Last updated:
Privacy policy
This policy explains what personal information we collect when you visit our website, book a table, order from us or contact us, why we collect it, and your rights over it.
1. Who we are
Tiger Bites Pig is run by [legal entity name, e.g. “Tiger Bites Pig Ltd”], [company number, if a limited company], whose registered address is [registered address]. We are the data controller for the personal information described in this policy.
Contact us about privacy at hello@tigerbitespig.co.uk, by phone on 07378 273919, or by post at 30 Church St, Birmingham B3 2NP.
ICO registration number: [ZA…]. Most UK businesses that process personal data must pay the ICO data protection fee.
2. What we collect and why
| When | What we collect | Why | Lawful basis (UK GDPR) |
|---|---|---|---|
| You book a table | Name, email, phone number, date, time, party size, any notes you add. Card details for the £10 per person hold, which are handled by the booking provider’s payment processor. We never see or store your full card number. | To manage your booking, contact you about it, and apply our no-show policy | Contract, Art. 6(1)(b) |
| You tell us about allergies or dietary needs | Allergy and dietary information, which may count as health data | To prepare food that is safe for you | Your explicit consent, Art. 9(2)(a), and our legal food-safety obligations |
| You email, call or message us (including catering and group enquiries) | Name, contact details, company (if given), event details and anything else you tell us | To reply and, for catering, to quote for and deliver your event | Legitimate interests, Art. 6(1)(f), or steps before a contract, Art. 6(1)(b) |
| You sign up to our newsletter | Email address, name (if given), and whether you open our emails | To send news, new dishes and offers | Consent, Art. 6(1)(a). Unsubscribe any time using the link in every email. |
| You pay in the restaurant | Card payments are processed by our card terminal provider. We receive only a transaction record, not your full card details. | To take payment and keep accounts | Contract, and our legal obligation to keep financial records |
| You visit the restaurant [only if CCTV is installed] | CCTV images | Security of staff, customers and premises | Legitimate interests, Art. 6(1)(f) |
We do not sell your personal information, and we do not use it for automated decision-making.
3. Services we work with
Some services are run by other companies. Where they act on our behalf (as “processors”), they may only use your data to provide that service to us:
- DesignMyNight (Access Group): table bookings and card holds
- Brevo: newsletter sign-up and email sending
- Our email provider [e.g. Google Workspace / Microsoft 365], for enquiries
- Our accountant and card-payment provider [names]
Other services we link to are run by companies that are independent data controllers. When you use them, their own privacy policies apply:
- Deliveroo: delivery orders
- Good Eats: click & collect orders
- GiftPro: gift vouchers
- Saint Paul’s Market: ordering and payment at our market stall go through the market’s own QR-code system
- Instagram, TikTok and Facebook: if you follow or message us there
We may also share information if the law requires it, for example with environmental health officers or the police.
4. Our website and cookies
Our own website does not use analytics, advertising or tracking cookies, so we don’t show a cookie banner.
- Hosting: our host [e.g. Netlify / Cloudflare / Vercel] keeps standard server logs, including IP address, browser type and pages requested, for a short time for security.
- Fonts: our typefaces load from Google Fonts. Your browser connects to Google’s servers, which receive your IP address.
- Booking page: the DesignMyNight booking form on our booking page is loaded from DesignMyNight and may set cookies needed to complete your booking. See DesignMyNight’s own cookie policy for details.
If we add analytics or marketing tools in future, we will ask for your consent first and update this policy.
5. How long we keep it
- Bookings: [up to 2 years] after your visit
- Allergy notes on a booking: deleted with the booking
- Enquiries and catering correspondence: [up to 2 years] after our last contact
- Financial records: 6 years, as required by HMRC
- Newsletter: until you unsubscribe
- CCTV: [30 days], unless needed for an incident
6. Transfers outside the UK
Some of our providers, such as Google and some email services, may process data outside the UK. When they do, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal information
- correct information that is wrong or incomplete
- ask us to delete it
- restrict or object to how we use it, including at any time for marketing
- data portability: receive it in a reusable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@tigerbitespig.co.uk. We will reply within one month. It’s free in most cases.
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint , or call 0303 123 1113.
8. Changes and contact
We may update this policy from time to time. The latest version will always be on this page, with the date at the top.
Questions? Email hello@tigerbitespig.co.uk.