Privacy Policy

Last updated: May 2026

Bodega Tapas (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website, make a reservation, or interact with us.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

Make a reservation or booking
Submit a contact form enquiry
Subscribe to our newsletter
Create an account on our website
Interact with us on social media

This information may include your name, email address, telephone number, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our website. We may also collect information through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect for the following purposes:

To process and manage your reservations
To respond to your enquiries and provide customer service
To send you marketing communications (with your consent)
To improve our website and services
To comply with legal obligations
To protect against fraudulent or illegal activity

3. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

Consent: Where you have given us clear consent to process your personal data for a specific purpose, such as marketing communications.
Contract: Where processing is necessary for the performance of a contract with you, such as managing your reservation.
Legitimate interests: Where processing is necessary for our legitimate interests, such as improving our services, provided your rights do not override those interests.
Legal obligation: Where processing is necessary for compliance with a legal obligation.

4. Email Communications (Brevo)

We use Brevo (formerly Sendinblue) as our email service provider to send transactional emails (such as booking confirmations and contact form responses) and, where you have opted in, marketing emails. When you submit our contact form or subscribe to our newsletter, your email address and name are shared with Brevo for the purpose of delivering these communications.

Brevo processes data in accordance with GDPR requirements. You can view Brevo’s privacy policy on their website for more information about how they handle data.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

Essential cookies: Required for the website to function properly.
Analytics cookies: Help us understand how visitors use our website so we can improve it.
Marketing cookies: Used to deliver relevant advertisements (only with your consent).

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

6. Data Sharing

We do not sell your personal information. We may share your information with:

Service providers who assist us in operating our website and business (e.g., Brevo for email, booking platform providers)
Professional advisers (lawyers, accountants) where necessary
Law enforcement or regulatory authorities where required by law

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Contact form enquiries are retained for up to 12 months. Newsletter subscriber data is retained until you unsubscribe.

8. Your Rights

Under the UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Request data portability
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details below.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Children’s Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: info@bodegatapas.co.uk
Post: Bodega Tapas, High Street, Christchurch, Dorset

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.