Privacy policy.
Last updated:
The Purpose Restaurant Company (“we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect when you visit this website or contact us, why we collect it, how we look after it and the rights you have over it.
We are the data controller for the information described here. We handle it in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Information we collect
When you contact us
If you use the contact form on this website, we collect:
- your first and last name
- your email address
- the content of your message, and anything you choose to tell us in it
If you email us directly, we receive your email address, your name as it appears in your email, and whatever you include in your message.
When you visit the website
If you accept analytics cookies, we use Google Analytics to understand how the site is used: for example, how many people visit, which pages they view, how long they stay, roughly where they are in the world (at city or country level), what type of device and browser they use, and which site referred them. Google Analytics does not log or store full IP addresses, and we have switched off Google’s advertising features, so this information is not used to target advertising or linked to your Google account. If you reject analytics cookies, Google Analytics is not loaded at all.
Like almost every website, our hosting provider also processes technical information such as your IP address, browser type and the date and time of your visit in order to deliver the site to you and protect it from abuse.
How we use your information
We use the information you send us to read and reply to your enquiry and to keep a record of our correspondence. We use website analytics to understand how the site is performing and to improve it.
We will not use your details to send you marketing, and we will never sell, rent or trade your personal information.
Our lawful basis
Under UK GDPR we must have a lawful basis for using personal information. We rely on:
- Legitimate interests — to respond to enquiries you send us, to keep a record of them, and to run and secure our website. We only rely on this where it does not override your own rights and interests.
- Consent — for analytics cookies, which are only set if you accept them, and wherever you have asked us to do something specific with your information. You can withdraw your consent at any time.
Cookies
Cookies are small files stored on your device when you visit a website. We do not use advertising cookies. When you first visit, we ask whether you’re happy for us to use analytics cookies, and they are only set if you click “Accept”.
| Name | Provider | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors so we can count them. Set only if you accept analytics cookies. | 2 years |
_ga_99T5N7BCP2 | Google Analytics | Keeps track of your visit (session). Set only if you accept analytics cookies. | 2 years |
__cf_bm | Cloudflare | Strictly necessary. May be set to tell genuine visitors apart from automated traffic and keep the site secure. | 30 minutes |
We also store your cookie choice in your browser’s local storage so we don’t ask you again on every visit. It is kept for 12 months and is not sent to us.
Changing your mind: you can change your choice at any time using , which is also linked in the footer of every page. You can block or delete cookies in your browser settings too.
Who we share it with
We only share personal information with trusted service providers who help us run this website and handle our correspondence, and only as far as they need to provide that service. They act on our instructions and are required to keep your information secure. They are:
- Cloudflare — website hosting and security
- Resend — delivers messages sent through the contact form to our inbox
- Our email provider — stores the messages you send us and our replies
- Google — Google Analytics, if you accept analytics cookies
- Adobe Fonts — displays some of the typefaces used on this site. Your browser requests the font files directly from Adobe, which means Adobe receives your IP address.
We may also disclose information where we are required to by law, or to protect our rights, property or safety, or those of others.
International transfers
Some of our service providers are based in, or store data in, countries outside the UK, including the United States. Where that happens, we make sure appropriate safeguards are in place, such as the UK’s adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Agreement or Addendum approved by the Information Commissioner’s Office.
How long we keep it
We keep enquiries and related correspondence for as long as needed to deal with them and for up to two years after our last contact with you, unless we need to keep them longer for legal reasons or because we are working together. Google Analytics data is kept for 14 months and then deleted automatically. After these periods, we delete or anonymise the information.
Keeping it secure
This website is served over an encrypted (HTTPS) connection. We use reputable providers with strong security measures, and we limit access to your information to the people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect what you share with us.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is inaccurate or incomplete
- ask us to delete your information
- ask us to restrict how we use your information
- object to us using your information on the basis of legitimate interests
- ask us to transfer your information to another organisation, where applicable
- withdraw your consent at any time, where we rely on it
To exercise any of these rights, email us at the address below. There is normally no charge, and we will respond within one month. We may need to confirm your identity before acting on a request.
Children
This website is not aimed at children and we do not knowingly collect personal information from anyone under 13.
Links to other websites
This website may link to other sites. We are not responsible for their content or privacy practices, so please read their privacy policies when you visit them.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a new “last updated” date.
Contact us
If you have any questions about this policy or how we handle your information, please email [email protected].
If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before going to the ICO.