Privacy policy.

Oriole Cafe Privacy Policy

**Last updated: 27 October 2025**

This Privacy Policy describes how Oriole Cafe ("we", "us", or "our") collects, uses and protects any personal data that you provide when you use our website.

# 1. Who We Are

Oriole Cafe is a UK‑based hospitality business located in Oriole Cafe, Spitfire Ground St Lawrence, Canterbury CT1 3NZ. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

# 2. Personal Data We Collect

We may collect and process the following data:

* Contact details such as name, email address and telephone number

* Reservation and order information

* Payment details (processed securely by third‑party providers)

* Technical data such as IP address, browser type and cookies

# 3. How We Use Your Data

We use your data to:

* Process bookings and orders

* Respond to enquiries and provide customer support

* Send service‑related updates or marketing (with consent)

* Improve and secure our website

* Comply with legal obligations

# 4. Legal Bases for Processing

We process personal data on the following legal bases under UK GDPR:

* **Contract**: to fulfil reservations and orders

* **Consent**: for optional marketing communications

* **Legal obligation**: for tax or regulatory requirements

* **Legitimate interests**: to operate and improve our services

# 5. Data Sharing

We may share your data with:

* Payment processors and service providers involved in fulfilling your orders (we do not use external booking platforms)

* IT and website hosting providers

* Professional advisers (e.g. accountants)

We do not sell your personal data.

# 6. International Transfers

If data is transferred outside the UK/EEA, we ensure appropriate safeguards such as UK/EEA adequacy decisions or standard contractual clauses.

# 7. Data Retention

We retain personal data only as long as necessary for the purposes collected, or as required by law (e.g. tax records).

# 8. Your Rights

Under UK data protection law you have the right to:

* Access, correct or delete your personal data

* Object to or restrict processing

* Withdraw consent at any time

* Lodge a complaint with the Information Commissioner’s Office (ICO)

# 9. Cookies

Our website uses cookies for essential functionality and analytics. You can manage cookie preferences via your browser settings.

# 10. Security

We implement appropriate technical and organisational security measures to protect personal data from unauthorised access or disclosure.

# 11. Contact Us

For any privacy queries or to exercise your rights:

**Email:** info@oriolecafe.co.uk

**Address:** Oriole Cafe, Spitfire Ground St Lawrence, Canterbury CT1 3NZ

# 12. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

---

This policy is intended to meet the requirements of the UK GDPR and the Data Protection Act 2018.