Privacy Policy

This policy covers information collected through this website and by the restaurant. "Marrow & Vine", "we" and "us" mean the restaurant on Cotham Hill in Bristol. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

We are a restaurant, not an advertising business. We collect what a booking needs and very little else, and we do not sell information to anyone.

What we collect

What you give us. When you book a table, join the mailing list or send us a message, you give us some mix of your name, phone number, email address, the size and time of the booking, and anything you tell us about allergies or dietary requirements.

Allergy and dietary information. This counts as health data, so we treat it carefully. It is written on the booking, used by the kitchen for that service, and not kept once the booking has passed unless you are a regular and have asked us to remember it.

What the site records on its own. Like most websites, ours logs browser and device type, a rough location derived from an IP address, and which pages were opened. It tells us whether the menu is readable on a phone. It does not tell us who you are.

Why we are allowed to hold it

We hold booking details because we need them to perform the booking you asked for. We hold mailing list details because you consented, and that consent can be withdrawn at any time. We hold allergy information with your explicit consent, given so we can cook for you safely.

What we do with it

• Hold your table and call you if something about the booking is unclear
• Cook around your allergies and tell the kitchen what it needs to know
• Answer the messages you send us
• Send the monthly email, if you asked for it
• Keep the site working and fix what breaks

We do not build profiles, we do not run your details through anything that makes automated decisions about you, and we do not pass anything to advertisers.

Who else sees it

A small number of companies handle pieces of this, and each only gets what its piece needs: the company that hosts this website, and the email service that sends the monthly message, which receives an email address and nothing more. We also disclose information where the law requires it, which in practice means a valid court order or an environmental health request.

Cookies

The site sets no advertising or tracking cookies. It uses only what is needed to serve the pages and count visits in aggregate.

How long we keep it

Booking records are kept for twelve months so we can recognise a returning guest, then deleted. Mailing list details are kept until you unsubscribe. Financial records are kept for six years because HMRC requires it.

Your rights

You can ask to see what we hold, have it corrected, have it deleted, or object to us holding it at all. Email the address on the contact page and we will deal with it within one month. Every mailing has an unsubscribe link and it works immediately. If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner's Office.

Children

The site is not aimed at children and we do not knowingly collect their information. Children are very welcome in the restaurant; we just do not need their data to feed them.

Changes

When this policy changes the date at the top changes with it. If a change is significant we will say so on the site.

Contact

Questions about any of this go to the email address or phone number on the contact page, or you can ask in person.