Privacy Notice

Last updated: 30 April 2026

About this notice
The Truro (“we”, “us”, “our”) is a restaurant based in the United Kingdom. This Privacy Notice explains what personal data we collect about you when you book a table, sign up to our loyalty programme, subscribe to marketing communications, or otherwise interact with us, and how we use, store, share and protect that data.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, The Truro is the data controller of your personal data.

If you have any questions about this notice or how we handle your personal data, please contact us at management@thetruro.co.uk.

Personal Data We Collect

1. Reservation Information
When you book a table with us, whether through our website, by phone, or through a third-party booking platform, we collect your name, contact details (telephone and/or email), the date and time of your reservation, party size, and any dietary requirements, allergies or special requests you choose to share. We use this information to manage your booking, contact you about it if needed, and ensure we can accommodate your needs safely.

2. Loyalty Programme Information
If you join our loyalty programme, we collect your name and contact details (such as phone number, email and home address), and information about your visits and purchases (such as date and time, location, items ordered, amounts paid, and any rewards earned or redeemed). Some fields may be mandatory and others optional. If you choose to link a social account, we may also receive basic profile information from it (such as your name, email and profile photo) — but never your password.
We use this information to operate the programme, identify you on visits, track your points or rewards, send you relevant offers, and analyse how the programme is used so we can improve it.

3. Marketing Sign-ups
If you opt in to receive marketing from us by email or SMS, we collect your name and contact details. We use these only to send you news, offers and updates relating to The Truro. We will not sell your contact details, nor share them with third parties for their own marketing purposes.

4. Website and Online Usage Information
If you use our website or any associated online ordering or booking platform, we automatically collect technical data about your device (such as IP address, device type and operating system) and information about how you interact with the site (such as pages viewed, links clicked and time spent). We use this information to operate, secure and improve our digital services.

5. Communications
If you contact us by email, phone, social media or other channels, we may keep a record of that correspondence so we can respond to you, deal with any complaint, and improve our service.

How We Use Your Personal Data

We use your personal data for the following purposes:

To take and manage your reservations and respond to enquiries about them
To operate and administer our loyalty programme, including identifying you on visits and managing rewards
To send you marketing communications you have signed up to receive
To understand how customers use our services so we can improve them and develop new offerings
To detect, prevent and investigate fraud, misuse of our services or other unlawful activity
To comply with our legal, regulatory, accounting and tax obligations

Lawful Bases for Processing (UK GDPR)

We rely on the following lawful bases under UK GDPR:

Performance of a contract — when we process your data to deliver a reservation, provide loyalty programme benefits you have signed up for, or otherwise perform our agreement with you.
Legitimate interests — when we use data to operate our business, improve our services, prevent fraud, and (where permitted) market our products and services to existing customers, having balanced our interests against your rights.
Consent — where we ask for it (for example, to send marketing emails or SMS, or to set non-essential cookies). You can withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.
Legal obligation — where we need to keep records or share data to comply with applicable laws, including tax, accounting and food safety requirements.

Sharing Your Personal Data

We share your personal data only where necessary, and only with parties who are required to keep it secure. The categories of recipients are:

Trusted service providers acting on our behalf, such as our reservation platform, loyalty programme provider, IT, hosting and security providers, email and SMS marketing platforms, and payment processors. They are bound by contract to protect your data and use it only on our instructions.
Professional advisers such as accountants, auditors and lawyers where reasonably required.
Public authorities where we are legally required to disclose information, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
A successor or buyer in the event of a sale, merger or restructuring of our business, in which case your data will continue to be protected on terms equivalent to this notice.

We do not sell your personal data.

International Transfers

Some of our service providers may be located outside the United Kingdom. Where we transfer your personal data outside the UK, we put in place appropriate safeguards required by UK data protection law — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or reliance on a UK adequacy decision. You can request more information about these safeguards by contacting us.

Cookies and Online Tracking

Our website uses cookies and similar technologies to make the site work, remember your preferences, measure usage, and (with your consent) deliver more relevant content and advertising. You can manage your cookie preferences through our cookie banner or through your browser settings. For more information please see our separate Cookie Notice.

Marketing Preferences

We will only send you marketing emails or text messages where you have given us consent or where we are otherwise permitted to do so under the Privacy and Electronic Communications Regulations (PECR). You can opt out at any time by:

clicking the unsubscribe link in any marketing email we send you,
replying STOP to any marketing SMS, or
contacting us at management@thetruro.co.uk.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this notice. As a general guide:

Reservation records — kept for up to 24 months after the date of your last booking, unless we need to keep them longer for legal or accounting reasons.
Loyalty programme data — kept for as long as your account is active, and for up to 24 months after it becomes inactive.
Marketing contact details — kept until you unsubscribe, after which we maintain a suppression record so we do not contact you again.
Financial and tax records — kept for at least 6 years in line with HMRC requirements.

We may keep data for longer where required to do so by law, or where we may need it to defend a legal claim.

Your Rights

Under UK GDPR you have a number of rights, which you can exercise free of charge in most cases by contacting us at management@thetruro.co.uk:

Right of access — to receive a copy of the personal data we hold about you.
Right to rectification — to ask us to correct inaccurate or incomplete data.
Right to erasure — to ask us to delete your data in certain circumstances (also known as the “right to be forgotten”).
Right to restrict processing — to ask us to limit how we use your data.
Right to data portability — to receive your data in a structured, commonly used, machine-readable format, or have it sent to another provider.
Right to object — to object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

We may need to verify your identity before responding to a request. We aim to respond within one month.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or misuse. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Please take care to protect your own passwords and devices.

Third-Party Services

Our website or app may contain links to, or use, third-party services (for example, social media platforms or external booking platforms). Their use of your personal data is governed by their own terms and privacy policies, which we encourage you to review.

Children

Our services are not directed at children, and we do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected such data, please contact us so we can delete it.

Service Communications

We may need to send you service-related messages (for example, to confirm or change a reservation, or to notify you about important account or loyalty programme updates). These are not marketing messages and you cannot opt out of them while you continue to use the relevant service.

Changes to this Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of the notice shows when it was last revised. Where changes are material, we will take reasonable steps to bring them to your attention.

Contact Us

If you have any questions about this notice, want to exercise any of your rights, or wish to raise a concern, please contact:
The Truro
Email: management@thetruro.co.uk