Privacy Policy

Last Updated: May 16, 2026

The Three Tuns (Hay-on-Wye) Limited, trading as The Three Tuns ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or dine at our establishment.

Company Registration Number: 11175146
Registered Address: 4 Broad Street, Hay-on-Wye, Herefordshire, HR3 5DB, United Kingdom

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Make a reservation online or by phone
• Sign up for our newsletter or mailing list
• Contact us via email or contact form
• Participate in surveys or promotions
• Leave reviews or feedback

This information may include:

• Name
• Email address
• Phone number
• Reservation details (date, time, party size)
• Dietary requirements or special requests
• Payment information (processed securely through third-party payment processors)

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visit

2. How We Use Your Information

We use the information we collect to:

• Process reservations: Confirm bookings, send reminders, and manage table availability
• Communicate with you: Respond to inquiries, send updates about your reservation, and provide customer service
• Improve our services: Understand how visitors use our website and identify areas for improvement
• Marketing: Send promotional emails about special offers, events, or new menu items (only with your consent)
• Legal compliance: Comply with applicable laws and regulations
• Dietary requirements: Ensure we can accommodate your needs safely

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Understand how you use our website
• Improve website functionality
• Analyze website traffic and usage patterns

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers: Third-party companies that help us operate our business (e.g., reservation systems, email marketing platforms, payment processors). These providers are contractually obligated to protect your information.
• Legal requirements: When required by law, court order, or government regulation
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure
• Encrypted data transmission (SSL/TLS)
• Regular security audits
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Under UK GDPR and data protection laws, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another organization
• Object: Object to processing of your personal information for direct marketing
• Withdraw consent: Withdraw consent for processing where we rely on consent

To exercise any of these rights, please contact us using the details provided below.

Marketing Communications

You can opt out of receiving marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at hello@three-tuns.com

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Reservation data: Retained for 2 years after your last visit for customer service and operational purposes
• Marketing data: Retained until you unsubscribe or request deletion
• Financial records: Retained for 7 years to comply with UK tax and accounting regulations
• Website analytics: Anonymized after 26 months

8. Third-Party Links

Our website may contain links to third-party websites including:

• Social media platforms (Facebook, Instagram)
• Review sites (TripAdvisor, Google Reviews)
• Mapping services (Google Maps)
• Reservation systems

We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this page
• Sending an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

---

This Privacy Policy applies to The Three Tuns (Hay-on-Wye) Limited website (www.three-tuns.com) and services. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller: The Three Tuns (Hay-on-Wye) Limited
Parent Company: Lonsdale and Lonsdale Limited
Directors: David Lonsdale, Lewis Lonsdale, Daniel Heele