Privacy policy

1. What we collect

• Enquiry form — your name, email address, the topic you choose, and your message.
• Table reservations — your name, email address, phone number, party size, the date and time you book, and any notes you add.
• IP address — recorded with each submission, used only to prevent spam and abuse of the forms.
• Admin sign-in records — IP addresses of attempts to sign in to the site’s admin area, kept for 1 hour.

We set no analytics, tracking, or advertising cookies. The only cookie on this site is an essential session cookie used by the admin area.

2. Why we use it

We use this information to respond to your enquiry, to manage your booking, and to send you booking confirmation and reminder emails. These emails are purely transactional — we do not send marketing. The lawful basis is taking steps at your request (for bookings) and our legitimate interest in responding to messages sent to us (for enquiries).

3. How long we keep it

• Reservations — deleted automatically the day after your visit date. We also keep no more than the 300 most recent reservation records at any time.
• Enquiries — deleted automatically within 12 months of receipt, and we keep no more than the 300 most recent enquiries at any time.
• Admin sign-in records — deleted after 1 hour.

Backups. Encrypted backup copies of the site’s database are made on a rolling schedule and expire automatically: daily copies within 30 days, monthly copies within 13 months. If you ask us to delete your data, we remove it from live systems promptly; backup copies are held beyond use (never restored to live systems or used for any other purpose) until they expire on that schedule.

4. Who we share it with

We do not sell or trade personal data. It is processed on our behalf by:

• Cloudflare — website hosting, database, and backup storage.
• Resend — delivery of confirmation and reminder emails.
• GitHub — private off-site backup copies of the database.

Where these providers process data outside the UK, transfers are protected by UK-approved safeguards (such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement).

5. Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to our use of it, and to data portability. Email hello@kindlingsites.co.uk — no special form is needed. We will respond within one month, free of charge. We may need to verify your identity first, in which case the one-month period pauses until you respond.

6. Complaints

If you are unhappy with how we have handled your data, contact us at hello@kindlingsites.co.uk and we will investigate and reply within 30 days. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.