Privacy Policy

This policy explains how The Kervan Restaurant(“we”, “us”, “our”) handles personal data collected through this website, thekervan.co.uk, and your rights under the UK GDPR and the Data Protection Act 2018.

Who we are

The Kervan Restaurant is the data controller for personal data collected through this website. You can contact us at:

• 41 High Street, Stourbridge, West Midlands DY8 1DA
• Telephone: 01384 283015
• Email: [email protected]

What data we collect

This is a brochure website. We do not operate online ordering, online booking or account logins here, and we do not ask you to submit forms containing personal data on the site. We collect:

• Analytics data — only if you accept analytics cookies. This includes pages viewed, approximate location (country/ region), device and browser type, and how you reached the site. See our Cookie Policy for the full list.
• Technical/security logs — our hosting provider automatically records limited technical information (such as IP address and request time) to keep the site secure and available.

If you choose to contact us by telephone or WhatsApp, any personal details you share (for example your name and booking request) are used only to handle your enquiry.

How we use your data and our legal basis

• To understand and improve the site (analytics) — legal basis: your consent, which you can withdraw at any time via Cookie Settings in the footer.
• To keep the site secure and running (technical logs) — legal basis: our legitimate interests in the security and integrity of the website.
• To respond to enquiries you make by phone or WhatsApp — legal basis: our legitimate interests in dealing with your request.

Cookies

We use essential cookies to make the site work and, with your consent, analytics cookies. No non-essential cookies are set until you accept them. For details and how to change your choice, see our Cookie Policy.

Who we share data with

We do not sell your personal data. We use trusted service providers who process data on our behalf:

• Cloudflare, Inc. — website hosting, content delivery and security.
• Google— Google Analytics and Google Tag Manager, used only after you accept analytics cookies. Google Maps is loaded on our “Find Us” page only when you tap to load the map.

Some of these providers are based outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual clauses.

How long we keep it

Analytics data is retained only for as long as needed to understand and improve the site, in line with our analytics provider’s standard retention settings. Security logs are kept for a short period. Enquiry details are kept only as long as needed to deal with your request.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• object to, or ask us to restrict, our processing;
• withdraw consent at any time (for analytics cookies);
• data portability, where applicable.

To exercise any of these rights, contact us using the details above.

Complaints

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.