Privacy Policy

Last Updated: 21/10/25

This Privacy Policy explains how BANK Bar & Brasserie (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website or interact with our services. We comply with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who we are

We are the data controller for personal data collected through this website unless stated otherwise.

2. What information we collect

• Contact details: name, email address, phone number, and any information you submit via forms or the booking system.
• Booking information: date, time, party size, notes, and preferences entered through the TOGO Booking System.
• Marketing preferences: your consent choices for email and digital marketing.
• Website analytics and technical data: IP address, device, browser type, pages viewed, time on page, and interactions collected via cookies and Google Analytics.
• Email engagement data: opens, clicks, and preferences if you join our Mailchimp list.
• Social media data: limited data when you interact with our Facebook and Instagram assets or when Meta technologies record visits to our site. See section 6.

3. How we collect your data

• Directly from you when you make a booking, contact us, or subscribe to our newsletter.
• Automatically through cookies, pixels, and similar technologies.
• Via integrations with Google Analytics, Mailchimp, Meta technologies, and the TOGO Booking System.

4. How we use your data

• To manage and confirm bookings made through the TOGO Booking System.
• To respond to enquiries and provide customer service.
• To send marketing and promotional communications if you have opted in.
• To analyse website performance and improve our services.
• To meet legal, regulatory, and accounting obligations.

5. Marketing communications

If you opt in, we will send news, offers, and event information by email using Mailchimp. You can unsubscribe at any time using the link in our emails or by contacting us. We do not sell or rent your data to third parties for their own marketing.

6. Cookies, analytics, and Facebook technologies

Google Analytics

We use Google Analytics to measure traffic and usage. Google may process anonymised or pseudonymised data on our behalf. For details see Google Privacy Policy. You can opt out with the Google Analytics Opt-out Add-on or by adjusting cookie settings in your browser.

Facebook and Instagram (Meta) including Meta Pixel

We may use Meta technologies such as the Meta Pixel to measure advertising effectiveness, create audiences, and show relevant ads. When you visit our site, the Pixel may record information such as your IP address, device, and actions taken on our pages. This allows us to understand conversions and improve our marketing.

• Meta acts as an independent controller for its own processing. See the Meta Privacy Policy.
• You can manage your ad preferences at facebook.com/adpreferences and Instagram Privacy and Security.
• You can control cookies and tracking through your browser settings and device settings. Blocking cookies may limit some features.

Cookies

Cookies help us provide core site functions, remember preferences, and analyse performance. You can accept, reject, or control cookies in your browser. For essential cookies we rely on legitimate interests to run the site securely and effectively.

7. The TOGO Booking System

Reservations made via TOGO are processed securely on our behalf. TOGO acts as our data processor and follows UK GDPR requirements. We use booking data only to manage reservations, provide service, and understand demand.

8. Mailchimp

When you subscribe to our newsletter, your data is processed by Mailchimp as our processor. We use it to send emails, manage preferences, and measure engagement. See the Mailchimp Privacy Policy. You can unsubscribe at any time.

9. Lawful bases for processing

• Contract: to provide bookings and related services.
• Consent: email marketing and non-essential cookies. You may withdraw consent at any time.
• Legitimate interests: site security, fraud prevention, basic analytics, and service improvement balanced against your rights.
• Legal obligation: record keeping and compliance duties.

10. Sharing your data

We share data with trusted providers who act on our instructions, including TOGO, Google, Mailchimp, and hosting providers. They must keep your data secure and may not use it for their own purposes. We also share data where required by law or to protect our rights.

11. International transfers

Some providers may process data outside the UK or EEA. Where this occurs, we rely on adequacy regulations or Standard Contractual Clauses and additional safeguards to protect your information.

12. How we store and protect your data

We use appropriate technical and organisational measures including access controls, encryption in transit where suitable, and staff confidentiality obligations. Only authorised personnel can access personal data.

13. Data retention

• Booking records are kept for as long as needed to provide the service and meet legal requirements.
• Marketing data is kept until you unsubscribe or request deletion.
• Analytics data is kept according to the retention settings of our tools.

14. Your rights

You have the right to access, correct, delete, and restrict your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at hello@thebankglossop.com.

You also have the right to complain to the Information Commissioner’s Office. See ico.org.uk/make-a-complaint.

15. Children

Our services are not directed to children. If you believe a child has provided personal data, contact us and we will delete it where required.

16. Third party links

Our website may link to other sites. We are not responsible for their privacy practices. Please review their policies before submitting data.

17. Changes to this policy

We may update this policy from time to time. Changes will be posted here with a new revision date.

18. Contact us