# Privacy Policy

**Last updated:** 2026-03-07

The Golden Bean ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

## 1. Data Controller

The Golden Bean, 12 Victoria Road, Saltaire, BD18 3LA. Contact: [email protected].

## 2. What Data We Collect

We may collect the following personal data: - **Contact form submissions**: name, email address, phone number, and your message - **Website analytics**: anonymised usage data (pages visited, time on site, device type) - **Cookies**: see our Cookie Policy for details

## 3. How We Use Your Data

We use your data for the following purposes: - To respond to your enquiries (legal basis: legitimate interest) - To provide our Cafe services when you engage us (legal basis: contract performance) - To improve our website (legal basis: legitimate interest) - To comply with legal obligations (legal basis: legal obligation)

## 4. Data Sharing

We do not sell your personal data. We may share data with: - Our website hosting provider (for site operation) - Analytics providers (anonymised data only) - Legal authorities if required by law

## 5. Data Retention

We retain contact form submissions for up to 24 months after your last interaction with us. Analytics data is retained in anonymised form.

## 6. Your Rights

Under UK GDPR, you have the right to: - **Access** your personal data - **Rectify** inaccurate data - **Erase** your data ("right to be forgotten") - **Restrict** processing - **Data portability** — receive your data in a structured format - **Object** to processing based on legitimate interest - **Withdraw consent** at any time where consent is the legal basis

To exercise any of these rights, contact us at [email protected].

## 7. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and secure hosting.

## 8. International Transfers

Your data is processed within the UK/EEA. If any transfer outside these areas is necessary, we ensure appropriate safeguards are in place.

## 9. Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

## 10. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

## 11. Contact

For privacy-related enquiries: [email protected] or write to The Golden Bean, 12 Victoria Road, Saltaire, BD18 3LA.