The data controller responsible for your personal data is:

Thatched Holdings Ltd
Trading as The Thatched Inn

Registered address:
The Thatched Inn, Grand Avenue, Hassocks, England, BN6 8DH

Company number: 16115805
Privacy contact email: hello@thatchedinn.co.uk
Website: https://www.thatchedinn.co.uk/

If you have any questions about this privacy policy or how we use your personal data, please contact us using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Information Commissioner's Office
Website: https://ico.org.uk/

We would, however, appreciate the opportunity to deal with your concerns first, so please contact us before making a complaint where possible.

The information we collect will depend on how you interact with us.

Identity information

This may include:

• your first name;
• surname;
• title, where provided; and
• information necessary to identify or administer a booking or transaction.

We do not routinely require your date of birth unless there is a specific reason for collecting it.

Contact information

This may include:

• telephone number;
• email address;
• postal address, where required; and
• other contact details you provide to us.

Reservation information

When you make a reservation, we may collect:

• your name;
• telephone number;
• email address;
• reservation date and time;
• number of guests;
• booking notes;
• special requests;
• information about an occasion, where provided; and
• information relating to amendments, cancellations or no-shows.

Reservations may be made directly with us or through a third-party reservation platform.

Transaction information

We may collect information relating to purchases and transactions, including:

• food and drink purchases;
• gift voucher purchases and redemptions;
• deposits or pre-payments;
• event or private-hire bookings;
• refunds; and
• payment status.

We do not generally receive or store customers' full payment-card details where payments are processed by a third-party payment provider.

Marketing and communications information

This may include:

• whether you have agreed to receive marketing;
• your marketing preferences;
• records of when you opted in or opted out; and
• communications we have sent to you.

Feedback and review information

We may collect information you provide when you:

• contact us with feedback;
• complete a survey;
• respond to a customer-feedback request;
• submit a review; or
• communicate with us about a review.

Reviews posted on third-party websites, such as Google, Tripadvisor or OpenTable, are subject to those platforms' own privacy policies.

Technical information

When you use our website, we may collect technical information such as:

• IP address;
• browser type;
• device type;
• operating system;
• pages visited;
• approximate location derived from technical information;
• dates and times of visits; and
• information collected through cookies or similar technologies.

The exact information collected will depend on the technology used on our website.

CCTV

CCTV may operate at The Thatched Inn for purposes including:

• protecting customers, employees and visitors;
• preventing and detecting crime;
• protecting property;
• investigating incidents; and
• assisting law enforcement where appropriate.

CCTV images are personal data where individuals can be identified.

A separate CCTV notice may provide further information about our use of CCTV, including retention periods and how to make a request relating to CCTV footage.

We may collect personal data through:

Direct interactions

You may provide information when you:

• make a reservation;
• contact us by telephone, email or social media;
• visit the pub;
• purchase a gift voucher;
• book a private event or function;
• provide feedback;
• enter a competition or promotion;
• subscribe to marketing communications;
• make a purchase; or
• otherwise communicate with us.

Third-party services

We may receive information where you use a third-party service to interact with The Thatched Inn, for example a reservation, voucher, payment, review or marketing platform.

Where we receive personal information from another organisation, we will use it in accordance with applicable data protection law and this privacy policy where appropriate.

Automated technologies

When you visit our website, we may automatically collect technical information through cookies and similar technologies.

Our use of cookies is explained in our separate Cookie Policy.

We will only use your personal data where we have a lawful basis to do so.

Depending on the circumstances, this may include:

• performance of a contract – for example, administering a reservation, voucher purchase or event booking;
• legitimate interests – for example, operating and improving our business, responding to customer enquiries, preventing fraud and maintaining security;
• legal obligations – where we are required to keep or disclose information by law; and
• consent – where the law requires us to obtain your consent, such as certain forms of electronic marketing or non-essential cookies.

We will only process personal data for purposes that are compatible with the purposes for which it was collected, unless we have a lawful basis to use it for another purpose.

We use personal information to administer reservations and provide services requested by customers.

This may include:

• confirming bookings;
• sending booking reminders;
• contacting you about changes to your reservation;
• dealing with cancellations;
• responding to questions or special requests;
• administering deposits or pre-payments; and
• contacting you where necessary in connection with your visit.

These communications are generally service communications rather than marketing communications.

We may use a third-party reservation platform to manage reservations. Information provided through that platform may be processed by the platform on our behalf or as a separate controller, depending on the service and its contractual arrangements.

If you purchase or redeem a gift voucher, we may process information necessary to:

• process the purchase;
• deliver the voucher;
• administer the voucher;
• record redemption;
• deal with queries; and
• process refunds or other transactions where applicable.

Where a third-party voucher provider is used, that provider may process personal data in accordance with its own privacy arrangements and our contractual relationship with it.

We may send information about The Thatched Inn, including:

• special offers;
• events;
• seasonal menus;
• promotions;
• gift vouchers;
• private-hire opportunities; and
• other news about the pub.

We will only send direct marketing where permitted by applicable law.

Where consent is required, we will ask for it before sending marketing communications.

Where we rely on another lawful basis permitted for direct marketing, we will ensure that the relevant legal requirements are satisfied.

You can unsubscribe from marketing communications at any time by:

• using the unsubscribe option in the relevant communication; or
• contacting us using the details in this privacy policy.

Opting out of marketing will not affect service communications relating to bookings, purchases or other transactions.

We may contact customers to ask for feedback about their experience at The Thatched Inn.

This may include inviting customers to:

• complete a survey;
• provide feedback directly to us; or
• leave a review on a third-party review platform.

We may use feedback to improve our food, service, facilities, customer experience and business operations.

Where a review is published on a third-party platform, that platform's own terms and privacy policy will apply.

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

• operating the website;
• maintaining security;
• remembering preferences;
• understanding how visitors use the website;
• measuring website performance; and
• supporting marketing or advertising, where applicable.

We will provide information about the cookies used on our website through our Cookie Policy and, where required, obtain consent before placing non-essential cookies.

We may share personal data with third parties where necessary to operate our business or provide services to you.

Depending on the services we use, these may include:

• reservation and booking platforms;
• payment providers;
• gift voucher providers;
• website hosting and technology providers;
• email and marketing providers;
• IT and software providers;
• professional advisers;
• accountants and auditors;
• insurers;
• legal advisers;
• fraud prevention and security providers;
• analytics and website providers; and
• government departments, regulators and law-enforcement agencies where required or permitted by law.

Where third parties process personal data on our behalf, we will take appropriate steps to ensure that they process the information in accordance with applicable data protection law and only for authorised purposes.

Some of the technology and service providers used by The Thatched Inn may process personal data outside the UK.

Where personal data is transferred outside the UK, we will ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.

We take appropriate technical and organisational measures to protect personal data against:

• accidental loss;
• unauthorised access;
• unauthorised use;
• alteration; and
• unauthorised disclosure.

Access to personal data will be limited to people who need it for legitimate business purposes.

No method of transmitting or storing information is completely secure. However, we will take reasonable steps to protect the information we hold.

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

• provide services to you;
• maintain appropriate business and transaction records;
• comply with legal, tax and accounting requirements;
• resolve disputes;
• establish or defend legal claims;
• maintain records of marketing preferences; and
• demonstrate compliance with data protection requirements.

Different types of information may therefore be retained for different periods.

Where a specific retention period is not stated, we will determine the appropriate period by considering the purpose for which the information was collected, the nature and sensitivity of the information, legal requirements and the potential risks of retaining it.

Under applicable data protection law, you may have the right to:

Access

Request a copy of the personal data we hold about you.

Correction

Ask us to correct inaccurate or incomplete personal data.

Erasure

Ask us to delete personal data in certain circumstances.

Restriction

Ask us to restrict the processing of your personal data in certain circumstances.

Objection

Object to processing based on legitimate interests and, in particular, object to direct marketing.

Data portability

In certain circumstances, request that personal data you have provided to us is transferred to you or another organisation in a structured, commonly used and machine-readable format.

Withdraw consent

Where we rely on your consent, you can withdraw it at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights are not absolute and certain exemptions or limitations may apply.

To exercise any of your rights, please contact:

Thatched Holdings Ltd
Email: hello@thatchedinn.co.uk
Address: The Thatched Inn, Grand Avenue, Hassocks, England, BN6 8DH

We may need to request information to verify your identity before dealing with a request.

We will normally respond to a valid request within one month. Where a request is particularly complex or you have made multiple requests, this period may be extended where permitted by law.

CCTV cameras and signage are installed at The Thatched Inn for security and crime-prevention purposes.

At present, the CCTV system is not operational and is not recording or retaining CCTV footage. The cameras and associated signage remain in place as a security deterrent.

When the CCTV system is operational, it may record images for purposes including:

• the safety and security of customers, staff and visitors;
• prevention and detection of crime;
• protection of our premises and property; and
• investigation of incidents.

When operational, CCTV footage will normally be retained for up to 30 days, unless footage is required for a specific incident, investigation, legal claim or other legitimate purpose, in which case it may be retained for longer where necessary and lawful.

We will review the operation and retention period of the CCTV system periodically to ensure that it remains appropriate for its intended purpose.

For further information about our use of CCTV or to exercise applicable data protection rights, please contact us at hello@thatchedinn.co.uk.

Our website may contain links to third-party websites, including reservation, review, social-media, payment or other services.

We are not responsible for the privacy practices of third-party websites.

When you follow a link to another website, you should review that website's privacy policy before providing personal information.

We may update this privacy policy from time to time to reflect:

• changes to our business;
• changes to the services we use;
• changes to how we process personal data; or
• changes in applicable legal or regulatory requirements.

The latest version will be published on our website with the date it was last updated.

We will update our privacy information before introducing a new use of personal data where required by law.

If you have any questions about this privacy policy or how we handle your personal data, please contact:

Thatched Holdings Ltd
Trading as The Thatched Inn

Registered address: The Thatched Inn, Grand Avenue, Hassocks, England, BN6 8DH
Company number: 16115805
Email: hello@thatchedinn.co.uk
Website: https://www.thatchedinn.co.uk/

Complaints

If you are unhappy with the way we have handled your personal data, please contact us first so that we have an opportunity to resolve your concern.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office
https://ico.org.uk/

The ICO is the UK's independent supervisory authority for data protection.

Last updated: 2 October 2026