Privacy Policy

1. Who we are

The Woodman (“we”, “us”, “our”) operates the website and services at thewoodman-battersea.co.uk. We are the data controller responsible for your personal data.

If you have any questions about this policy or your data, you can contact us at contact@thewoodman-battersea.co.uk or by post at 60 Battersea High Street, London SW11 3HX.

2. Information we collect

We may collect and process the following categories of personal data:

• Account data: your name, email address and password when you register.
• Order data: items ordered, table number, order value and loyalty points earned.
• Booking data: name, contact details, party size, date, time and notes you provide when booking a table.
• Contact form data: name, email and message submitted via our contact form.
• Technical data: IP address, browser type, device information and usage data collected through cookies and similar technologies.

3. How we use your information

We process your personal data for the following purposes:

• To create and manage your customer account.
• To process your table orders and bookings and provide the service you requested.
• To operate our loyalty programme and record points earned.
• To respond to enquiries sent through our contact form.
• To communicate with you about your bookings, orders and account.
• To improve our website, menu and service, and to analyse usage.
• To comply with legal, regulatory and tax obligations.

4. Legal basis for processing

We rely on your consent when you register an account or submit a form; on contract when processing orders and bookings; on our legitimate interests to improve and secure our service; and on legal obligation where required.

5. Sharing your information

We do not sell your personal data. We may share it with service providers who process data on our behalf (such as hosting, email and analytics providers), all of whom are bound by confidentiality and data-protection obligations. We may also disclose data where required by law.

6. International transfers

Some of our service providers may process data outside the UK/EEA. Where this happens, we ensure appropriate safeguards such as Standard Contractual Clauses are in place to protect your data.

7. Data retention

We keep your personal data only for as long as necessary to provide our services and to meet legal or accounting requirements. Account data is retained while your account is active and afterwards for a reasonable period unless you request deletion.

8. Your rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time without affecting prior processing.
• Lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

9. Security

We take appropriate technical and organisational measures to protect your data, including encrypted password storage and access controls. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children’s privacy

Our services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the “last updated” date at the top of this page.