1. Who we are
Steam Wine Bar is operated by Steam Wine Bar Ltd, a company registered in England and Wales, with its registered venue address at 1 St George's Lane, London, EC3R 8DJ. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Steam Wine Bar Ltd is the data controller for the personal information we collect about you.
If you have any questions about this policy, or wish to exercise any of the rights set out below, please contact us:
- By email: info@steamwinebar.co.uk
- By post: Steam Wine Bar Ltd, 1 St George's Lane, London, EC3R 8DJ
- By telephone: 020 7929 0819
2. What data we collect
We only collect information that is necessary to operate the venue, fulfil your bookings, and communicate with you in the way you have asked us to. Specifically, we may collect:
Booking and event enquiry data
- Your name, company name (where relevant), email address, and phone number
- Details of the event or booking you are enquiring about, including dates, guest numbers, dietary requirements, and any accessibility needs
- Payment details for event tickets and private hire deposits (processed by our payment provider, Stripe: we never store full card numbers ourselves)
Newsletter and marketing data
- Your name and email address, submitted voluntarily via our website forms or at the venue
- Engagement data (whether you opened an email, clicked a link, unsubscribed)
Website and technical data
- IP address, browser type, device type, approximate location (city level), and pages viewed
- Cookie identifiers (see our Cookie Policy)
3. How we use your data
We use your personal data for the following purposes, each underpinned by a lawful basis under UK GDPR:
- To fulfil your booking or event enquiry (lawful basis: contract). Includes confirming bookings, sending reminders, responding to private hire enquiries, and managing your attendance on the day.
- To send you marketing communications (lawful basis: consent, where you have opted in; or legitimate interest, for existing customers who have not opted out). You can withdraw this consent at any time using the unsubscribe link in any email we send, or by contacting us directly.
- To comply with legal obligations (lawful basis: legal obligation). Includes retaining financial records for tax purposes and responding to lawful requests from authorities.
- To improve our website and services (lawful basis: legitimate interest). Includes analytics, anti-fraud measures, and monitoring website performance.
4. Who we share your data with
We never sell your personal data. We share it only with carefully selected third parties who help us operate the venue, and only for the specific purpose set out below:
- Stripe: to process card payments for event tickets and private hire deposits
- Our email marketing platform: to send you newsletters and event updates you have opted into
- Google Analytics: to understand how visitors use our website in aggregate (see our Cookie Policy)
- Our hosting provider: which stores website data and booking records securely on our behalf
- Professional advisers: our accountants, auditors, and legal advisers, where required
- Law enforcement or regulators: only where we are legally required to do so
All third parties we work with are bound by contract to protect your data and to use it only for the purposes we have instructed.
5. How long we keep your data
We keep your data only for as long as we need it:
- Event booking records: kept for up to 6 years after the event, in line with HMRC requirements for financial records
- Private hire enquiries that did not convert: kept for 12 months, then deleted
- Newsletter subscribers: kept until you unsubscribe, plus a short suppression period so we do not accidentally re-add you
- Website analytics: aggregated and anonymised after 14 months
6. Your rights under UK GDPR
You have the following rights in relation to your personal data. To exercise any of them, please contact us at info@steamwinebar.co.uk. We will respond within one month.
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: ask us to correct anything that is inaccurate or incomplete
- Right to erasure: ask us to delete your data (subject to our legal retention obligations)
- Right to restrict processing: ask us to pause processing while a query is resolved
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time
If you are unhappy with how we have handled your data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113). We would ask you to raise the concern with us first so we can try to resolve it.
7. Cookies
Our website uses a small number of cookies for analytics and to remember your preferences. Full details, including how to opt out, are set out in our Cookie Policy.
8. International transfers
Some of our service providers (including analytics and email platforms) may transfer data outside the UK. Where this happens, we rely on either UK adequacy regulations, Standard Contractual Clauses, or the UK International Data Transfer Addendum to make sure your data remains protected to UK GDPR standards.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent version. If we make material changes, we will notify subscribers by email.