This Privacy Policy explains how Royal Cafe Westminster collects, uses, shares and protects your personal data when you visit royalwestminster.com (the "Site"). We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller responsible for your personal data is Royal Cafe Westminster, 53 Vincent Square, Westminster, London SW1P 2NR, United Kingdom. For any privacy matter you can contact us at [email protected].
2. Categories of Data We Collect
This Site is primarily informational and does not require you to create an account. We may collect:
- Contact data you choose to send us — such as your name and email address — when you email us;
- Technical data — such as your IP address, browser type, device information and pages viewed, collected automatically through essential cookies and server logs;
- Approximate location derived from your IP address or, if you use the embedded map, as handled by that map provider.
We do not knowingly collect payment data through this Site, as no payments are taken online.
3. Purposes of Processing & Legal Basis
We process personal data for the following purposes and on the following legal bases under UK GDPR:
- To operate and secure the Site — legal basis: our legitimate interests in running a safe, functional website;
- To respond to your enquiries when you email us — legal basis: our legitimate interests, and steps taken at your request prior to a possible contract;
- To comply with legal obligations — legal basis: compliance with a legal obligation.
4. Third-Party Sharing & Disclosure
We do not sell your personal data. We may share limited data with service providers who help us run the Site, namely our web hosting provider and Google Maps (operated by Google), which provides the embedded map on our Find Us page. These third parties process data on our behalf or under their own policies. We may also disclose data where required by law.
5. International Data Transfers
Where a service provider processes data outside the United Kingdom, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses (an international data transfer agreement) to protect your data.
6. Retention
We retain email correspondence for up to 24 months after our last contact with you, unless a longer period is required by law. Server logs and essential cookie data are retained for up to 12 months. We keep personal data no longer than necessary for the purposes described above.
7. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following data subject rights: the right to access your data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object to processing, and the right to data portability. Where processing is based on consent, you may withdraw that consent at any time. To exercise any of these rights, email us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.
8. Children's Data
The Site is not directed at children. In line with COPPA and UK data protection law, we do not knowingly collect personal data from children under the age of 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.
9. Security Measures
We apply appropriate security measures to protect your personal data against loss, misuse and unauthorised access. We protect data in transit using encryption (HTTPS) and we safeguard our systems with access controls and regular review. No method of transmission over the internet is completely secure, but we work to keep your data safe.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always the one published on this page, with the "Last Updated" date above. Material changes will be reflected here.
11. Contact
For any question about this Policy or your personal data, email [email protected] or write to Royal Cafe Westminster, 53 Vincent Square, Westminster, London SW1P 2NR. See also our Cookie Policy and Terms of Use.