal Compliance: To comply with applicable laws and regulations
• Website Analytics: To understand how visitors use our website and improve our services (only with your consent)

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contractual Necessity: Processing reservation data to fulfill our booking contract with you
• Legitimate Interest: Improving our services and customer experience
• Consent: Website analytics and marketing communications (where you have opted in)
• Legal Obligation: Compliance with applicable laws and regulations

5. How We Share Your Information

We may share your personal information with:

• Service Providers: Third-party booking systems (LibreBooking) that help us manage reservations
• Legal Requirements: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for:

• Reservation Data: 2 years after your visit for customer service and legal compliance
• Contact Inquiries: 1 year after your last communication
• Website Analytics: 26 months (Google Analytics default)

After these periods, we securely delete or anonymize your personal data.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing for legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

8. Cookies and Tracking

Our website uses cookies to:

• Remember your preferences and improve your experience
• Analyze website traffic and usage patterns (with your consent)
• Ensure website security and functionality

You can manage cookie preferences through our cookie banner or your browser settings. Some cookies are essential for website functionality and cannot be disabled.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL encryption for data transmission
• Secure servers and databases
• Regular security assessments
• Staff training on data protection

10. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do this, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

11. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us so we can delete such information.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

13. Contact Information

If you have questions about this privacy policy or wish to exercise your rights, contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached. Visitico.org.uk for more information.