The controller responsible for the personal information described in this notice is Black Lake Leisure Limited, trading as The Black Lake Inn (“we”, “us” or “our”). Our trading address is Hilderstone Road, Meir Heath, Stoke-on-Trent, Staffordshire ST3 7NT and our registered office Chimneys House, Warner Street Hanley Stoke on Trent St1 3DH.
This notice applies from 26th October 2026 and covers the website, bookings, voucher sales, enquiries, marketing and customer service. It does not replace privacy information supplied by an independent booking, payment, delivery or social-media provider for its own processing.
- Identity and contact details, such as name, email address, telephone number, postal address and recipient details for a voucher.
- Booking and visit details, including date, time, party size, preferences, special requests, attendance and communications.
- Order and transaction information, including voucher value, order number, payment status and refund history. Payment providers generally process full card details; we receive limited confirmation and transaction data.
- Information you give us about allergies, dietary needs, accessibility requirements or assistance dogs. Some of this may reveal health or disability information.
- Correspondence, feedback, complaints, competition entries and records of customer service.
- Technical and usage information, such as IP address, device/browser information, cookie identifiers, pages viewed and referral source, depending on your cookie choices.
- Images from CCTV where it is operated at the premises, and incident records where needed for safety, security or legal claims.
- Public interactions with our social-media pages and information a platform makes available to us under your settings.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Bookings, vouchers, orders and refunds | Contact, booking, transaction and correspondence data | Contract; steps at your request before contract; legal obligation |
| Enquiries and customer service | Contact details, correspondence and visit/order context | Legitimate interests in answering customers and managing service |
| Food allergies, accessibility and safety | Information supplied about health, disability, diet or assistance needs | Contract and legitimate interests; explicit consent where special-category data is needed; vital interests in an emergency |
| Accounting, tax, fraud prevention and legal claims | Identity, transaction, payment status, correspondence and incident data | Legal obligation; legitimate interests in protecting the business and legal rights |
| Service improvement and aggregate reporting | Feedback, booking trends and consented analytics data | Legitimate interests for non-intrusive analysis; consent for non-essential cookies/technologies where required |
| Email or SMS marketing | Name, contact details, preferences and engagement | Consent, or the limited existing-customer rule where legally available; you may opt out at any time |
| Premises and staff safety | CCTV and incident records | CCTV and incident records Legitimate interests in security, safety and prevention/detection of crime |
You may decline optional information, but we may be unable to complete a booking, sale or request if information needed for the contract, safety or law is not provided.
Please provide only information needed for your visit. Where you voluntarily tell us about an allergy, health condition or disability so that we can make arrangements, we use it for that request and, where required, rely on your explicit consent. You can withdraw consent, but this does not affect earlier lawful use and may mean we cannot safely provide the requested arrangement. In an emergency, information may be used or shared where necessary to protect someone’s vital interests.
Most information comes directly from you. We may also receive it from a person booking for your party, a voucher purchaser, ResDiary (online booking provider), our website and cookie tools, social-media platforms, or publicly available sources where appropriate.
- Booking, payment, voucher, website-hosting, email, IT support, analytics and communications providers acting under contract or as independent controllers.
- Professional advisers, insurers, banks, auditors and prospective purchasers or operators where necessary and subject to appropriate confidentiality and data-protection steps.
- Police, regulators, courts, local authorities or other bodies where disclosure is required by law or reasonably necessary for safety, crime prevention or legal claims.
- Another person in your party where reasonably necessary to administer the booking, while avoiding unnecessary disclosure of sensitive information.
We do not sell personal information.
Some service providers may store or access information outside the UK. Where this happens, we will use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and apply additional protections where required. Contact us for more information about safeguards relevant to your data.
We keep information only as long as reasonably necessary for the purpose, legal obligations and claims. Proposed periods below must be confirmed against the operator’s systems and retention schedule.
| Record | Typical retention |
|---|---|
| General enquiries not leading to a transaction | 12 months after the enquiry closes |
| Booking records and routine correspondence | 24 months after the visit, unless needed longer for a complaint or claim |
| Allergy/accessibility notes attached to a booking | Delete or minimise shortly after the visit, normally within 30 days, unless an incident or legal need requires longer |
| Voucher and financial transaction records | Normally 6 years after the relevant accounting period or transaction, subject to tax/legal requirements |
| Marketing list | Until opt-out or after 24 months of inactivity, with a minimal suppression record retained to respect opt-outs |
| CCTV | Normally 30 days, longer only for an incident, investigation or claim |
| Cookie data | As stated in the cookie settings/table after the website cookie audit |
The website uses strictly necessary technologies to operate. Non-essential analytics, advertising, social-media or embedded-content technologies will be used only in accordance with applicable consent requirements. The cookie banner should offer equally clear “Accept”, “Reject” and “Manage choices” controls, keep optional technologies off before consent, and allow choices to be changed later.
You can unsubscribe at any time using the link in a message or by contacting us. Service messages about a booking, order, safety issue or policy change are not marketing. We will not require marketing consent as a condition of completing an ordinary booking or purchase.
We use proportionate technical and organisational measures to protect personal information, restrict access and manage suppliers. No internet service is completely secure. Please do not send full payment-card details or unnecessary sensitive information by ordinary email or contact form.
Depending on the circumstances, you may have rights to be informed; access your information; correct inaccurate information; request erasure or restriction; object to processing; receive certain information in a portable format; and withdraw consent. Some rights are limited by exemptions and the lawful basis used.
Your right to object
You may object at any time to direct marketing. You may also object to processing based on legitimate interests; we will stop unless we can show compelling legitimate grounds or the processing is needed for legal claims.
To exercise a right, please contact us. We may request reasonable evidence of identity. There is normally no fee, and we will respond within the period required by law.
The website is not directed at children, and we do not knowingly collect children’s information for direct marketing. A parent or responsible adult should make bookings and purchases. If information about a child is necessary for a booking, allergy or accessibility request, provide only what is needed and ensure you are authorised to do so.
Information collected before 26th October 2026 was controlled by Black Lake Inn. The incoming operator will use historic customer information only if it is lawfully transferred and an appropriate lawful basis and transparency notice apply. Historic marketing consents will not simply be assumed to transfer. If we receive personal information as part of the business transition, affected individuals will be told where required, and records that are unnecessary or cannot lawfully be retained will be deleted or returned.
Please contact the supervisor on-site first if you have a concern. You also have the right to complain to the Information Commissioner’s Office (ICO) or by calling 0303 123 1113. We may update this notice as services, suppliers or law change. The latest version will show its effective date; material changes will be highlighted where appropriate.