PRIVACY POLICY

1. Who We Are

L’Estaminet Ltd (trading as Bistro AIX) is the data controller responsible for your personal data.

Registered Office 54 Topsfield Parade, Tottenham Lane, Crouch End, London N8 8PT

Company No 16767239 (Registered in England & Wales)

Email: info@bistroaix.co.uk

Website: bistroaix.co.uk

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a reservation, purchase a gift voucher, or sign up for our membership.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What Data We Collect

Depending on how you interact with us, we may collect the following:

Contact and identity information
Your name, email address, and phone number.

Reservation information
Dining preferences, special occasions, dietary requirements, and guest notes provided when making a reservation.

Payment information
When you purchase a gift voucher, payment is processed securely by Stripe. We do not store your card details. Stripe may retain transaction data in accordance with their own privacy policy.

Website usage data
Information about how you use our website, including pages visited, time spent, and device/browser type. This is collected via cookies and analytics tools — see Section 6 and our Cookie Policy.

Form submissions
Any information you submit via our online contact or enquiry forms, including your name, email address, and the content of your message.

Membership information
Your name and email address if you sign up for our membership. We do not currently send marketing communications, but we may do so in future with your consent.

4. How We Use Your Data

Managing your reservation and delivering our hospitality services
Legal basis: Performance of a contract.

Processing gift voucher purchases and related customer service
Legal basis: Performance of a contract.

Responding to enquiries submitted via our contact forms
Legal basis: Legitimate interests.

Managing our membership list and, in future, sending event or offer communications
Legal basis: Consent (where applicable).

Improving and maintaining our website
Legal basis: Legitimate interests.

Complying with legal obligations such as financial record-keeping
Legal basis: Legal obligation.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third-party providers who help us operate our business, and only to the extent necessary.

Stripe — payment processing for gift vouchers. Stripe is PCI-DSS compliant.
Privacy policy: stripe.com/gb/privacy

SevenRooms — reservation and guest management. SevenRooms stores guest records on our behalf.
Privacy policy: sevenrooms.com/privacy

SiteGround — website hosting and email infrastructure.
Privacy policy: siteground.co.uk/privacy.php

Complianz — cookie consent management.
Privacy policy: complianz.io/privacy-statement

Elementor — website builder used to power our website.
Privacy policy: elementor.com/privacy-policy

All third-party providers are required to handle your data in accordance with applicable data protection law.

6. Cookies

We use cookies on our website to make it function correctly, remember your preferences, and understand how visitors use the site. Cookie consent is managed through Complianz.

For full details of the cookies we use and how to control them, please see our Cookie Policy.

7. How Long We Keep Your Data

Reservation and guest records
Retained for up to 3 years from your last visit.

Gift voucher transaction records
Retained for 7 years, in line with financial record-keeping obligations.

Enquiry form submissions
Retained for up to 12 months from the date of submission.

Membership records
Retained until you request removal, or until the list is no longer in use.

Website analytics data
Retention period determined by our analytics provider’s settings.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access
Request a copy of the personal data we hold about you.

Right to rectification
Ask us to correct inaccurate or incomplete data.

Right to erasure
Ask us to delete your data, subject to any legal obligations we must fulfil.

Right to restriction
Ask us to limit how we process your data in certain circumstances.

Right to data portability
Receive your data in a structured, commonly used format.

Right to object
Object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk | Phone: 0303 123 1113

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on SiteGround’s secure infrastructure and uses HTTPS encryption.

Payment data is handled exclusively by Stripe and is never transmitted through or stored on our own systems.

10. Links to Other Websites

Our website may contain links to third-party websites such as our reservation provider. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Last updated date at the top of this page. We encourage you to review it periodically.

12. Contact Us

L’Estaminet Ltd (trading as Bistro AIX)
54 Topsfield Parade, Tottenham Lane, Crouch End, London N8 8PT
Email: info@bistroaix.co.uk