Privacy Policy

1. Who We Are

Warm Table Café London ("we", "us", "our") is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data in an open and transparent manner.

Company Information:

Warm Table Café London
71–75 Shelton Street
Covent Garden, London
WC2H 9JQ
United Kingdom (England and Wales)

Owner (PSC): Nataliia Ofitserova
Email: privacy@warmtablecafe.co.uk

2. What Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide

• Contact Information: Name, email address, phone number when you make a booking, send us a message, or subscribe to our newsletter.
• Booking Details: Date, time, party size, and any special requirements or preferences you share with us.
• Event Enquiries: Details about the event you wish to host, including organisation name for corporate bookings.
• Feedback: Any comments, reviews, or feedback you provide about our services.

2.2 Information Collected Automatically

• Website Usage Data: IP address, browser type, device information, pages visited, and time spent on our website.
• Cookies: Information collected through cookies and similar technologies (see our Cookie Policy).

2.3 Information from Third Parties

• Payment processors when you pay for events or parties (we do not store full payment card details).
• Social media platforms if you interact with us through those channels.

3. How We Use Your Data

We use your personal data for the following purposes:

• Bookings & Reservations: To process and manage your table bookings and event reservations.
• Communication: To respond to your enquiries, confirm bookings, and provide customer service.
• Marketing: To send you newsletters and promotional materials (only with your consent).
• Website Improvement: To analyse how our website is used and improve user experience.
• Legal Compliance: To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing

Under UK GDPR, we process your data based on the following legal grounds:

• Contract: Processing necessary to perform a contract with you (e.g., fulfilling a booking).
• Consent: Where you have given clear consent (e.g., marketing emails). You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate business interests, where these do not override your rights (e.g., improving our services).
• Legal Obligation: Processing necessary to comply with a legal obligation.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service Providers: Third parties who help us operate our business (e.g., website hosting, email services, payment processors). These providers are contractually bound to protect your data.
• Legal Requirements: Law enforcement or government bodies when required by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

6. International Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Booking Records: 2 years after your last visit.
• Marketing Preferences: Until you unsubscribe or withdraw consent.
• Website Analytics: 26 months (anonymised after this period).
• Financial Records: 7 years as required by UK tax law.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@warmtablecafe.co.uk. We will respond within one month.

9. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure password policies and access controls
• Regular security assessments and updates
• Staff training on data protection

11. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or contacting you directly. The "Last updated" date at the top indicates when this policy was last revised.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at privacy@warmtablecafe.co.uk. We will do our best to resolve your concerns.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
www.ico.org.uk
Helpline: 0303 123 1113

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Warm Table Café London
1 Spenser Rd
London SE24 0NS
Email: privacy@warmtablecafe.co.uk