Privacy Policy

1. Who we are

Poke The Bear operates the restaurant and website at pokethebear.uk.com. Our premises are located at 523 Old York Road, Wandsworth Town, London SW18 1TG, United Kingdom.

We are the data controller for the personal information collected through this website and in connection with our services. If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. What data we collect

We may collect the following categories of personal data:

• Contact information — name, email address, phone number, when you contact us directly.
• Usage data — pages visited, time spent on site, browser type, device type, and IP address, collected automatically via analytics tools.
• Communications — the content of any messages or enquiries you send us.
• Cookies — see Section 7 below.

We do not collect payment card data directly. Any payments are processed by third-party providers who are responsible for their own data security.

3. How we use your data

We use your personal data for the following purposes:

• To respond to your enquiries and provide customer support.
• To improve our website and services based on usage patterns.
• To send you information you have requested (e.g. updates or promotions), where you have given consent.
• To comply with our legal obligations.

4. Legal basis for processing (UK GDPR)

We process your personal data on the following legal bases:

• Legitimate interests — to operate and improve our website and business.
• Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to process data by law.

5. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Contact enquiries are typically retained for up to 2 years. Analytics data is retained in accordance with the terms of the analytics provider.

6. Sharing your data

We do not sell your personal data. We may share it with trusted third-party service providers who assist us in operating our website (e.g. hosting, analytics, email delivery), all of whom are contractually required to protect your data and use it only for the purposes we specify.

We may disclose your data if required to do so by law or in response to valid requests by public authorities.

7. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and to help us understand how visitors use our site.

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with our site (e.g. Google Analytics). These are only set with your consent.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the site.

8. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data in certain circumstances.
• Restriction — ask us to restrict processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-party links

Our website may contain links to third-party websites (e.g. Google Maps, Google Business Profile). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to this policy

We may update this Privacy Policy from time to time. The Last updated date at the top of this page will reflect any changes. We encourage you to review this page periodically.