Privacy Policy

1. Who We Are

The Bagel Bistro is a bagel shop located at 145A Camden Road, Tunbridge Wells TN1 2RA. We are a trading name of Rexaus Group Ltd, whose registered address is Unit 2, Long Barn, Mouseden Farm, Halls Hole Road, Tunbridge Wells TN2 4RF.

For any data protection queries, please contact us at info@thebagelbistro.co.uk or call 01892 487271.

2. What Information We Collect

In Short: We collect information you provide to us directly, as well as certain information that is collected automatically when you visit our website.

We collect personal information in the following ways:

Information You Provide to Us

When you use our contact form or subscribe to our email mailing list, we may collect:

• Your name
• Your email address
• Your phone number (if provided)
• Any other information you choose to include in your message

We collect this information only when you voluntarily submit it to us. You are under no obligation to provide any personal information, but we may not be able to respond to your enquiry if you do not.

Information Collected Automatically

Like most websites, we automatically collect certain technical information when you visit, use, or navigate our website. This information does not directly reveal your specific identity but may include:

• Log and Usage Data: Service-related, diagnostic, and performance information that our servers or hosting provider may automatically collect. This may include your IP address, browser type and settings, the date and time of your visit, pages viewed, and referring URLs.
• Device Data: Information about the computer, phone, tablet, or other device you use to access our website, which may include your IP address, device type, operating system, and browser type.
• Location Data: We may collect general location data such as your country or city, based on your IP address. We do not collect precise GPS-based location data.
• Analytics Data: We use analytics tools (such as PostHog and/or Google Analytics) which collect anonymised or pseudonymised data about how visitors interact with our website, including pages viewed, session duration, and user journeys. Please refer to our Cookie Policy for further details.

3. How We Use Your Information

In Short: We process your information for purposes based on legitimate business interests, compliance with our legal obligations, and/or your consent.

We use the information we collect for the following purposes:

• To respond to your enquiries: When you submit a contact form, we use your name and email address to respond to your message.
• To send marketing communications: If you subscribe to our email mailing list, we will use your email address to send you updates, offers, and news about The Bagel Bistro. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at info@thebagelbistro.co.uk.
• Website security: To keep our website safe and secure, including monitoring for potential threats or suspicious activity.
• Website performance and analytics: To understand how visitors interact with our website and to maintain and improve its performance.
• Legal compliance: To comply with applicable laws, regulations, or legal processes.

4. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases for processing your personal data:

• Consent: When you submit a contact form or subscribe to our mailing list, you are giving us your consent to process your personal data for the specific purpose stated. You have the right to withdraw consent at any time by contacting us at info@thebagelbistro.co.uk or by using the unsubscribe link in any marketing email.
• Legitimate interests: We may process automatically collected data (such as IP addresses and analytics data) when it is reasonably necessary to achieve our legitimate business interests, such as maintaining website security and understanding how our website is used, provided those interests are not overridden by your rights. Where cookies or analytics technologies require user consent under applicable law, we will only process such data after the user has provided their consent through our cookie consent mechanism.
• Legal obligation: We may process your data where we are legally required to do so.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: We retain your name, email address, and message for up to 12 months from the date of your enquiry, unless ongoing correspondence requires a longer period.
• Email mailing list: We retain your email address for as long as you remain subscribed. Upon unsubscribing, your data will be removed within 30 days.
• Analytics data: Anonymised analytics data may be retained for up to 24 months.
• Server logs: Automatically collected log data is typically retained for up to 90 days.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it.

6. Online Ordering via Yoello

When you click our order buttons, you are redirected to our ordering platform at pay.yoello.com/v/bagelbistro, which is powered and operated by Yoello. Yoello is a third-party service that handles all online ordering, order now & collect, and payment processing on our behalf.

Please note the following:

• Any personal information you provide during the ordering process (such as your name, contact details, or payment information) is collected and processed by Yoello, not by The Bagel Bistro.
• We do not have access to, store, or retain any customer payment details or personal data submitted through Yoello.
• Yoello acts as an independent data controller for the personal data it collects through its platform.
• Yoello’s own privacy policy governs how your data is handled during the ordering and payment process. We strongly encourage you to review Yoello’s privacy policy before placing an order.

7. EPOS System

We use Yoello for our EPOS (Electronic Point of Sale) system in-store. Any transactional data processed through our EPOS system is managed by Yoello in accordance with their data processing agreements and privacy policy. We do not independently store customer details from EPOS transactions.

8. Website Hosting

Our website is hosted by Vercel Inc. (“Vercel”) on their Pro plan. As part of providing hosting services, Vercel may automatically collect server logs which include IP addresses and basic technical information for security and performance purposes. This data is processed in accordance with Vercel’s Privacy Policy, which can be reviewed at vercel.com/legal/privacy-policy. Vercel may process data outside the United Kingdom under appropriate safeguards.

9. Will Your Information Be Shared with Anyone?

In Short: We only share information where necessary to comply with laws, to protect our rights, or to fulfil business obligations.

We may need to disclose information in the following situations:

• Legal obligations: We may disclose information where we are legally required to do so, such as in response to a court order, subpoena, or request from a regulatory authority.
• Vital interests: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, or situations involving potential threats to safety.
• Business transfers: In the event of a merger, sale of company assets, or acquisition, your information may be transferred as part of that transaction.
• Third-party service providers: We may share your information with third-party service providers who perform services on our behalf, such as email marketing platforms, analytics providers, or hosting providers (including Vercel). These providers are contractually obligated to use your data only for the purposes for which it was shared and in accordance with this privacy policy.

10. Cookies and Tracking Technologies

In Short: We may use cookies and other tracking technologies to collect and store information.

We may use cookies and similar tracking technologies to access or store information. For full details about what cookies we use and how you can manage them, please refer to our separate Cookie Policy.

11. Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — to request copies of any personal data we hold about you.
• Right to rectification — to request correction of any inaccurate personal data.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restriction of processing — to request we limit how we use your data.
• Right to data portability — to request transfer of your data to another organisation.
• Right to object — to object to our processing of your personal data.
• Rights related to automated decision-making — to not be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at info@thebagelbistro.co.uk. We will respond to your request within one month, in accordance with UK GDPR requirements. If you have placed an order through Yoello, you should direct any data rights requests relating to that transaction to Yoello directly.

13. Complaints

If you wish to make a complaint about how your personal data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office: ico.org.uk
Telephone: 0303 123 1113

14. Children’s Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete that information as quickly as possible.

15. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in technology, legislation, or our business practices. The updated version will be indicated by an updated “Last updated” date. We encourage you to review this privacy policy periodically.

16. Contact Us

If you have any questions or concerns about this privacy policy, please contact us:

The Bagel Bistro
145A Camden Road, Tunbridge Wells TN1 2RA
Email: info@thebagelbistro.co.uk
Phone: 01892 487271

Rexaus Group Ltd (Registered Office)
Unit 2, Long Barn, Mouseden Farm, Halls Hole Road, Tunbridge Wells TN2 4RF

Company No. 10855607