Privacy policy

This privacy policy explains how Latimers ( “we”, “us”, “our”) uses your personal data when you use https://latimers.co.uk (the “website”) and when you join our opening waitlist. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The data controller responsible for your personal data is Latimers, trading as Latimers, at 45 Latimer Street, Romsey, Hampshire SO51 8DF, United Kingdom.

Email: hello@latimers.co.uk
Website: https://latimers.co.uk

Personal data we collect

When you join the waitlist, we may collect:

• Identity and contact: first name, last name, email address, and optionally your phone number.
• Preferences: optional date of birth, if you choose to provide it for a birthday offer.
• Consent records: confirmation that you agreed to receive emails from us, and the time you gave that consent.

When you use the website, our hosting provider may process technical data such as your IP address, browser type, and request timestamps in server logs. We use IP addresses briefly to reduce abuse of the waitlist form (rate limiting). That processing is held in server memory for a short period and is not stored in our waitlist records.

We do not intentionally collect special category data (such as health information) through this website. Please do not send sensitive information in free-text fields.

How we collect data

We collect personal data when you:

• submit the waitlist form on the website;
• email us at hello@latimers.co.uk; or
• interact with us on social media (where that platform's own privacy policy also applies).

How and why we use your data

We use your personal data for the following purposes:

• to add you to our waitlist and contact you about our opening, bookings, and related news you have asked to receive;
• to send a birthday message or offer if you provided a date of birth;
• to respond to enquiries and maintain our relationship with you as a guest or prospective guest;
• to protect the website from spam and abuse, including rate limiting by IP address;
• to comply with legal obligations and to establish, exercise, or defend legal claims.

Lawful bases

Under UK GDPR, we rely on the following lawful bases:

• Consent (Article 6(1)(a)): to send you marketing emails about Latimers, including opening news and booking information, where you have ticked the consent box on the waitlist form. You may withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)): to operate and secure the website, prevent fraud and abuse, and keep basic operational records. Our legitimate interests do not override your rights where the law requires us to protect them.
• Legal obligation (Article 6(1)(c)): where we must retain or disclose data to comply with UK law.

Who we share your data with

We do not sell your personal data. We may share it with trusted service providers who process data on our instructions, including:

• Website hosting (for example Vercel, Inc.) to run this website and its API;
• Email and marketing platforms we use to store waitlist sign-ups and send emails (for example a mailing-list or customer-engagement provider), when connected;
• Professional advisers (such as lawyers or accountants) where reasonably necessary;
• Authorities if required by law, court order, or to protect rights and safety.

Each provider is required to protect your data and only use it for the services they provide to us, under a written contract where UK GDPR requires it.

International transfers

Some providers may process data outside the UK, including in the United States. Where that happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or another mechanism recognised under UK law.

How long we keep your data

• Waitlist and marketing: until you unsubscribe, ask us to delete your data, or we no longer need it for the purpose you consented to, and in any event within a reasonable period after you last engaged with us (typically up to 24 months unless a longer period is justified, for example for ongoing guests).
• Server and security logs: for a short period defined by our hosting provider's retention settings.
• Legal and accounting records: for as long as UK law requires.

Your rights

Under UK data protection law, you have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request erasure in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests or for direct marketing;
• withdraw consent at any time (without affecting processing before withdrawal);
• request data portability, where applicable; and
• lodge a complaint with the Information Commissioner's Office (ICO).

To exercise your rights, email hello@latimers.co.uk. We may need to verify your identity before responding. We aim to respond within one month, as required by law.

ICO website: ico.org.uk/make-a-complaint

Marketing and unsubscribe

We only send marketing emails where you have opted in. Every marketing email will include a way to unsubscribe. You can also email hello@latimers.co.uk at any time to opt out.

Children

This website and waitlist are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have collected such data, please contact us and we will delete it.

Security

We use appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and limiting what we log (for example, we log a hashed identifier for waitlist sign-ups rather than storing your email in application logs). No method of transmission over the internet is completely secure.

Third-party links

The website may link to third-party sites (such as Instagram or Facebook). Those sites have their own privacy policies. We are not responsible for how they handle your data.

Cookies

We use a limited approach to cookies on this website. For details, see our cookie policy.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page shows when it was last revised. Material changes will be posted on this website. Please check this page periodically.