top of page

Privacy Policy

This privacy policy explains how The Lilley Arms ("we," "us," or "our") collects, uses, and protects any personal information you provide when you use our website or visit our premises. We are committed to ensuring that your privacy is protected and that your data is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR) and other relevant data protection laws.

 

1. Who We Are

​

The Lilley Arms is a traditional pub located in Lilley, Hertfordshire.

​

For the purpose of the UK GDPR, we are the 'data controller' of the personal information we collect and process.

​

Our Contact Details:

  • Name: The Lilley Arms

  • Address: West Street, Lilley, Luton, LU2 8LN

  • Email: info@thelilleyarms.co.uk

  • Telephone: 01462 768371

 

2. The Information We Collect

​

We may collect and process the following personal information about you:

  • Identity Data: Your name, title, and any other unique identifiers you provide to us.

  • Contact Data: Your email address, telephone number, and postal address.

  • Transaction Data: Details of products and services you have purchased from us, such as table bookings, event reservations, or gift voucher purchases.

  • Communication Data: Information you provide to us when you contact us via our website contact form, email, or telephone, including any feedback, complaints, or enquiries.

  • Technical Data: Information about how you use our website, including your IP address, browser type, and operating system. This is collected automatically through the use of cookies and website analytics.

  • CCTV Data: For security purposes, we operate CCTV on our premises to protect our customers, staff, and property.

 

3. How We Collect Your Personal Information

 

We collect data in the following ways:

  • Direct Interactions: You provide us with your personal information when you:

    • Make a booking or reservation.

    • Sign up for our newsletter or marketing communications.

    • Contact us with a query or complaint.

    • Participate in a competition or promotion.

  • Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies and other similar technologies.

 

4. How and Why We Use Your Information

 

We will only use your personal data when the law allows us to. Most commonly, we use your data for the following purposes:

  • To provide services to you: To manage your table bookings, event reservations, and any other services you request from us.

  • To communicate with you: To respond to your enquiries, feedback, or complaints.

  • To send you marketing communications: If you have given us your consent, we will send you information about our events, special offers, and news. You can withdraw your consent at any time.

  • To improve our website and services: We use analytics to understand how visitors use our website, which helps us to improve our online experience.

  • For security and safety: We use CCTV to monitor our premises for the prevention and detection of crime, and to ensure the safety of our patrons and staff.

​

Our legal bases for processing your data include:

  • Performance of a contract: To fulfil our obligations when you make a booking or purchase a service.

  • Legitimate interests: Where it is necessary for our business to operate effectively, as long as your interests and fundamental rights do not override those interests (e.g., CCTV for security).

  • Consent: When you explicitly agree for us to process your data for a specific purpose, such as for marketing communications.

  • Legal obligation: When we need to comply with a legal or regulatory requirement.

 

5. How We Protect and Store Your Information

 

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third-party partners who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

​

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

 

6. Your Legal Rights

 

Under the UK GDPR, you have the following rights in relation to your personal data:

  • The right to be informed: You have the right to be told about the collection and use of your personal data.

  • The right to access: You can request a copy of the information we hold about you.

  • The right to rectification: You can ask us to correct any information you believe is inaccurate or incomplete.

  • The right to erasure: You can ask us to delete your personal data in certain circumstances.

  • The right to restrict processing: You have the right to ask us to stop processing your personal data in certain circumstances.

  • The right to object to processing: You have the right to object to us processing your personal data in certain circumstances.

  • The right to data portability: You can ask for your personal data to be transferred to you or another organisation.

 

If you wish to exercise any of these rights, please contact us using the details provided above.

 

7. Third-Party Links

 

Our website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

 

8. Changes to This Privacy Policy

 

We may update this policy from time to time. The most current version will always be posted on this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

 

This policy was last updated on 11 September 2025.

bottom of page