Privacy Notice

1. What we collect

• name, email, phone and booking details
• gift voucher buyer and recipient names, emails and personal messages
• newsletter email if you sign up
• messages you send us
• basic website usage data via cookies (with consent)

2. Why and lawful basis

• To take bookings and sell, send and redeem gift vouchers (contract)
• To answer enquiries (legitimate interests)
• To send the newsletter (consent, unsubscribe anytime)
• Analytics cookies (consent)
• Keeping financial records (legal obligation)

3. Payments

Card payments are processed by Stripe. We never see or store your full card details.

4. Who we share with

Only service providers that help run the site and our services, such as Stripe (payments), our website and database hosting, our email sending provider, and our newsletter provider. We do not sell your data.

5. International transfers

Some providers may process data outside the UK, under appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

6. How long we keep it

• gift voucher records for the 12-month validity plus up to 6 years for accounting
• booking data [retention period]
• newsletter data until you unsubscribe

7. Your rights

You have the right to access, correction, deletion, restriction, objection, data portability, and withdrawing consent. Email hello@cottorestaurant.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

We use essential cookies to run the site, and analytics cookies only if you accept them. You can change your choice anytime.

9. Changes

Last updated [date].