This Privacy Policy explains how The Everest Cheltenham of 3-5 Portland St, Cheltenham, GL52 2NZ ("we", "us", "our") collects and uses your personal information when you use our website, place an order, make a booking or otherwise contact us.
We are committed to protecting your privacy and handling your information in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
1. Who we are
The Everest Cheltenham is the "data controller" responsible for your personal information.
You can contact us by phone on 01242 221334, by email at dine@theeverest.co.uk, by post at 3-5 Portland St, Cheltenham, GL52 2NZ.
2. Information we collect
We collect information you give us when you use our website or services, including:
- Your name, contact details and delivery address when you place an order or make a booking;
- Your order details, such as the items you buy and any notes or dietary requirements you tell us;
- Account details if you create an account, including your email address and a securely stored password;
- Messages you send us through our contact or enquiry forms;
- Limited technical information from the strictly necessary cookies that keep the website working and secure (see our Cookies Policy). We do not use analytics or advertising cookies to track how you browse.
We do not collect or store your full payment card details — card payments are handled securely by our payment provider.
3. How we use your information
We use your personal information to:
- Take, prepare and fulfil your orders and bookings;
- Contact you about your order, booking or enquiry;
- Take payment and, where needed, provide refunds;
- Manage your account and any loyalty rewards;
- Improve our website, menu and service;
- Send you marketing messages where you have agreed to receive them;
- Meet our legal and tax obligations and keep proper business records.
4. Our legal bases
We rely on the following legal bases to use your information: performance of a contract (to fulfil your order or booking); our legitimate interests (to run and improve our business and keep it secure); your consent (for marketing messages, which you can withdraw at any time); and legal obligation (for example to keep records for tax purposes).
5. Marketing
We will only send you marketing messages by email or SMS where you have agreed to receive them. You can opt out at any time using the unsubscribe link in our emails, by replying to a message, or by contacting us. Opting out of marketing will not stop service messages about an order or booking you have placed.
6. Who we share your information with
We do not sell your personal information. We share it only where necessary to run our service, including with:
- Our payment provider (Stripe) to process card payments securely;
- Our email and messaging providers to send order confirmations, booking updates and, where you have agreed, marketing;
- Our website and hosting providers who operate the platform this website runs on;
- Delivery staff or partners where needed to deliver your order;
- Professional advisers and authorities where we are required to do so by law.
These providers act on our instructions and are required to keep your information secure.
7. How long we keep it
We keep your personal information only for as long as we need it for the purposes described above, and to meet our legal and accounting obligations. Order and transaction records are typically kept for several years for tax purposes. When we no longer need your information, we securely delete or anonymise it.
8. Keeping your information secure
We use appropriate technical and organisational measures to protect your information, including secure (encrypted) connections and restricted access. No system can be completely secure, but we take reasonable steps to protect your data and to respond to any issue.
9. Your rights
Under UK data protection law you have the right to: access the personal information we hold about you; ask us to correct information that is wrong; ask us to delete your information in certain circumstances; object to or restrict how we use it; withdraw consent where we rely on it; and ask for a copy of certain information in a portable format.
To exercise any of these rights, please contact us using the details below. We will respond within the time limits set by law.
10. Complaints
If you have a concern about how we handle your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised "last updated" date.
12. Contact us
You can contact us by phone on 01242 221334, by email at dine@theeverest.co.uk, by post at 3-5 Portland St, Cheltenham, GL52 2NZ.
