The Lamplighter Dining & Rooms (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains what personal information we collect about you, how we use it, who we share it with, and what rights you have under UK data protection law.

This policy applies to information we collect through our website, by telephone, by email, in person at the venue, and through third party booking and reservation platforms.

1. Who we are

The Lamplighter Dining & Rooms is the trading name of The Lamplighter Dining Rooms Limited, a company registered in England and Wales under company number 09826796.

Registered office: First Floor East Old Bridge Mills, Stramongate, Kendal, Cumbria, United Kingdom, LA9 4UB.

Trading address: High Street, Windermere, Cumbria, LA23 1AF.

We are the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your information, please contact us using the details set out in section 12.

2. The information we collect

Depending on how you interact with us, we may collect the following categories of personal information:

Information you give us directly

• Identity and contact details: full name, postal address, email address, telephone number.
• Booking information for rooms: arrival and departure dates, number of guests, room preferences, and special requests.
• Booking information for dining: date and time of reservation, party size, table preferences, and special occasions.
• Dietary requirements, allergies, and accessibility needs.
• Payment information: card details and billing address. Card details are processed by our payment provider and we do not store full card numbers on our systems.
• Correspondence: messages, enquiries, feedback, and reviews you send to us by email, social media, contact forms, or through booking platforms.
• Marketing preferences and consents.

Information we collect automatically

• Technical information: IP address, browser type and version, device information, operating system, and approximate location.
• Usage information: pages visited, time spent on pages, links clicked, referring website, and similar analytics data.
• Cookie data and similar tracking technologies (see our Cookie Policy for full details).

Information we receive from third parties

• Booking and reservation data passed to us by platforms.
• Reviews and feedback published on platforms such as TripAdvisor, Google, and Trustpilot.
• Information from social media platforms when you interact with our pages or content.
• Aggregated analytics data from advertising and analytics partners.

Special category data

We treat dietary information, allergy information, and accessibility requirements with extra care. We collect this information only where you choose to provide it, so that we can prepare for your visit safely and comfortably. We rely on your explicit consent to process this information and we use it only for the purpose for which it was provided.

3. How we use your information and our lawful basis

UK data protection law requires us to have a lawful basis for processing your personal information. The basis we rely on depends on the purpose, as set out below.

To take and manage your booking (Contract)

When you make a reservation for dining or accommodation, we use your information to confirm the booking, communicate with you about it, take payment, manage your stay or visit, and handle any changes or cancellations.

To respond to enquiries (Legitimate interests)

When you contact us through our website, by email, by telephone, or through social media, we use your information to respond and to keep records of our communication.

To run and improve our business (Legitimate interests)

• Operating the venue and providing food, drink, and accommodation to a high standard.
• Improving the website, including analytics on how visitors use the site.
• Training our team and reviewing service quality.
• Detecting, preventing, and responding to fraud or misuse.
• Maintaining security of our premises through CCTV (where in operation, signage is displayed on site).

To send marketing communications (Consent or legitimate interests)

Where you have given us consent, or where you are an existing customer and applicable rules permit, we may send you news, offers, events, and updates by email. You can opt out at any time using the unsubscribe link in any of our emails or by contacting us.

To meet our legal obligations (Legal obligation)

We may need to use your information to comply with tax, accounting, food safety, licensing, health and safety, and other legal requirements.

To establish, exercise, or defend legal claims (Legitimate interests)

Where necessary, we may use your information in connection with legal proceedings, complaints, insurance claims, or regulatory matters.

4. Marketing communications

If you have signed up to our mailing list, made a previous booking with us, or otherwise consented, we may send you news, special offers, seasonal menus, events, and other updates by email. You will only receive marketing if you have opted in or where the soft opt-in for existing customers applies under UK rules.

You can withdraw your consent or unsubscribe at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email.
• Emailing us at info@lamplighterdiningrooms.com with the subject line “Unsubscribe”.
• Writing to us at the address set out in section 12.

Unsubscribing from marketing will not affect transactional messages relating to bookings you have made with us.

5. Who we share your information with

We do not sell your personal information. We share it only with trusted third parties who help us run the business, and only to the extent necessary. These include:

• Reservation and booking platforms (for example Booking.com, OpenTable, ResDiary, SevenRooms, Expedia, or any platform you use to book).
• Payment service providers and card processors (for example Stripe, SumUp, Worldpay, or our card terminal provider).
• IT and hosting providers, including our website host and email provider.
• Email marketing platforms (for example Mailchimp, Brevo, or similar).
• Analytics and advertising providers (for example Google, Meta), as set out in our Cookie Policy.
• Professional advisers including our accountants, auditors, lawyers, insurers, and bankers.
• Regulatory and law enforcement bodies where we are required to share information by law.
• A buyer or successor in the event of a sale, merger, restructuring, or transfer of our business or assets.

All third parties we use are contractually required to safeguard your information and to process it only in accordance with our instructions and applicable law.

6. International transfers

Some of our service providers are based outside the UK. Where we transfer personal information to a country that has not been deemed to provide an adequate level of protection by the UK Government, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can contact us for more details of the safeguards we use.

7. How long we keep your information

We keep your personal information only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, tax, or reporting requirements. Typical retention periods are:

• Booking records and correspondence: up to 7 years after the last interaction, for tax and accounting purposes.
• Marketing data: until you unsubscribe or for 3 years of inactivity, whichever is earlier.
• CCTV footage (where applicable): typically 30 days, unless required for an investigation.
• Website analytics data: in line with the retention periods set by our analytics provider.

Once we no longer need your personal information, we securely delete or anonymise it.

8. How we protect your information

We take the security of your personal information seriously and use a range of technical and organisational measures to protect it. These include encrypted website connections (HTTPS), access controls, secure storage, staff training, and supplier due diligence. Card payments are handled by PCI DSS compliant providers.

No system can be guaranteed completely secure. If you believe your information has been compromised, please contact us immediately.

9. Your rights

Under UK data protection law, you have the following rights, free of charge in most cases:

• Access: to request a copy of the personal information we hold about you.
• Rectification: to ask us to correct information you believe is inaccurate or incomplete.
• Erasure: to ask us to delete information where there is no good reason for us to continue holding it.
• Restriction: to ask us to suspend the processing of your information in certain circumstances.
• Portability: to ask us to transfer the information you have provided to you or to another organisation in a structured, commonly used format.
• Objection: to object to our processing where we are relying on legitimate interests, including for direct marketing.
• Withdraw consent: where we are relying on consent, you can withdraw it at any time.
• Automated decisions: to ask not to be subject to a decision based solely on automated processing that has a significant effect on you. We do not currently use such automated decision making.

To exercise any of these rights, please contact us using the details in section 12. We may need to verify your identity before responding. We will respond within one calendar month, although we may extend this by up to two further months for complex requests.

10. How to complain

If you have a concern about how we have used your personal information, please contact us first so that we can try to put things right. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with the revised date at the top. We encourage you to review this page periodically.

12. Contact us

If you have any questions about this Privacy Policy or our use of your personal information, please contact us:

• Email: info@lamplighterdiningrooms.com
• Telephone: 015394 43547
• Post: The Lamplighter Dining & Rooms, The Lamplighter Dining & Rooms is High Street, Windermere, Cumbria, LA23 1AF.