This Privacy Policy explains what personal data The Fox at Walton (“we”, “us”, “our”) collects when you use foxatwalton.com, book a table, enquire about staying with us, buy a gift voucher, or get in touch — and what we do with it. We are committed to handling your information carefully and only using it for the reasons set out below.
The Fox at Walton is operated by Ivy House Pub Co Ltd, Hall Park Road, Walton, Wetherby LS23 7DQ. We are the data controller for the personal data we collect via this website.
What we collect, and why
When you book a table
Restaurant bookings on this site are taken through ResDiary. They collect your name, contact details, party size, date and time of booking, and any dietary or seating notes you give them. We use this to hold and prepare for your reservation. ResDiary’s own privacy notice covers how they store and process this information on our behalf.
When you enquire about a room
Room availability and bookings on the Rooms page are handled by Smoobu. They collect the same kind of details (name, dates, contact info, any special requests) so we can manage your stay.
When you buy a gift voucher
Voucher orders are processed through WooCommerce on our site and paid for through Stripe. We collect your name, email, postal address (if you’ve asked us to post the voucher) and order details. Stripe handles the payment itself — we never see or store your card details. If you’ve chosen Royal Mail delivery we’ll share your name and address with Royal Mail so they can post the voucher.
When you contact us
If you email us, call, or use a contact form on the site, we keep what you send us only for as long as we need to answer you and resolve anything that follows from your message.
When you use the website
We use Google Analytics (GA4) to understand how many people visit the site, which pages are popular, and where there are problems we can fix. This only happens if you accept cookies on the banner you saw when you first arrived. Analytics data is aggregated and never used to identify you personally.
Lawful basis
We rely on the following lawful bases under UK GDPR:
- Contract — to fulfil bookings, room stays and voucher orders you’ve placed.
- Legitimate interests — to respond to your enquiries and to keep our website working properly.
- Consent — for non-essential cookies such as Google Analytics. You can change your choice at any time using the “Cookie preferences” link in the footer.
- Legal obligation — to keep order and financial records for HMRC for the period required by law.
How long we keep your data
- Booking records: typically up to 24 months after your visit, then deleted.
- Room enquiries and stays: up to 24 months after the stay, then deleted.
- Voucher orders: kept for 6 years for tax/accounting purposes, after which they are deleted.
- Contact emails: typically deleted once the conversation has resolved, unless there’s a reason to keep them.
- Analytics data: retained for 14 months in Google Analytics, then automatically deleted.
Who we share your data with
We share the minimum necessary with the suppliers who help us run the business. None of them sell your data:
- ResDiary — for restaurant table bookings.
- Smoobu — for room enquiries and stays.
- Stripe — for processing voucher payments.
- Royal Mail — for posting physical vouchers.
- Google — for website analytics, if you’ve consented.
- Our email provider — for sending order confirmations and replies.
We do not sell, rent, or trade your personal information to anyone, ever.
Cookies
A cookie is a small piece of data stored in your browser. We use:
- Essential cookies — required for the basket and checkout to work (WooCommerce session). These are always set.
- Preference storage — we remember your cookie consent choice in your browser’s local storage so we don’t ask again on every page.
- Analytics cookies — only set if you’ve accepted them. Used by Google Analytics 4 to count visits and understand site usage.
You can change your consent any time by clicking Cookie preferences at the bottom of any page, or by clearing your browser data.
Your rights
Under UK GDPR you have the right to:
- Ask us what data we hold about you (a “subject access request”).
- Ask us to correct anything that’s wrong.
- Ask us to delete your data, where we don’t have a legal reason to keep it.
- Withdraw consent for cookies at any time.
- Object to or restrict how we use your data.
- Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you’re unhappy with how we’ve handled your data.
To exercise any of these rights, email us at info@foxatwalton.com and we’ll respond within one month.
Changes to this policy
If we change anything material in this policy we’ll update the date at the top of the page. For significant changes (for example, adding a new service that handles your data differently) we’ll let you know more visibly.
Get in touch
Any questions about how we handle your data, email info@foxatwalton.com or call 01937 842 192.