Privacy Policy

The Guild Chester ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website and our services, you consent to the practices described in this policy.

We may collect and process the following categories of personal data: • Contact details: name, email address, phone number • Booking details: date, time, number of guests, package selections, special requests • Newsletter subscriptions: email address and explicit consent • Website usage data: IP address, browser type, pages visited, referring URLs (collected via cookies and analytics) • Communications: records of enquiries, emails, and messages you send us

We process your personal data for the following purposes: • To process and manage bookings, enquiries, and reservations • To communicate with you about your booking or event • To send marketing communications where you have given explicit consent • To improve our website, services, and customer experience • To comply with legal and regulatory obligations • To maintain records for accounting and tax purposes

Under the UK GDPR, we rely on the following legal bases for processing your personal data: • Consent: where you have given clear consent for us to process your data (e.g. newsletter subscriptions) • Contract: where processing is necessary to fulfil a contract with you (e.g. processing a booking) • Legal obligation: where we are required to process data by law (e.g. tax records) • Legitimate interests: where processing is in our legitimate interests and does not override your rights (e.g. improving our services)

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. • Booking data is retained for 2 years after the event date • Newsletter subscriptions are retained until you unsubscribe • Accounting records are retained for 6 years as required by law • Website analytics data is retained for 12 months You may request deletion of your data at any time (see Your Rights below).

Under the UK GDPR, you have the following rights regarding your personal data: • The right to be informed about how we use your data • The right of access to your personal data • The right to rectification of inaccurate or incomplete data • The right to erasure ("right to be forgotten") • The right to restrict processing of your data • The right to data portability • The right to object to processing based on legitimate interests or direct marketing • Rights relating to automated decision-making and profiling To exercise any of these rights, please contact us at hello@theguildchester.com. We will respond within one month of receiving your request.

Our website uses cookies to improve your browsing experience, analyse website traffic, and provide certain functionality. Cookies are small text files stored on your device. • Essential cookies: required for the website to function correctly • Analytics cookies: help us understand how visitors use our site • Marketing cookies: used to deliver relevant advertising (only with your consent) You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the website.

We may share your data with trusted third-party service providers who help us operate our business: • Booking and event management platforms • Email service providers (for newsletter communications) • Analytics providers • Payment processors (for transactions) All third parties are bound by data processing agreements and must comply with the UK GDPR. We do not sell your personal data to any third party.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include: • Encryption of data in transit and at rest • Access controls and authentication • Regular security reviews • Staff training on data protection In the event of a data breach, we will notify the relevant supervisory authority and affected individuals as required by law.

Your personal data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or the UK International Data Transfer Agreement, to ensure your data is protected to UK GDPR standards.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any significant changes by posting the updated policy on this page and updating the "last revised" date below.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: The Guild Chester Watergate Street, Chester, CH1 2LA Email: hello@theguildchester.com Phone: 01244 320768 You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.