Privacy Policy
This Privacy Policy explains how Thirsty Willow Bars (“we”, “us”, “our”) collects, uses, and protects your personal information when you use our website or contact us about mobile bar services.
Data controller
Thirsty Willow Bars Ltd — Dorset, UK
Contact: enquiries@thirstywillowbars.co.uk
What we collect
- Enquiries (site pop-up form or email): your name, email, phone number, and event details (date, venue/location, guest count, event type, notes).
- Marketing preference: if you tick the optional updates box in our enquiry form.
- Operational logs: standard web server logs (IP address, user-agent, URL, timestamp) and error logs for security and debugging.
- Business records: proposals, invoices, and correspondence related to bookings.
We do not run analytics or advertising trackers, and we do not use non-essential cookies.
How we use your data
- To respond to enquiries, prepare quotes, and provide bar services for your event.
- To send occasional updates/offers only if you opted in.
- To operate, secure, and troubleshoot our website and email (e.g., server logs, abuse/attack detection).
- To maintain legal and financial records (e.g., accounting and tax).
Legal bases under UK GDPR
- Contract: handling enquiries, providing quotes, and performing agreed services.
- Consent: sending optional updates/marketing when you explicitly opt in (you can withdraw consent anytime).
- Legitimate interests: website security, preventing fraud/abuse, improving services, and keeping lightweight operational logs.
Sharing your data
We do not sell your data. We share personal data only when necessary to run our business:
- Hosting & infrastructure: our website is hosted on servers we administer with HTTPS (Let’s Encrypt).
- Email delivery: enquiry notifications are delivered through standard email infrastructure to our team mailbox.
- Professional advisers: accountants or legal advisers where required by law.
Where third-party providers are used, we seek appropriate data protection safeguards and processing under our instructions.
Retention
- Enquiry emails/forms: kept for up to 12 months for follow-up and service quality. If you opt in to updates, your email is kept until you unsubscribe or request deletion.
- Booking records & correspondence: kept for up to 7 years to meet accounting/tax obligations.
- Server logs: kept for up to 30 days (longer only when investigating security incidents).
Security
- HTTPS/TLS across the site; modern security headers where supported.
- Least-privilege server access, firewalling, and regular updates.
- Form submission to our endpoint or email; no passwords collected via public forms.
No system can be 100% secure, but we use reasonable technical and organisational measures to protect personal data.
Your rights
Under UK GDPR you may have the right to access, correct, delete, or restrict processing of your personal data, to object in certain situations, and to withdraw consent where processing relies on consent. To exercise your rights, contact enquiries@thirstywillowbars.co.uk.
Cookies & analytics
We do not currently use non-essential cookies or analytics. If we introduce privacy-friendly analytics in future, we’ll update this page and, where required, provide controls for consent.
Children
Our services and website are not directed to children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page.
Last updated:
Contact
Questions about this policy or your data? Email enquiries@thirstywillowbars.co.uk.