GDPR Policy

Data controller

Gandom Charcoal Grill is the data controller for personal information collected through this website. That means we decide why and how your information is used, and we are responsible for looking after it.

The data we process

We process the contact and booking details you give us — typically your name, email address, phone number, reservation date and time, party size and any notes or messages you choose to send. We do not collect special category data, and we never ask for payment card details on this website.

Our lawful bases

We only use your information where the law allows us to:

• Contract: to take the steps needed to make and manage your reservation or voucher purchase.
• Legitimate interests: to reply to your enquiries and keep accurate booking records so the restaurant runs smoothly.
• Consent: where you have clearly agreed, for example if you ask to hear about future events. You can withdraw consent at any time.

Your rights

UK GDPR gives you important rights over your personal data:

• Access: ask for a copy of the information we hold about you.
• Rectification: ask us to correct anything that is wrong or incomplete.
• Erasure: ask us to delete your information (the right to be forgotten).
• Restriction: ask us to pause using your information in certain circumstances.
• Portability: ask for your information in a commonly used format.
• Objection: object to us using your information where we rely on legitimate interests.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time.

How to exercise your rights

Email us or call us using the details below and tell us what you would like us to do. We will respond within one month. There is no charge, and we will never treat you differently for exercising your rights.

Data security and retention

Your information is stored securely with our hosting provider, access is restricted to the restaurant team, and the admin area is password protected. We keep booking and enquiry records only for as long as they are needed to run the restaurant and handle any follow-up, after which they are deleted.

Data breaches

In the unlikely event of a data breach that risks your rights, we will inform the Information Commissioner's Office within 72 hours and let you know directly where the law requires it.

Complaints

If you are unhappy with how we have handled your data, please speak to us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.