Privacy Policy
Introduction
Welcome to Two Spoons Bistro & Bar ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit our website.
By using our Website, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Website.
Who We Are
- Website Name: Two Spoons Bistro & Bar
- Website Address: https://twospoonsfleet.co.uk/
- Data Controller: Emrah Kurt, Proprietor
- Contact Address: 259 Fleet Rd, Fleet, Hampshire GUB1 3BN
For the purposes of the General Data Protection Regulation (GDPR) and UK data protection laws, we are the data controller of your personal data.
What Data We Collect
We may collect and process the following types of personal data:
- Personal Information You Provide:
- Name
- Email address
- Phone number
- Billing and shipping address (if applicable)
- Any other information you provide via forms on our Website
- Automatically Collected Data:
- IP address
- Browser type and version
- Operating system
- Referring website
- Pages visited and time spent on the Website
- Cookies and similar tracking technologies (see our Cookie Policy)
- Comments:
- When visitors leave comments on the Website, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help with spam detection.
- Media:
- If you upload images to the Website, avoid uploading images with embedded location data (EXIF GPS), as visitors to the Website can download and extract location data from images.
How We Use Your Data
We use your personal data for the following purposes:
- To provide and manage our services
- To process transactions and send order confirmations
- To respond to your inquiries and provide customer support
- To send newsletters or marketing communications (only if you have opted in)
- To improve our Website, products, and services
- To comply with legal obligations
Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds:
- Consent: When you have given us explicit consent to process your data (e.g., subscribing to a newsletter).
- Contractual Necessity: When processing is necessary to fulfill a contract with you (e.g., processing an order).
- Legal Obligation: When we are required to process your data to comply with the law.
- Legitimate Interests: When processing is necessary for our legitimate interests, provided your rights and freedoms are not overridden.
Sharing Your Data
We do not sell or rent your personal data to third parties. However, we may share your data with:
- Service Providers: Third-party companies that help us operate our Website, such as hosting providers, payment processors, and email marketing services.
- Legal Authorities: When required by law or to protect our legal rights.
- Analytics Providers: To analyze Website usage and improve performance (e.g., Google Analytics).
How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations. For example:
- Comments and their metadata are retained indefinitely unless you request their removal.
- Contact form submissions are kept for [specify duration, e.g., 6 months].
- Analytics data is retained for [specify duration, e.g., 26 months].
Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request that we delete your personal data, subject to legal obligations.
- Right to Restrict Processing: You can request that we limit the processing of your data.
- Right to Data Portability: You can request that we transfer your data to another organization or directly to you.
- Right to Object: You can object to the processing of your data for certain purposes, such as direct marketing.
- Right to Withdraw Consent: If you have given consent, you can withdraw it at any time.
To exercise your rights, please contact us at [Your Contact Email Address].
Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to enhance your browsing experience. For more information, please see our Cookie Policy.
Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. Please review their privacy policies before providing any personal data.
Data Security
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Please check this page periodically to stay informed about how we handle your personal data.