Last updated: 10 June 2025
This notice explains how The Woodfired Kitchen (Yorkshire) Limited (“we”, “our”, “us”) handles personal data collected through our website and services.
Data controller: The Woodfired Kitchen (Yorkshire) Limited
Company number: 16084688
Address: Westfield House, Millfield Lane, Nether Poppleton, York YO26 6GA
Email for privacy matters: info@thewoodfiredkitchen.co.uk
| Context | Personal data | Source |
|---|---|---|
| Booking or enquiry forms | Name, email, message content | You |
| Newsletter sign-up | Name, email | You |
| Website usage | IP address, device details, cookie identifiers | Your browser |
| Marketing emails | Open and click rates | Mailchimp |
We do not knowingly collect data from anyone under 13.
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to enquiries, confirming bookings | Contract or steps requested by you |
| Sending newsletters | Consent (you can withdraw at any time) |
| Running analytics to improve the site | Legitimate interest (service improvement) |
| Meeting tax, accounting or legal duties | Legal obligation |
We use:
Essential cookies to make the site work.
Analytics cookies (Google Analytics) to understand traffic.
Marketing cookies set by embedded social feeds.
Non-essential cookies load only after you give consent via our cookie banner. You can change your choices at any time in your browser or by re-opening the banner.
| Recipient | Reason | Safeguard |
|---|---|---|
| Mailchimp (USA) | Email marketing | UK Addendum to EU Standard Contractual Clauses |
| Google LLC (USA) | Site analytics | UK Addendum to EU Standard Contractual Clauses |
| Professional advisers, HMRC, regulators | Legal or compliance needs | Bound by confidentiality or law |
We never sell your data.
| Data | Retention period |
|---|---|
| Booking records and invoices | 7 years (accounting rules) |
| Newsletter list | Until you unsubscribe or we close the list |
| Google Analytics records | 14 months then deleted |
You may:
Access the personal data we hold.
Rectify inaccurate data.
Erase data in certain cases.
Restrict or object to processing.
Port your data to another provider.
Complain to the Information Commissioner’s Office (ico.org.uk) if unhappy.
Contact us using the details in section 1 to exercise any right. We will reply within one month.
We apply access controls, encryption in transit and at rest, and secure UK-based hosting. Mailchimp and Google Analytics secure data under recognised certifications (ISO 27001, SOC 2).
External links and social feeds have their own privacy practices. Please read their notices.
We will post any updates here. Material changes will be highlighted for 30 days.
