Privacy Policy

1. Who we are

The data controller is The Three Horseshoes, 102 Norton Road, Letchworth Garden City, SG6 1AG, England.

For any data protection queries, please contact us at contact@three-horseshoes.com.

2. What personal data we collect

We collect personal data only when you choose to provide it to us. This includes:

Booking enquiries

• Full name
• Email address
• Phone number
• Preferred date, time and party size
• Occasion and any special requests or dietary requirements you choose to share

General contact enquiries

• Full name
• Email address
• Subject and message content

Website usage data

When you visit our website, our hosting provider may automatically collect standard server log data, including your IP address, browser type, pages visited and the date and time of your visit. This data is used for security and operational purposes only and is not used to identify you personally.

3. How we use your personal data

We use the personal data you provide to:

• Respond to your booking enquiry and confirm or arrange your reservation
• Reply to your general enquiry or message
• Communicate with you about your visit, including any changes or follow-up
• Comply with our legal obligations

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — to take steps at your request prior to entering into a contract (e.g. processing a table booking).
• Legitimate interests — to respond to general enquiries and manage our business operations, where this does not override your rights and interests.
• Legal obligation — where we are required to process data to comply with applicable law.

5. How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected:

• Booking enquiries — up to 12 months from the date of your enquiry or visit, whichever is later.
• General enquiries — up to 6 months from the date of your message.
• Server logs — typically 30 days, as determined by our hosting provider.

After these periods, data is securely deleted or anonymised.

6. Who we share your data with

We do not sell, rent or trade your personal data. We may share it with:

• Our messaging and inbox service provider — to deliver and manage enquiry submissions. This provider processes data on our behalf under a data processing agreement.
• Our website hosting provider — for the operation and security of this website.
• Legal or regulatory authorities — where required by law.

All third-party processors are required to handle your data securely and in accordance with UK GDPR.

7. International transfers

Where any of our service providers process data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.

8. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at contact@three-horseshoes.com. We will respond within one calendar month.

9. Cookies

Our website uses cookies. Please see our Cookie Policy for full details of the cookies we use and how to manage them.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.