Who we are
This policy explains what personal information The Bunbury Arms collects through this website, why we collect it, how long we keep it and what your rights are. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The Bunbury Arms, Ixworth Road, Great Barton, Bury St Edmunds IP31 2NX. We are the data controller for the information described in this policy. You can contact us about anything in it at enquiries@thebunburyarms.com.
Information we collect and why
Enquiries and bookings
When you use the contact, bookings, Christmas or private hire forms we collect your name, phone number, email address, and the details you give us about your booking or enquiry, such as the date, time, party size, occasion and any dietary or access requirements. We use this to respond to you, to make and manage your reservation and to prepare for your visit. The legal basis is that it is necessary to take steps at your request before entering into a contract with you, and our legitimate interest in running the pub and answering enquiries. Dietary information may reveal health or religious details; we only use it to cater for you safely and we ask for it with your consent.
Job applications
If you apply through the Join the Team form we collect your name, contact details, the role you are interested in, your availability, anything you tell us about yourself and, if you attach one, your CV. We use this to consider your application and contact you about it. The legal basis is that it is necessary to take steps at your request before entering into an employment contract, and our legitimate interest in recruiting staff.
Email and telephone
If you email or call us we keep a record of the correspondence so we can deal with your query.
Website analytics
We use Google Analytics to understand how people use this website: which pages are visited, how visitors arrive, roughly where they are and what device they use. Google Analytics sets cookies on your device and collects a pseudonymous identifier, your IP address (which Google truncates and does not store), and information about your browser and the pages you view. We do not use it to identify individuals. Analytics cookies are only set if you accept them in the cookie notice; you can change your choice at any time via the cookie settings link in the footer. You can also opt out of Google Analytics in all websites by installing Google’s browser add-on. The legal basis is your consent.
Google Search Console
We use Google Search Console to monitor how the site appears in Google search results and to find technical problems. Search Console gives us aggregated information about search queries and clicks; it does not provide us with any information that identifies you.
Embedded map
The Contact page includes a map provided by Google Maps. When that page loads, your browser connects to Google, which may set its own cookies and collect your IP address and usage information under Google’s privacy policy.
Server logs
Our web host automatically records your IP address, browser type, the pages requested and the time of each request in server logs. These are used only for security, to diagnose problems and to protect the site against attack. The legal basis is our legitimate interest in keeping the site secure.
Cookies
Cookies are small text files stored on your device. This website uses:
- Essential cookies, set by WordPress to make the site work (for example, remembering a form you have just submitted). These do not need your consent.
- Analytics cookies (
_ga,_ga_*), set by Google Analytics with your consent, which expire after up to two years. - Third-party cookies set by Google when you view the embedded map.
You can block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site working.
Who we share your information with
We do not sell your information. We share it only with services that help us run the website and the pub:
- Our web hosting provider, which stores the website and its data.
- Our email provider, which delivers form submissions and correspondence to us.
- Google (Analytics, Search Console and Maps) as described above. Google may process this information outside the UK; it does so under the UK International Data Transfer Agreement and the UK Extension to the EU–US Data Privacy Framework.
- [If applicable: our table-booking provider, which processes reservations on our behalf.]
We may also disclose information where the law requires it, for example to the police or a regulator.
How long we keep it
- Booking and enquiry details: up to 12 months after your visit or last contact, then deleted, unless needed for a complaint or dispute.
- Job applications: up to 6 months after the vacancy closes, unless you ask us to keep your details for future roles. If you are hired, your application becomes part of your employment record.
- Analytics data: retained by Google Analytics for 14 months.
- Server logs: typically 30 days.
Your rights
Under UK data protection law you have the right to ask us for a copy of the personal information we hold about you, to have inaccurate information corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time. To exercise any of these rights, email enquiries@thebunburyarms.com. We will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we would welcome the chance to resolve it with you first.
Security
The website is served over HTTPS so information you send through our forms is encrypted in transit. Access to form submissions and email is limited to staff who need it.
Children
This website is not aimed at children and we do not knowingly collect information from anyone under 16. If you book a table for a group that includes children we only collect what we need to seat and cater for them.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed, and the current version will always be published on this page.
