PRIVACY POLICY
WHO WE ARE
Privacy Policy for The Kiln Stewartby
Effective Date: September 2024
Welcome to The Kiln Stewartby! Your privacy is very important to us. This policy explains how we collect, use, and protect your personal data when you visit our website: https://thekilnstewartby.co.uk. By using our site, you consent to the practices outlined here.
1. Who We Are
The Kiln Stewartby is a local café based in the UK. We operate this website to engage with our customers and provide information about our services. If you have any questions or concerns about your data, please contact us at:
Email: eversholteats@outlook.com
Phone: 07551 283141
Website: https://thekilnstewartby.co.uk
2. What Data We Collect
Comments
When you leave a comment on our site, we collect:
-
The information you enter in the comment form
-
Your IP address
-
Your browser’s user agent (for spam detection)
Media
If you upload photos, please ensure they don’t contain location data (like EXIF GPS), as other users can extract that data from the images.
Cookies
We use cookies to enhance your experience on our website:
-
If you leave a comment, you can opt to save your name, email, and website in cookies for your convenience. These cookies last one year.
-
If you log in, we set cookies to remember your login and screen preferences. These last for 2 days (login) or 1 year (screen preferences).
-
Editing or publishing content will set a temporary cookie to track the post ID of the article you’ve edited. This cookie expires after one day.
Embedded Content
Articles on our site may contain embedded content (e.g. videos, images). Embedded content behaves as if you are visiting the third-party site directly, which means these websites may collect data, use cookies, and track interactions with embedded content.
3. Legal Basis for Processing Data
We process your data based on the following lawful bases under the UK GDPR:
-
Consent: When you submit your details through forms (e.g. comment form, sign-up form).
-
Legitimate Interests: For example, we process your data to improve user experience, prevent spam, and provide services.
-
Contractual Necessity: If you make a purchase or book a service through our website, we may need your data to complete the transaction.
-
Legal Obligation: In some cases, we may be required by law to keep certain records (e.g., for tax purposes).
4. Who We Share Your Data With
We do not sell your data to third parties. However, we may share your data with:
-
Spam detection services: Comments may be checked through an automated service (e.g. Akismet).
-
Password reset service: If you request a password reset, your IP address may be included in the email.
-
Third-Party Tools/Services: We use tools such as Google Analytics to understand site traffic. These services may collect anonymized usage data. You can read their privacy policies here:
5. Data Retention
We retain your data for the following periods:
-
Comments: Your comments and metadata are stored indefinitely to automatically approve follow-up comments.
-
User Data: If you create an account, we store the personal information you provide in your user profile. You can view, edit, or delete your data at any time (except your username).
6. Your Rights Over Your Data
You have the following rights under the UK GDPR:
-
Access: You can request a copy of the personal data we hold about you.
-
Correction: You can ask us to correct any inaccurate data.
-
Erasure: You can request the deletion of your personal data (subject to certain exceptions, like legal obligations).
-
Portability: You can request a copy of your data in a machine-readable format to transfer to another service.
-
Objection: You can object to the processing of your data, particularly where our processing is based on legitimate interests.
To exercise any of these rights, please contact us at [your email].
7. Data Security
We take the security of your personal data seriously and have implemented appropriate measures to protect it from unauthorized access, disclosure, alteration, or destruction. This includes using secure connections (HTTPS) on our website and keeping our systems up-to-date.
However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Third-Party Websites and Embedded Content
Our site may include embedded content from third-party websites (e.g. videos, images). These websites may collect data about you, use cookies, and track interactions with their content. We encourage you to review the privacy policies of these third parties.
9. Children’s Privacy
Our website is not intended for children under the age of 13, and we do not knowingly collect data from children. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that data as soon as possible.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated “Effective Date.”
Questions?
If you have any questions or concerns about this privacy policy or how we handle your data, please contact us at eversholteats@outlook.com
Summary of Key Points:
-
Your rights to access, modify, and delete data
-
The legal basis for data collection and use
-
Your data may be processed for things like comment spam detection and site analytics
-
The policy ensures transparency on third-party services