Legal

Privacy policy.

What we collect, why, how long we keep it and how to ask us about it.

What we collect

When you use the booking form we collect your name, phone number, email address, your postcode, which meal and how many, and anything you write in the message box. The form also records the time it was sent and your IP address, used only to block automated submissions.

When you book we keep the booking: your name, the date, the party size, and any dietary or access notes, which we keep on your record so you do not have to repeat them. Private dining bookings keep the deposit and the final bill. The restaurant has CCTV covering the entrance and the till, kept for 31 days.

Why we use it

  • To confirm and remind you of appointments (the steps needed before and under a contract).
  • To run the restaurant lawfully, which includes allergen records and CCTV (legal obligation). Photographs of guests are used on this site or our social pages only with their agreement.
  • To keep invoice records (legal obligation).
  • To tell you about producer suppers, wine nights and Christmas, if you have asked us to (consent; stop at any time by email).

How long we keep it

Enquiries that do not become bookings are deleted after six months. Bookings are deleted after twelve months; private hire contracts and invoices are kept for seven years; CCTV for 31 days; invoices for seven years. Reminder lists are kept until you ask to be removed.

Who sees it

Our front-of-house team and the owner, our accountant, the booking and card payment providers (your name, booking and card details only), and the text service that sends your booking confirmation (name, phone number and appointment time only). The booking form is delivered by email to our office; we do not use third-party form services or marketing platforms. We do not sell or share your details for marketing.

Cookies

This site sets a single session cookie to limit repeat form submissions. It contains no personal data and expires when you close the browser. The embedded map on the contact and areas pages is served by Google and may set cookies under Google's own policy.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it. Email bookings@brynbistro.co.uk or write to the address above. You can also complain to the Information Commissioner's Office at ico.org.uk.