Privacy policy.

The Purpose Restaurant Company (“we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect when you visit this website or contact us, why we collect it, how we look after it and the rights you have over it.

We are the data controller for the information described here. We handle it in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Information we collect

When you contact us

If you use the contact form on this website, we collect:

• your first and last name
• your email address
• the content of your message, and anything you choose to tell us in it

If you email us directly, we receive your email address, your name as it appears in your email, and whatever you include in your message.

When you visit the website

We use privacy-friendly analytics to understand how the site is used: for example, how many people visit, which pages they view, roughly where they are in the world (at country level), what type of device and browser they use, and which site referred them. This information is aggregated and does not identify you.

Our analytics do not use cookies, do not build a profile of you and do not track you across other websites.

Like almost every website, our hosting provider also processes technical information such as your IP address, browser type and the date and time of your visit in order to deliver the site to you and protect it from abuse.

How we use your information

We use the information you send us to read and reply to your enquiry and to keep a record of our correspondence. We use website analytics to understand how the site is performing and to improve it.

We will not use your details to send you marketing, and we will never sell, rent or trade your personal information.

Our lawful basis

Under UK GDPR we must have a lawful basis for using personal information. We rely on:

• Legitimate interests — to respond to enquiries you send us, to keep a record of them, and to run, secure and improve our website. We only rely on this where it does not override your own rights and interests.
• Consent — where you have asked us to do something specific with your information. You can withdraw your consent at any time by contacting us.

Cookies

We do not use advertising or tracking cookies, and our analytics work without cookies. Our hosting provider may set a strictly necessary security cookie to help distinguish genuine visitors from automated traffic. Because it is essential to keeping the site secure, it does not require your consent. You can block or delete cookies in your browser settings at any time.

Who we share it with

We only share personal information with trusted service providers who help us run this website and handle our correspondence, and only as far as they need to provide that service. They act on our instructions and are required to keep your information secure. They include:

• Cloudflare — website hosting, security and analytics
• Our email and form-handling providers — to deliver and store messages sent through the contact form or by email
• Adobe Fonts and Google Fonts — to display the typefaces used on this site. Your browser requests the font files directly from these services, which means they receive your IP address.
• jsDelivr — a content delivery network that serves a small script used for smooth scrolling

We may also disclose information where we are required to by law, or to protect our rights, property or safety, or those of others.

International transfers

Some of our service providers are based in, or store data in, countries outside the UK, including the United States. Where that happens, we make sure appropriate safeguards are in place, such as the UK’s adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Agreement or Addendum approved by the Information Commissioner’s Office.

How long we keep it

We keep enquiries and related correspondence for as long as needed to deal with them and for up to two years after our last contact with you, unless we need to keep them longer for legal reasons or because we are working together. Analytics data is only held in aggregated form. After that, we delete or anonymise the information.

Keeping it secure

This website is served over an encrypted (HTTPS) connection. We use reputable providers with strong security measures, and we limit access to your information to the people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect what you share with us.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete your information
• ask us to restrict how we use your information
• object to us using your information on the basis of legitimate interests
• ask us to transfer your information to another organisation, where applicable
• withdraw your consent at any time, where we rely on it

To exercise any of these rights, email us at the address below. There is normally no charge, and we will respond within one month. We may need to confirm your identity before acting on a request.

Children

This website is not aimed at children and we do not knowingly collect personal information from anyone under 13.

Links to other websites

This website may link to other sites. We are not responsible for their content or privacy practices, so please read their privacy policies when you visit them.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a new “last updated” date.

Contact us

If you have any questions about this policy or how we handle your information, please email iqbal@impact-dining.com.

If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before going to the ICO.