Privacy Policy

1. Introduction

The Douglas Indian Bar & Restaurant ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to information collected through our website, our catering and birthday club enquiry forms, and any other interactions you have with us. By using our website and services, you consent to the practices described here.

2. Data Controller

The Douglas Indian Bar & Restaurant is the data controller for the purposes of UK GDPR. We are responsible for deciding how we hold and use personal data about you. Our contact details for data protection matters are: reservations@douglasindian.com or by post to The Douglas Hotel, Douglas, Isle of Man.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: first name, last name.
• Contact data: email address, phone number.
• Event data: birthday date, company name, office size.
• Order data: catering package preferences, guest count, event date.
• Technical data: IP address, browser type, pages visited (via cookies — see our Cookie Policy).

4. How We Use Your Data

We process your personal data only for lawful purposes, including:

• Processing catering inquiries and providing catering services.
• Administering the Birthday Inner Circle and delivering birthday offers.
• Sending you the Office Lunch Checklist and following up on your request.
• Sending newsletters and marketing communications, only where you have opted in.
• Responding to your enquiries and providing customer support.
• Maintaining records for accounting, tax, and legal compliance.

5. Lawful Basis for Processing

Under UK GDPR, our lawful bases for processing are:

• Consent (Article 6(1)(a)) — for newsletter subscriptions, birthday club membership, and the office report download.
• Contract (Article 6(1)(b)) — for processing catering orders and inquiries.
• Legitimate interests (Article 6(1)(f)) — for responding to enquiries and improving our services.
• Legal obligation (Article 6(1)(c)) — for tax and accounting record-keeping.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Catering inquiry data is retained for 24 months unless an ongoing customer relationship exists. Birthday club data is retained for the duration of your membership plus 12 months. You may request deletion at any time (see Section 9).

7. Sharing Your Data

We do not sell your personal data. We may share it with trusted third-party service providers who act as data processors on our behalf — for example, email delivery platforms, booking systems, and payment processors — strictly to operate our business. These parties are contractually bound to protect your data and process it only on our instructions.

8. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy regulations, in compliance with UK GDPR.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data ("right to be forgotten").
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for marketing.
• Right to withdraw consent — at any time, without affecting processing already carried out.

To exercise any of these rights, contact us at reservations@douglasindian.com.

10. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. For full details of the cookies we use and your choices, please see our Cookie Policy presented via the cookie consent banner on this site. You can manage your cookie preferences at any time.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data storage, access controls, and regular security reviews.

12. Complaints

If you believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We encourage you to contact us first so we can address your concerns directly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us at:

reservations@douglasindian.com

The Douglas Hotel, Douglas, Isle of Man