PRIVACY POLICY | The Old Mill

Last Updated: March 03, 2025

Welcome to The Old Mill Salisbury!

We are committed to protecting your privacy and ensuring your personal data is handled responsibly. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Taste The World Operating The Old Mill Salisbury
Town Path, Harnham, Salisbury SP2 8EU
Email: theoldmill@tastetheworld.uk
Phone: 01722 656999

We are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following types of personal data:

Identity Data: Name, title, date of birth (if provided).
Contact Data: Email address, phone number, postal address. (if provided).
Transaction Data: Details of payments or bookings made with us.
Technical Data: IP address, browser type, and device information when you visit our website.
Usage Data: Information about how you use our website or services.
Marketing Data: Your preferences for receiving marketing from us.

We do not knowingly collect data from individuals under 16 without parental consent.

3. How We Collect Your Data

We collect data when you:

Visit our website or use our online forms.
Make a booking.
Sign up for newsletters or marketing updates.
Contact us via email, phone, or in person.
Interact with us on social media platforms.

4. How We Use Your Data

We use your data to:

Process bookings or payments.
Provide you with services or information you request.
Improve our website and customer experience.
Send you marketing communications (with your consent).
Comply with legal obligations, such as tax or health and safety regulations.

Our lawful bases for processing under UK GDPR include:

Consent: Where you’ve agreed (e.g., for marketing).
Contract: To fulfill orders or bookings.
Legal Obligation: To meet regulatory requirements.
Legitimate Interests: To operate and improve our business, provided your rights are not overridden.

5. Sharing Your Data

We may share your data with:

Service providers (e.g., payment processors, IT support) acting as data processors under strict agreements.
Legal authorities, if required by law.
Third parties in the event of a business sale or merger.

We do not transfer your data outside the UK unless adequate safeguards (e.g., UK International Data Transfer Agreements) are in place.

6. Data Security

We use appropriate technical and organizational measures to protect your data, such as encryption, secure servers, and staff training. However, no system is completely secure, and we cannot guarantee absolute security.

7. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes outlined above, or as required by law. For example:

Transaction data: 6 years for tax purposes.
Marketing data: Until you unsubscribe or after 2 years of inactivity.

Data is securely deleted or anonymized when no longer needed.

8. Your Rights

Under UK GDPR, you have the right to:

Access: Request a copy of your data.
Rectification: Correct inaccurate data.
Erasure: Ask us to delete your data (the “right to be forgotten”).
Restriction: Limit how we use your data.
Objection: Object to processing (e.g., for marketing).
Data Portability: Receive your data in a usable format.
Withdraw Consent: Opt out where consent was the basis for processing.

To exercise these rights, contact us at jonny@tastetheworld.uk. We’ll respond within 1 month.

9. Third-Party Links

Our website may include links to third-party sites. We are not responsible for their privacy practices - please review their policies separately.

10. Complaints

If you’re unhappy with how we handle your data, please contact us first. You can also lodge a complaint with the Information Commissioner’s Office (ICO):
ICO Website: www.ico.org.uk
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this policy to reflect legal or operational changes. Check back regularly for the latest version.