Privacy Policy

Last updated: 9 March 2026

1. Introduction

Barton Investors Group ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or interact with any of our venues.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, telephone number, postal address
• Enquiry Details: Messages submitted through our contact forms
• Booking Information: Reservation details, dining preferences, special requirements
• Employment Applications: CV, work history, qualifications, references
• Account Information: Email address, password (encrypted), and role for authorised staff

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, navigation paths, referring website
• Cookie Data: Please refer to our Cookie Policy for full details

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide customer service
• To process bookings and reservations at our venues
• To send you information you have requested about our venues and services
• To manage our website and ensure its security
• To comply with legal obligations
• To improve our website, services, and customer experience
• To protect our legitimate business interests

4. Legal Bases for Processing

We process your personal data on the following legal bases:

• Consent: Where you have given clear consent (e.g., subscribing to communications)
• Contract: Where processing is necessary to fulfil a contract with you
• Legal Obligation: Where we are required to comply with the law
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data with:

• Our venue management teams for booking and service fulfilment
• IT service providers who assist in maintaining our website
• Professional advisors (legal, accounting) where necessary
• Law enforcement or regulatory bodies when required by law

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiries: 2 years from submission, unless an ongoing relationship exists
• Booking records: 7 years for financial and legal compliance
• Employment applications: 6 months if unsuccessful, unless consent is given for longer
• Website analytics: 26 months from collection

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate or incomplete data
• Erase your personal data ("right to be forgotten")
• Restrict the processing of your data
• Data Portability – receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw Consent at any time where processing is based on consent

To exercise any of these rights, please visit our GDPR Request page or contact us at the address below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit
• Encrypted storage of sensitive information
• Regular security assessments and updates
• Role-based access controls with audit logging
• Staff training on data protection responsibilities

9. International Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer your data outside the UK or EEA.

10. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights:

13. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):