1. Who we are
This website, saintsofingram.co.uk (the “Site”), is operated by SAINTS 158 LTD (trading as Saints of Ingram), a company registered in Scotland under company number SC884842, with its registered office at 158 Ingram Street, Glasgow, United Kingdom, G1 1EJ.
For the purposes of UK data protection law – the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 – we are the data controller of the personal data described in this policy.
If you have any questions about this policy or how we handle your personal data, contact us at contact@saintsofingram.co.uk or write to us at the registered address above.
2. The personal data we collect
We collect personal data in the following ways:
Table bookings. When you book a table through our online booking system, we collect your name, email address, telephone number, party size, booking date and time, and any dietary requirements, accessibility needs or special requests you choose to share.
Enquiries. When you submit an enquiry through a form on the Site – for example about private hire, weddings or events – we collect your name, contact details and the content of your message.
Gift vouchers. When you purchase a gift voucher, we collect your name, email address and, where you choose to provide them, the recipient’s name and email address and a personal message. Payment is processed securely by our voucher provider and its payment processor; we do not receive or store your full card details.
Website usage. When you browse the Site, we collect technical and usage information – such as your IP address, browser type, device type, pages visited and how you arrived at the Site – through cookies and similar technologies (see section 7).
We do not knowingly collect personal data from children, and the Site is not directed at children.
3. How we use your personal data and our lawful bases
| Purpose | Data used | Lawful basis |
| Taking and managing your table booking | Booking details and contact information | Performance of a contract |
| Fulfilling gift voucher purchases | Purchaser and recipient details | Performance of a contract |
| Responding to your enquiries | Enquiry form details | Legitimate interests (responding to correspondence you initiate) |
| Managing dietary, accessibility or similar requests | Information you volunteer | Your explicit consent, where this reveals health-related information |
| Understanding how the Site is used and improving it | Usage and analytics data | Consent (via our cookie banner) |
| Sending marketing communications, where you have opted in | Name and email address | Consent |
| Keeping records required by law (e.g. accounting) | Transaction records | Legal obligation |
We will only send you marketing communications if you have opted in, and every message will include a means to unsubscribe. You can withdraw consent at any time by contacting us.
4. Who we share your personal data with
We use trusted third-party service providers to operate the Site and our business. They process personal data on our behalf or as independent controllers for the services below:
- ResDiary – our table reservation platform, which processes booking details.
- GiftUp – our gift voucher platform, which processes voucher purchases including payment.
- Gravity Forms – the software powering our enquiry forms; submissions are stored on our website hosting.
- Google (Google Analytics and Google Tag Manager) – website analytics, subject to your cookie consent.
- Our website hosting and email providers, who store data submitted through the Site.
We may also disclose personal data where required by law, to professional advisers, or in connection with a sale or reorganisation of our business.
We do not sell your personal data.
5. International transfers
Some of our service providers (including Google) may process data outside the UK, including in the United States. Where this happens, transfers are protected by safeguards recognised under UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. How long we keep your personal data
We keep personal data only as long as necessary for the purposes described above:
Analytics data – retained in accordance with the retention period configured in Google Analytics ([e.g. 14 months]).
Booking records – retained in our reservation system in line with operational need, then deleted or anonymised.
Enquiry submissions – retained for up to [12/24] months from our last contact with you, then deleted.
Gift voucher transaction records – retained for 6 years to meet accounting and tax obligations.
7. Cookies
The Site uses cookies and similar technologies. Strictly necessary cookies are required for the Site to function. Analytics cookies (set via Google Tag Manager and Google Analytics) are only placed with your consent, which you can give, refuse or withdraw through our cookie banner at any time.
For full details of the cookies we use and their durations, see our Cookie Policy.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data in certain circumstances;
- restrict or object to our processing in certain circumstances;
- data portability – receive certain data in a portable format;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at contact@saintsofingram.co.uk. We will respond within one month. We may need to verify your identity before acting on a request.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113. We would appreciate the opportunity to address your concerns first.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data in line with good industry practice.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with the date of last revision shown at the top.