Privacy Policy

Who We Are

Watermill Italian Kitchen is operated by THE WATERMILL CORNWALL LTD, a company registered in England and Wales.

If you have a question about this policy or how your information is handled, you can contact us using the details at the end of this page.

Information We Collect

The information we collect depends on how you use our website and contact us. It may include:

• Your name and contact details, such as your email address or telephone number.
• Details you provide when asking about our menu, making a reservation request or contacting the restaurant.
• Reservation preferences, including a requested date, time, party size and any information you choose to share about your visit.
• The content of messages you send to us and our replies.
• Basic technical information, such as browser type, device information, approximate location derived from your IP address and website usage data.
• Cookie preferences and related information where cookies or similar technologies are used.

Please avoid including unnecessary personal or medical information in general enquiries. If you tell us about a food allergy or dietary requirement, we will use that information only as needed to respond to your request and help manage your visit.

How We Use Your Information

We may use your information to:

• Respond to questions about our menu, opening arrangements or services.
• Process and manage table reservation requests and communicate any changes or confirmations.
• Discuss practical requirements for your visit, including dietary requests you choose to share.
• Maintain website security, troubleshoot technical issues and improve how our website works.
• Keep appropriate business records and meet legal or regulatory obligations.
• Send marketing messages only where we have a lawful basis and, where required, your consent.

We do not use enquiry details for unrelated purposes without a suitable lawful basis. You can ask us to stop sending direct marketing at any time.

Our Lawful Bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we may rely on:

• Steps taken at your request: for handling a reservation enquiry or taking steps before an arrangement is made.
• Legitimate interests: for responding to general enquiries, maintaining website security and managing our business, where those interests do not override your rights.
• Legal obligations: for keeping records or providing information where the law requires us to do so.
• Consent: for optional cookies or marketing activities where consent is required.

Where we rely on consent, you can withdraw it at any time. This does not affect processing that took place before consent was withdrawn.

Reservations and Enquiries

When you contact us about a table or submit a reservation request, we use the details you provide to review your request, contact you and communicate the outcome. A request is not necessarily a confirmed reservation unless we tell you that it has been accepted.

We may retain relevant correspondence so that we can follow up on your enquiry and keep an accurate record of arrangements. If you provide information about an allergy or dietary requirement, we use it to understand and respond to that request.

Please contact us directly if information you have supplied changes or if you need to correct a reservation detail.

Cookies and Similar Technologies

Our website may use essential cookies to support basic functions, security and your cookie preferences. These are used where necessary to provide the website or a feature you have requested.

Analytics, advertising or other non-essential cookies will only be used where the required consent has been obtained. You can manage available choices through our cookie settings and, where appropriate, through your browser settings.

Blocking some cookies may affect how certain parts of the website function. For more information, please read our Cookie Policy.

When Information Is Shared

We do not sell your personal information. We may share limited information with service providers where it is needed to operate our website and business, for example:

• Website hosting, maintenance and security providers.
• Email or communication services used to respond to enquiries.
• Reservation or booking providers, if used for your request.
• Professional advisers or public authorities where disclosure is required by law or is reasonably necessary to protect legal rights.

Service providers should only process information in accordance with our instructions and applicable data protection requirements. We share only the information reasonably needed for the relevant purpose.

International Transfers

Some service providers may process information outside the United Kingdom. Where a transfer is subject to UK data protection law, we will take the steps required for that transfer, which may include using an adequacy regulation or an appropriate safeguard such as the UK International Data Transfer Agreement or the UK Addendum, where applicable.

You can contact us if you would like further information about the safeguards relevant to a particular transfer.

How Long We Keep Information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including any applicable legal, accounting or record-keeping requirements.

• General enquiries: normally up to 12 months after the last meaningful contact.
• Reservation requests and related correspondence: normally up to 12 months after the visit or the date the request is closed.
• Marketing preferences and suppression records: while relevant to managing your preferences, with periodic review and deletion when no longer needed.
• Technical and security logs: normally up to 90 days, unless a longer period is reasonably needed to investigate an incident.
• Records required for legal, tax or accounting purposes: for the period required by the applicable law, which may be up to 6 years for relevant business records.

These are our intended retention periods. Information may be kept for longer where there is a genuine legal requirement or an ongoing matter that needs to be resolved. When it is no longer needed, we will securely delete it or remove identifying details where suitable.

Keeping Information Secure

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. Access is limited to people and service providers who need the information for their work.

No website or method of electronic storage can be guaranteed to be completely secure. If a personal data breach occurs, we will assess it and take any action required by applicable data protection law.

Your Data Protection Rights

Depending on the circumstances and the applicable law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information where there is no good reason for us to continue holding it.
• Request that we restrict certain processing.
• Object to processing based on legitimate interests or to direct marketing.
• Request a copy of information you provided to us in a commonly used, machine-readable format where the right to data portability applies.
• Withdraw consent where our processing relies on consent.

To make a request, contact us using the details below. We may need to verify your identity before responding. We normally respond within one calendar month of receiving a valid request. If a request is complex or we receive several requests, the law may allow us to extend this period by up to two further months. If so, we will let you know within the initial month.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, through its official website at ico.org.uk.

Children’s Information

Our website is intended for people making restaurant enquiries and planning visits. We do not knowingly collect children’s personal information for online marketing. If you believe a child has provided personal information to us unnecessarily, please contact us so that we can review the matter and take appropriate steps.

Links to Other Websites

Our website may contain links to third-party websites or services. Those websites have their own privacy practices, which we do not control. We recommend reviewing their privacy information before providing personal details.

Changes to This Policy

We may update this policy when our website, business practices or legal obligations change. The current version will be published on this page and will apply from the time it is made available. We encourage you to review this page occasionally.

Contact Us About Privacy

If you have a question about this policy, want to exercise a data protection right or need more information about how your details are handled, please contact us.