Privacy Policy

Effective Date: 25/07/2025
Last Updated: 25/07/2025

This Privacy Policy explains how Toast Bar (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit our website, place an order through our app, contact us, or visit our venue.

By using our services, you agree to the practices outlined in this policy.

1. WHO WE ARE

Toast Bar is a hospitality venue located at:

Toast Bar
📍 Unit C, West Point, Wellington Street, Leeds, LS1 4JY
📧 Email: info@toastleeds.co.uk

For the purposes of data protection laws, we are the data controller of your personal data.

2. WHAT PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

2.1. Information You Provide Directly:

  • Name

  • Email address

  • Phone number

  • Payment details (processed securely via third-party providers)

  • Order details (e.g., food and drink items)

  • Feedback, reviews or messages

2.2. Information We Collect Automatically:

  • IP address

  • Device type and browser

  • Location (with your permission)

  • Website usage data (via cookies – see our Cookie Policy)

2.3. Information from Third Parties:

  • Payment providers (e.g. Stripe)

  • Analytics platforms (e.g. Google Analytics)

  • Social media platforms (e.g. if you log in or interact with us via Facebook or Instagram)

3. HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

  • To process your orders

  • To communicate with you regarding orders, feedback, or inquiries

  • To improve our services, website and customer experience

  • To ensure legal compliance with licensing, payment, and age verification laws

  • To send marketing communications (only with your consent)

  • For security, fraud prevention, and legal compliance

4. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we rely on one or more of the following legal bases:

  • Contractual necessity: to process your order and provide services

  • Consent: for marketing or location services

  • Legal obligation: to comply with legal and licensing requirements

  • Legitimate interests: to improve our services and ensure site security

5. MARKETING COMMUNICATIONS

We may send you updates or promotions only if you have opted in. You can unsubscribe at any time by:

  • Clicking the unsubscribe link in emails

  • Contacting us at info@toastleeds.co.uk

We never sell your personal data to third parties.

6. WHO WE SHARE YOUR INFORMATION WITH

We may share your data with trusted third parties for the following purposes:

  • Payment processors (e.g. Stripe)

  • IT service providers (e.g. app or website platforms)

  • Analytics providers (e.g. Google Analytics)

  • Law enforcement or regulators where required by law

All third parties are required to process your data in accordance with UK GDPR and only for specified purposes.

7. DATA RETENTION

We keep your data only as long as necessary for the purposes for which it was collected, including legal, accounting or reporting obligations.

  • Order and payment records: typically retained for 6 years (for tax/legal reasons)

  • Marketing data: until you withdraw consent

  • Analytics data: anonymised where possible and retained in accordance with our cookie policy

8. YOUR RIGHTS UNDER UK GDPR

You have the following rights:

  • Access: Request a copy of your personal data

  • Rectification: Request correction of inaccurate data

  • Erasure: Ask us to delete your data (subject to legal exceptions)

  • Restriction: Request a temporary pause on processing

  • Objection: Object to data processing in certain situations

  • Portability: Request transfer of your data to another provider

  • Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at info@toastleeds.co.uk.

9. SECURITY OF YOUR DATA

We take appropriate security measures to protect your data from unauthorised access, loss, or misuse. While we use secure systems and third-party processors (such as encrypted payment gateways), no system is 100% secure.

10. INTERNATIONAL TRANSFERS

Some of our service providers may process data outside the UK. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or UK adequacy regulations.

11. CHILDREN’S PRIVACY

Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in legal, technical, or business practices. Updates will be posted on this page with a new effective date.

13. COMPLAINTS

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Helpline: 0303 123 1113

14. CONTACT US

If you have any questions about this Privacy Policy or your personal data, please contact:

Toast Bar
📍 Unit C, West Point, Wellington Street, Leeds, LS1 4JY
📧 Email: info@toastleeds.co.uk