Privacy Policy - Tay Square Bar & Kitchen Dundee

Privacy Policy – Tay Square Bar & Kitchen

Effective Date: 06/04/26

Tay Square Bar & Kitchen (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

For the purpose of applicable data protection laws, Tay Square Bar & Kitchen is the Data Controller of your personal data.

Contact Details:

Email: bookings@taysquarebarandkitchen.co.uk

Address: 10 South Tay St, Dundee, DD1 1PA

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Name, title
Contact Data: Email address, telephone number
Transaction Data: Booking details, payment information
Technical Data: IP address, browser type, website usage
CCTV Data: Recorded images for safety and crime prevention

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Contractual Necessity – to fulfil reservations and services you request
Legal Obligation – to comply with legal or regulatory requirements
Legitimate Interests – to operate and improve our business, ensure security, and prevent fraud
Consent – for marketing communications (where applicable)

4. How We Use Your Data

We use your personal data to:

Manage bookings and reservations
Process payments and prevent fraud
Communicate with you regarding enquiries or bookings
Improve our services and customer experience
Send marketing communications (where consent has been provided)
Maintain the safety and security of our premises

5. Data Sharing

We may share your personal data with trusted third parties, including:

Payment service providers
Reservation and booking platforms
IT and system administration providers
Professional advisers (legal, accounting)
Law enforcement or regulatory authorities where required

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

6. International Transfers

We do not routinely transfer personal data outside the UK.

Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved under UK GDPR.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

Legal, accounting, or reporting requirements
Resolving disputes and enforcing agreements

CCTV footage is typically retained for a limited period unless required for investigation purposes.

8. Data Security

We have implemented appropriate technical and organisational measures to safeguard your personal data against accidental loss, unauthorised access, alteration, or disclosure.

9. Your Legal Rights

Under UK GDPR, you have the following rights:

Right of Access – to request a copy of your personal data
Right to Rectification – to correct inaccurate or incomplete data
Right to Erasure – to request deletion of your data
Right to Restrict Processing
Right to Data Portability
Right to Object to processing based on legitimate interests
Right to Withdraw Consent at any time (where processing is based on consent)

To exercise your rights, contact us at:

Email: bookings@taysquarebarandkitchen.co.uk

10. Complaints

You have the right to lodge a complaint with the supervisory authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

11. Cookies

Our website may use cookies to distinguish you from other users and improve your browsing experience. You can manage cookie preferences via your browser settings.

12. CCTV

CCTV is in operation on our premises for the purposes of crime prevention, public safety, and the protection of staff and customers. This processing is carried out under our legitimate interests.