Privacy Policy

This policy explains what personal information L&B Restaurant Group collects, why, and what you can do about it. We've tried to keep it short and plain. If anything's unclear, just ask.

1. Who we are

L&B Restaurant Group ("L&B", "we", "us") runs The Pullman, The Ship Inn, The Harbour Inn, The Cat & Fiddle, Panataria, Luben and The London & Paris Hotel in Folkestone and Sandgate, Kent.

Legal entity name: [CONFIRM full registered company name, e.g. "… Ltd"]
Company number: [CONFIRM]
Registered office: Innovation House, Innovation Way, Sandwich, Kent, CT13 9FF
Contact for privacy questions: hello@landb-restaurants.co.uk
ICO registration number: [CONFIRM – most businesses that process personal data must pay the ICO data protection fee; add the number if registered]

We are the "controller" of your personal information, which means we decide how it's used. We have not appointed a Data Protection Officer [CONFIRM]; privacy questions go to the email above.

2. What we collect

Depending on how you deal with us, we may collect:

Contact details: your name, email address and phone number.
Table bookings: date, time, party size, the venue, and any notes you add, such as dietary needs, allergies or a special occasion.
Hotel stays: your name, contact details, stay dates, room, number of guests, any requests, and the payment details needed to secure the booking (taken by our booking engine provider, not stored by us on this website).
Loyalty and newsletter: your account details, points, rewards, visits and whether you've agreed to hear from us.
Enquiries: what you tell us when you email us or fill in a form, for example about private hire or events.
Job applications: your CV, work history and anything else you send us. [CONFIRM whether applications are taken through the site or by email]
Website use: if you allow analytics cookies, information about how you use our site, such as pages visited, device and browser type, and approximate location. See our Cookie Policy.

Health information: allergy and dietary information can count as health data, which the law treats as more sensitive. We only use it to keep you safe when you eat or stay with us, and only share it with the team serving you.

[CONFIRM: Do any venues use CCTV? If yes, add: "Some of our venues use CCTV for the safety and security of guests and staff. Signs show where it's in use."]

[CONFIRM: Do any venues offer guest Wi-Fi that collects details (e.g. an email to log in)? If yes, add a section.]

We don't take card payments on this website. Payments in our venues are handled by our till and card payment providers, and we don't keep your full card details. [CONFIRM]

3. Why we use it, and our legal reasons

The law requires us to tell you the "lawful basis" for each use.

What we do	Why	Lawful basis
Take and manage table bookings and hotel stays	To give you the booking you asked for	Contract
Note allergies or dietary needs	To keep you safe	Your explicit consent, given when you tell us
Run your loyalty account	To give you points and rewards	Contract
Send newsletters and offers by email or text	To keep you up to date, only if you've agreed	Consent (or, for existing customers, the "soft opt-in" where you can always opt out) [CONFIRM which applies to Leat sign-ups]
Answer enquiries	To reply to you and plan your event	Legitimate interests (or contract, if you go ahead with a booking)
Website analytics	To understand which pages are useful and improve the site	Consent (via the cookie banner)
Consider job applications	To recruit staff	Legitimate interests, and steps before a contract
Keep records for tax, licensing and the law	To meet legal duties	Legal obligation
Deal with complaints, claims or safety incidents	To protect guests, staff and the business	Legitimate interests

You don't have to join our loyalty scheme to eat or stay with us. You can withdraw consent at any time, for example by unsubscribing or changing your cookie settings. That won't affect anything we did before.

We don't sell your personal information. We share it only with service providers who help us run the business, and only what they need:

Wix – hosts our website, forms and cookie consent tool.
OpenTable – handles restaurant table bookings. OpenTable is also a controller of the details you give it; see its own privacy notice.
SHR – runs the hotel booking engine for The London & Paris Hotel (secure.londonandparishotel.co.uk).
Leat (formerly Piggy) – runs our loyalty scheme and newsletter.
Google (Google Analytics 4) – website analytics, only if you accept analytics cookies.
Restaurant Guru – shows a review badge on our site.
[CONFIRM other providers: till/card payments, accountants, email provider (Zoho), recruitment tools, IT support]

We may also share information where the law requires it, for example with HMRC, the police or a licensing authority, or if the business is ever sold.

5. If your data goes outside the UK

Some providers (for example Wix, Google and OpenTable) may store or access data outside the UK, including in the US and EU. Where they do, we rely on safeguards recognised under UK law, such as UK adequacy regulations (including the UK–US "data bridge" for certified companies) or the ICO's International Data Transfer Agreement or Addendum. [CONFIRM for each provider; a copy of the relevant safeguards is available on request]

6. How long we keep it

We keep personal information only as long as we need it. [CONFIRM all of the periods below – these are suggestions, not current practice]

Booking records: [CONFIRM, e.g. 2 years after your visit]
Hotel stay records: [CONFIRM, e.g. 6 years, for tax]
Financial and tax records: 6 years, as the law requires [CONFIRM]
Loyalty account: while it's open, then [CONFIRM] after it closes or goes inactive
Marketing list: until you unsubscribe (we keep a note that you opted out so we don't contact you again)
Unsuccessful job applications: [CONFIRM, e.g. 6 months]
Analytics data: [CONFIRM GA4 retention setting, e.g. 14 months]
Enquiries: [CONFIRM, e.g. 1 year]

7. Your rights

Under UK data protection law you have the right to:

ask for a copy of your personal information;
ask us to correct it;
ask us to delete it;
ask us to limit how we use it;
object to us using it, including for direct marketing (we'll always stop marketing if you ask);
ask us to move it to another organisation (where it's based on consent or contract);
withdraw your consent at any time.

To use any of these, email hello@landb-restaurants.co.uk. We'll reply within one month. It's free in most cases.

We don't make decisions about you based solely on automated processing.

8. Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

9. Children

Our website and loyalty scheme are not aimed at children, and we don't knowingly collect children's information online. [CONFIRM minimum age for Leat sign-up, e.g. 18, since it may include alcohol offers] Children are of course welcome in our venues with a parent or guardian, who makes any booking.

10. Keeping it safe

We use trusted providers and limit access to people who need it. [CONFIRM any further measures]

11. Changes

We'll update this policy if what we do changes. The date at the top shows when it last changed. If the change is significant, we'll let you know.