This Privacy Policy explains how the White Swan Inn – Pub & Restaurant in Blyth ("we", "us", or "our") collects, uses and protects your personal data when you visit our website, make an enquiry, request a booking or sign up to hear from us.

This policy applies to visitors to our website, customers and anyone who contacts us about bookings, events or general enquiries.

We aim to be clear, open and respectful with your information and to comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy was last updated on the date shown at the top of the page. We may update it from time to time and will post the latest version on this page.

The information we collect depends on how you use our website and services. It may include:

• Contact details such as your name, email address and telephone number when you complete an enquiry or booking request form.
• Booking information such as preferred date and time, party size, type of booking (for example, table booking, Sunday lunch, private function or event), and any special requirements you choose to tell us about.
• Message content such as the information you include in free-text fields when you contact us with questions or feedback.
• Marketing preferences such as whether you would like to receive news, offers or event updates from us by email (where such sign-ups are available).
• Technical data such as your IP address, browser type and version, time zone setting, and information about how you use our website. This is typically collected via cookies and similar technologies.
• Usage data such as pages visited, links clicked and time spent on our site, usually collected via analytics tools.

We only collect information that is relevant and necessary for the purposes described in this policy. We do not intentionally collect special category data (such as health or religious information) or information about children through this website. Please avoid including sensitive information in online forms wherever possible.

Under data protection law, we must have a lawful basis for using your personal data. Depending on the context, we rely on the following legal bases:

• Consent – where you actively choose to provide your details so that we can contact you (for example, submitting an enquiry or opting in to receive marketing emails). You can withdraw your consent at any time by contacting us using the details below or following the unsubscribe instructions in our emails.
• Contract – where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you (for example, handling booking requests, reserving a table, or managing a private function or event).
• Legitimate interests – where processing is necessary for our legitimate business interests, and these are not overridden by your rights and interests (for example, improving our website, keeping basic records of enquiries and bookings, or promoting our services to existing customers in a balanced and proportionate way).
• Legal obligations – where we need to process or retain certain information to comply with legal requirements, such as tax, accounting or licensing rules.

If we ever need to rely on a different lawful basis, we will make this clear at the point of collection where reasonably possible.

We treat your personal data with care and do not sell, rent or trade your information with other organisations for marketing purposes.

However, we may share your data with trusted third parties who help us run our business and provide our services, such as:

• Website hosting and technical support providers.
• Email and communications service providers.
• IT and security service providers.
• Professional advisers (for example, accountants or legal advisers) where reasonably necessary.

These third parties are only allowed to use your data to provide services to us and must keep it secure and confidential.

We may also share your information if required to do so by law, in connection with legal proceedings, or to protect our rights, property, staff, customers or the public.

You have several important rights under data protection law in relation to the personal data we hold about you. These may include the right to:

• Access – request a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete information.
• Erasure – ask us to delete your personal data in certain circumstances (also known as the "right to be forgotten").
• Restriction – ask us to limit the way we use your data in certain situations.
• Objection – object to certain types of processing, including direct marketing.
• Data portability – in some cases, ask us to provide your data in a structured, commonly used and machine-readable format and to transfer it to another organisation.

If you wish to exercise any of these rights, please contact us using the details in the Contact Us About Privacy section below. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO), if you are unhappy with how we have used your data. We would, however, appreciate the chance to address your concerns first, so please consider contacting us in the first instance.

Our website and some of the third-party services we use (such as hosting, email or analytics providers) may involve storing or processing your personal data outside the UK.

Where this happens, we take steps to ensure that your data is afforded an equivalent level of protection, for example by using providers based in countries that have been recognised as providing an adequate level of data protection, or by putting in place appropriate safeguards such as standard contractual clauses.

If you would like more information about international transfers of your personal data, please contact us using the details below.