Privacy policy

This document tells you what we do with the information you provide us, where and how we collect it, how we keep it secure and your rights in relation to this information.

It applies to The Old Restoration, 55-57 High Street, Cheltenham GL50 1DX, and to this website, theoldrestoration.com. The Old Restoration is one of the pubs run by World Famous Dive Bars.

Data Controller

'WFDB', 'World Famous Dive Bars', 'we', 'us' and 'our' are references to World Famous Dive Bars Ltd, who is the data controller in respect of this website and the processing described in this notice. We have appointed a data protection officer whose contact details are provided at the end of this notice.

About World Famous Dive Bars

WFDB is a pub group based primarily in the South West of England. Owning a small collection of pubs, venues and eateries, we aim to provide something for everyone.

Why we process your data

We will process your personal data whenever you interact with us in person, in a venue or online. This can be when:

• You book a table, event, or function
• You make a payment, request a refund, or redeem a voucher
• You use our Wi-Fi service
• You subscribe to one of our newsletters or direct marketing
• We carry out profiling
• You submit queries, compliments or complaints
• We record CCTV images
• An accident occurs
• We impose a ban on visiting our venues
• We ask for other people's personal data

More information relating to each scenario follows.

1. You book a table, event, or function

We will use the information that you provide to make and confirm your booking.

When you book a table on theoldrestoration.com, we ask for your name, email address and mobile number, and you can choose to tell us about an occasion, add notes (such as allergies or accessibility needs), pre-order food and opt in to marketing emails. Bookings made on this website are handled by our booking system.

If you make a group booking and provide us with the details of other people in your group, we may use these details to communicate information relating to said booking. Please ask their permission first.

If you tell us about dietary requirements, such as allergies and intolerances, or if you tell us any accessibility requirements, we will use this information to help us look after you and any guests on your visit.

If you provide information about birthdays, anniversaries, or any other special occasions, we will use this information to make your visit as special as possible. If you give us permission to do so, we will use this information to send you a reminder to book again when the next birthday, anniversary or celebration is due. We may also use this information for other promotional purposes such as discounts and vouchers, if you have given us permission to do so.

Booking information that you provide is held for 3 years from the end of the calendar year of which the booking is made.

2. You make a payment, request a refund, or redeem a voucher

We will use the information you provide to process your payment or refund. We do not keep records of payment card details.

We retain this data for 6 years from the date of the transaction. This is by law.

3. When you use our Wi-Fi service

We will use the information you provide to register you for and connect you to the service. When you first register, and each time that you connect to the service, we obtain additional information from your device and from the equipment used to provide the Wi-Fi service. This information describes where, when and how you registered or connected. We use this information to provide and maintain your connection to the service.

With your permission, we will also use this information for direct marketing.

We will retain your information for 3 years from the end of the calendar year of which you last used our Wi-Fi.

4. When you subscribe to our newsletters or direct marketing

With your permission, we will use the information you provide to send you communications containing special offers, discounts, promotions or any other information which you have requested. We retain this data for 3 years from the end of the calendar year of which you last interacted with us, unless in the circumstance of you requesting that we delete your data, or you unsubscribe from promotional communications.

Every communication we send includes an unsubscribe or similar opt-out mechanism.

5. When we carry out profiling

We use customer profiles to keep track of our customer interactions and learn more about their likes and dislikes. This helps us target our advertising and marketing and improve our products, brands and services.

The personal data collected in said profiles includes:

• Demographic information, such as your age, gender, address and postcode
• Purchase information, such as what you bought and when
• Information about events and special occasions, such as your birthday or anniversaries
• Information about your visits to our pubs and venues, such as when you visited, how long you stayed for, and how often you visit
• Information about your use of our services such as Wi-Fi, vouchers and any loyalty schemes
• Information about how you respond to our promotions, including which messages you opened or interacted with

With our use of this information, your experience of our venues and products will be better and more enjoyable. If you have signed up to our direct marketing, we will use this information to send you personalised offers.

If you don't want us to use your personal data for this purpose, you can let us know using the contact details at the end of this notice.

6. When you submit queries, compliments or complaints

We will use the information you provide to deal with your enquiry and keep you informed about its progress. If you compliment a person or a team for their service, we will pass your compliment on to them and their manager, so that their achievement can be recognised.

Most complaints can't be resolved without discussing the matter with other people, so we may need to share information about your complaint with: the team at the pub you visited, or their manager; the management team of a contractor we have engaged; or other types of third party organisation. We will only share information with others when it's necessary to investigate and resolve your complaint.

7. When we record CCTV images

We use CCTV to help keep our guests and staff safe and to help us investigate any potentially criminal or unsafe incidents which occur. CCTV is kept for up to 31 days.

If we need to carry out an investigation, we will review these recordings to determine if they contain relevant information and the retention period will be extended to an additional 1 year from the date our investigation concluded. If this is the case, the recording may be shared with members of our management team, our own- or third-party insurers, suppliers, contractors, licensing authorities or the police. Recordings may also be used in any insurance claim or other type of legal claim or proceeding that follows.

8. If an accident occurs

If you are unfortunate enough to be involved in an accident on our premises, we will use the information you or others present at the time provide to record the incident in the accident log.

We retain this information for 6 years from the date of the accident, or 3 years from the age at which a child involved in the accident becomes an adult, or 3 years from the date of settlement of a claim, whichever occurs last. We may also use this information to investigate and to make or defend an insurance or other type of legal claim.

9. We impose a ban on visiting our venues

If you are banned from any of our venues, we will use your name, photos and recordings of you and any other personal information that we need to identify you and which we can obtain and use lawfully to enable our staff to record and enforce the ban. The data will be retained for as long as the ban stands. If you are banned from one of our venues, you are also banned from all venues within the group.

If you are banned from a pub that is a member of a Pubwatch, they may share and receive information about you from other members of the Pubwatch.

General information about Pubwatch can be found on the national Pubwatch website. You can find out more about a particular Pubwatch by asking a member of staff at a participating venue, or visiting that Pubwatch's website. Pubwatches are data controllers for the personal information they collect and share.

10. We ask for other people's personal data

Please refer them to this document and ask for their permission to share their information first.

Lawful bases

The lawful bases we rely on for our processing are:

Purpose	Lawful basis
You book a table, event, or function; use our Wi-Fi service; make a payment, request a refund, or redeem a voucher	We process data to set up the contract, provide the services to you and notify you of any important changes to them. We process booking data to send service messages (such as confirmations, notifications of change and reminders) to you and other people whose contact details you may provide as it is in yours, theirs and our legitimate interest.
You subscribe to one of our newsletters or direct marketing	We send marketing information to people who consent to receive it. We may also send marketing to customers who, when informed that we want to do so, choose not to opt out (soft opt-in). It's a legitimate interest to send direct mail marketing to let our customers know about our products, brands, services and any special offers we are running. Customers who no longer want to receive marketing can opt out at any time (please follow the instructions in the marketing messages we send you).
We carry out profiling	This helps our business to develop by targeting our advertising and marketing and understand more about our customers' likes and dislikes, which are legitimate interests for us.
You submit queries, compliments or complaints	Sometimes our processing will be necessary for us to meet the terms of the contract we have with you. Otherwise, we will have a legitimate interest in dealing fully with the matter you have raised.
We record CCTV images	We may be required to do so by a licensing authority (legal obligation) or choose to do so for the purposes stated on the signage (legitimate interest).
An accident occurs	We record accidents primarily for compliance with our legal obligations and to support and defend claims (legitimate interest).
We impose a ban on visiting our venues	We may impose a ban on visiting our premises, to protect our customers and staff (legitimate interest).
We record promotional videos or interviews or take photos	It is in our legitimate interests to take photos and video and recordings to promote our businesses positively via our marketing and press releases.

The ICO have published a helpful guide to lawful bases for the general public which you can find here: ico.org.uk: a guide to lawful basis

Data sharing

Other companies within the World Famous Dive Bars group may need to access some of this data. These companies are:

Company	Registered office
THE CROWN (BRISTOL) LIMITED	Britannia Court, 5 Moor Street, Worcester, England, WR1 3DB
BLISS BRIDGEWATER LTD	Britannia Court, 5 Moor Street, Worcester, England, WR1 3DB
THE GREYHOUND BRISTOL LTD	Britannia Court, 5 Moor Street, Worcester, England, WR1 3DB
COLOSSEUM BRISTOL LIMITED	Britannia Court, 5 Moor Street, Worcester, England, WR1 3DB
MOTHERS RUIN BRISTOL LIMITED	Britannia Court, 5 Moor Street, Worcester, England, WR1 3DB

Other organisations who help us to provide our products and services

We work with a number of third-party suppliers and service providers. Many of these organisations process personal data to provide products or services to us, or on our behalf. These organisations are bound by the terms of this privacy notice and they are also required to comply with our data protection policies. They are not permitted to use your personal data for their own purposes.

The categories of recipients include:

• Website and application (app) providers
• Marketing and analysis providers
• Bookings providers
• Security service operations

Other situations in which we may share your personal data

We will share your personal data if it is necessary to do so to comply with a legal requirement, such as to comply with a condition attached to a premises license by a licensing authority.

We will share your personal data if it is necessary to protect our business interests, such as to enforce the terms of a contract, pursue an overdue debt or defend other legal rights.

We may share your personal data where there is a legitimate interest to do so, for example, for the detection or prevention of crime, fraud or money laundering; to allow a regulator or ombudsman to investigate a complaint you have submitted to them; or to protect the rights of other people or organisations.

This website

This website does not use advertising or analytics tracking, and does not set its own cookies. Its fonts are loaded from Google Fonts, which means your browser connects to Google's servers. If our booking form asks you to complete an "I'm not a robot" check, that check is provided by Cloudflare.

Safeguarding

We protect the personal data we hold from theft, accidental loss, corruption and other threats that would have a negative impact on our customers. Our protective measures include:

• Not collecting personal data that we don't really need
• Securely destroying or anonymising personal data when we don't need it any more
• Only allowing our employees and our suppliers to process the personal data they need to carry out their duties
• Making sure that staff are trained on how to handle personal data safely and securely and are fully aware of their personal responsibilities
• Protecting our websites, networks and IT systems from unauthorised access and from threats such as denial of service attacks, viruses and malware
• Making periodic checks that these safeguards are working well and making improvements to them when we think we can do better.

Your rights

Data protection law provides you with certain rights and as a responsible data controller, we are committed to uphold these:

Right	Description
Information	You have the right to be informed what we will use your personal information for, where we obtain it, who we share it with and how long we keep it for. This is the primary reason for publishing this notice.
Access	You have the right to access a copy of your personal data and an explanation of what we are using it for. This is also known as a 'subject access request', 'SAR' or 'DSAR'.
Rectification	You have the right to ask us to correct or stop processing inaccurate personal data.
Erasure ('right to be forgotten')	You have a right in certain situations to ask us to delete your personal data.
Restriction of processing	You have a right in certain situations to ask us not to process your personal data.
Object to processing	You have the right in certain situations to object to the fact that we are processing some of your personal data.
Portability	You have the right in certain situations to ask us to pass some of your personal data to another data controller on your behalf.
Complain	You have a right to submit a complaint to the UK Information Commissioner's Office (ICO). You can find guidance on making a complaint on the ICO's website.
Withdraw consent	Most of the personal data processing we do is not dependent on your consent but any consent that we are relying on can be withdrawn if you wish to do so.

Detailed information about all of these rights can be found on the ICO website: ico.org.uk/for-the-public

If you notify us that you want to exercise your rights, we will acknowledge your request promptly. If we don't already know who you are, we may need to ask you to provide us with additional information to verify your identity. In most circumstances, you will not be required to pay a charge for exercising your rights.

We will then gather relevant information to respond to your request. We will carry this work out as quickly as possible, but it may take up to one calendar month to respond to you. We may respond to your request in phases as information becomes available.

If we cannot satisfy your request within the time period, we will let you know why and when we expect to be able to provide you with either additional information, or with a full response. If we decide that we cannot satisfy your request, we will provide you with our decision and our reasons for it within one calendar month.

We retain data relating to your request for up to 3 years from the date of our last correspondence to you in relation to your request.

Contact us

If you would like to contact us regarding our privacy policy, your personal data, or anything else regarding data and privacy, please email dataprotection@wfdbltd.com.

Status

This version of our privacy policy is effective from 1st September 2024.