Privacy Policy

JHD Hospitality Limited (“we”, “us”, “our”) takes your privacy very seriously and we will comply with the UK’s Data Protection Act 2018, the General Data Protection Regulation (GDPR) and any other applicable data protection legislation when processing your personal data.

If you hear from us, we will be contacting you about something relevant and appropriate to your stated interest in us. If at any time you don’t feel we’ve lived up to that philosophy, please let us know by getting in touch with us.

This privacy policy (and any other documents referred to on it) (“policy”) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. ‘Personal data’ is information which relates to an identifiable individual.

Please take the time to read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. By using our services or our Sites your personal data will be processed as described in this policy.

We may make changes to this policy from time to time and any future changes will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy. By continuing to use our Sites the updates will apply to you.

  • What information do we collect from you?
  • Why do we collect this information?
  • Marketing
  • How long do we keep hold of your information?
  • Who might we share your information with?
  • Where will we store your personal data?
  • How will we make sure your personal data is secure?
  • What are your rights?
  • How can you access information we hold about you?
  • Changes to this Policy
  • Cookies
  • Contact Us

What information do we collect from you?

We may collect and process the following data about you when you fill in forms on any of our Sites, make reservations with us on our Sites, provide feedback on our Sites, subscribe to any of our services (including making a reservation online), search for a service, enter a competition promotion or survey (either on our Sites or at one of our locations), redeem an offer or promotion, or where you sign up to receive emails from us and/or updates about the development of JHD Hospitality Ltd or about upcoming events. The information you give us may include:

  • First Name
  • Surname
  • Full address
  • Postcode
  • Phone number
  • Email address
  • Date of birth
  • Gender (optional)
  • The amount you spend with us and what you purchase
  • Booking information

Special Category information.

In limited circumstances, we may need to record special category information such as information about allergies you have informed us about. We treat this sensitive information with appropriate care and confidentiality.

Information we collect from your use of our Site.

When you visit one of our Sites we may automatically collect the following information:

  • technical information, such as the Internet protocol (IP) address used to connect your device to the Internet, whereabouts you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service.

Why do we collect this information?

We process your personal information for the following reasons:

  • On the basis of our agreement with you in order to:
  • process information at your request to take steps to enter into a contract;
  • provide you with our products and services;
  • respond to your queries and comments;
  • process payments;
  • make deliveries;
  • maintain business and service continuity;
  • provide you with a gift card;
  • send service communications so that you receive a full and functional service and so we can perform our obligations to you. These may be sent by email or post or, if the circumstances require it, we may contact you by phone. These will include notifications about changes to our service.
  • On the basis of your consent:
  • where we rely on your consent for processing this will be brought to your attention when the information is collected from you.

You have the right to withdraw consent at any time. See the What are your rights? section below for more information.

  • In our legitimate interests of providing the best service and improving and growing our business we will process information in order to:
  • provide you with a personalised service;
  • improve our products and services;
  • keep our Site and systems safe and secure;
  • carry out internal operations including troubleshooting, research, statistical and survey purposes;
  • ensure that content from our Sites is presented in the most effective manner for you and for your computer;
  • understand our customer base and purchasing trends, including through the use of surveys and feedback, so we can provide everything you want from us;
  • make suggestions and recommendations to you and other users of any of our Sites about goods or services that may interest you or them;
  • defend against or exercise legal claims and investigate complaints; and
  • understand the effectiveness of our marketing.

We will carry out analytics to improve our products and services as set out above.

You have the right to object to processing carried out for our legitimate interests. See the What are your rights? section below for more information.

  • To comply with legal requirements relating to:
  • the provision of products and services;
  • data protection;
  • health and safety;
  • anti-money laundering;
  • fraud investigations;
  • assisting law enforcement; and
  • any other legal obligations placed on us from time to time.


We may use your information in our legitimate interests to provide you with information about goods, services, updates, events, offers or promotions that we feel may interest you. We may contact you by electronic means (e-mail or SMS) or by post with information about goods, services, updates, events, offers or promotions similar to those which were the subject of a previous sale or negotiations of a sale to you. We may also contact you where you have consented to receiving marketing from us.

We may use your information to send bespoke marketing communications to you so that you receive the most relevant information.

We may also use information collected from you in aggregated and anonymised form for the purposes of devising our marketing strategy. This data cannot be linked to you as an identifiable individual and so is no longer classed as personal data.

You have the right to object to processing carried out for our legitimate interests. See the What are your rights? section below for more information.

How long do we keep hold of your information?

We won’t keep hold of your personal information for longer than is reasonably necessary for the purpose it was collected or as otherwise required by law.

Who might we share your information with?

For the purposes set out in the ‘Why do we collect this information?’ section above, we will share your personal information with:

  • the following categories of third parties, some of whom we appoint to provide services, including:
  • business partners, subsidiaries, suppliers and sub-contractors for the performance of any contract we enter into with you;
  • analytics and search engine providers that assist us in the improvement and optimisation of our Site;
  • customer survey providers in order to receive feedback and improve our services;
  • mailing companies for the purposes of sending our marketing communications to you;
  • our IT service providers;
  • providers of scanning services for the purposes of scanning personal data that you provide us with on paper;
  • any member of our group, which means our subsidiaries.

Additionally, we will disclose your personal information to the relevant third party:

  • in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • if we are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to protect the rights, property, or safety of our customers, our regulator, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and prevention of money laundering and credit risk reduction.

We will not rent or sell your personal information to any other organisation or individual for their marketing purposes or the marketing purposes of third parties.

Where will we store your personal data?

At JHD Hospitality, we take your safety and security very seriously and we are committed to protecting your personal and financial information. All information kept by us is stored on our secure servers.

Personal data is held and maintained in a customer database located in the United Kingdom including details of which communications, if any, individuals have opted in to receive. Importantly, the database is kept up to date with any requests to delete, amend or access personal data logged, recorded and actioned. The database is primarily used to communicate to individuals on promotions, services and products where permission to do so has been obtained. In so doing, the option to unsubscribe from future email communication is provided.

In addition, data is sometimes aggregated for profiling purposes to help us better understand our customers and guide the style and content of our communications.

We do not transfer your data outside the European Economic Area (“EEA”). If in future we do need to transfer your data outside the EEA, we will only do so if adequate protection measures are in place in compliance with data protection legislation and will update this policy with information on how you can access copies of the measures we put in place.

How will we make sure your personal data is secure?

We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We will delete your personal information when it is no longer required for the purposes it was collected.

All information you provide to us is stored on our secure servers.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Sites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Where we have given you (or where you have chosen) a password that enables you to access certain parts of our Sites, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

What are your rights?

Where processing of your personal data is based on consent, you can withdraw that consent at any time.

You have the following rights. You can exercise these rights at any time by emailing us at or writing to us at Data Request, Marketing Department, Alec’s Restaurant Bar and Grill, Navestock Side, Essex, CM14 5SD.

You have the right:

  • to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;
  • to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;
  • to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest.
  • to request from us access to personal information held about you;
  • to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
  • to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children’s data and was collected in relation to an offer of information society services;
  • to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing);
  • to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.

Sometimes you may be asked to provide proof of identity before we exercise your personal data rights.

Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here:

Changes to our privacy policy

This policy may be updated from time to time. Please check back frequently to see any updates or changes to our privacy policy.


Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the website. We use cookies and similar technology to distinguish you from other users of our Site. This helps us to provide you with a good experience when you use our Site and also allows us to improve our Site.

We use the following cookies:

  • ci_session: This is an integral cookie used to handle “browsing sessions”. It does not collect any personal data and simply allows the application to send messages between sessions (so error messages on forms), and also helps with various security features on the site; and
  • Google Analytics: We use Google Analytics to help us collect and assess this information. Google Analytics stores information such as which pages you visit, how long you are on the Site, how you got here and what you click on. The information is anonymous and cannot be used to identify you. To opt out of Google Analytics cookies please visit

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Site.

Contact us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Marketing Department, Alec’s Restaurant Bar and Grill, Navestock Side, Essex, CM14 5SD or

For the purposes of the applicable data protection legislation, the controller is JHD Hospitality Ltd., The Station House, 15 Station Road, St. Ives, Cambs, United Kingdom, PE27 5BH.


Policy Date: May 2019