Privacy Policy

What we collect

• Booking details — your name, email address, number of tickets, and the event you're booking, so we can hold your reservation and contact you about it.
• Allergy & dietary information — anything you tell us about allergies or dietary requirements for your party. Because this can reveal information about your health, we treat it with extra care: we use it only to plan the menu and keep you safe, we share it only with our kitchen team, and we delete it shortly after the event.
• Payment information — payments are processed by Stripe. Your card details go directly to Stripe and never touch our systems; we receive only confirmation of payment.
• Waitlist & mailing list details — your name and email address if you register interest in an event or sign up to hear from us.
• Website usage — with your consent, we use Google Analytics cookies to understand how visitors use the site. You can accept or decline these when you first visit, and decline them at any time (see Cookies below).

How we use it, and our legal grounds

• To take and manage your booking, confirm it by email, and run the event — necessary to perform our contract with you.
• To cater safely for allergies and dietary needs — with your consent, given when you provide the information.
• To contact you about future events when you've joined our waitlist or mailing list — with your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
• To keep records of transactions — to meet our legal obligations, including tax and accounting rules.
• To understand site usage via analytics — with your consent, given through the cookie banner.

Who we share it with

We never sell your personal information. We share it only with the services that help us run Heronn:

• Stripe — payment processing (see Stripe's privacy policy).
• Google — we store booking and sign-up details in Google Workspace tools, load fonts from Google Fonts, and use Google Analytics with your consent (see Google's privacy policy).
• Framer — our website hosting platform (see Framer's privacy statement).

Some of these providers process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses.

Cookies

We use a small number of cookies. Essential cookies keep the site working and remember your cookie choice. Analytics cookies (Google Analytics) are set only if you accept them in the cookie banner when you first visit. You can change your mind at any time — clear your cookies for heronn.co, or email us and we'll help.

How long we keep it

• Booking and payment records — up to 6 years, as required for tax and accounting purposes.
• Allergy and dietary information — deleted shortly after the event it relates to.
• Waitlist and mailing list details — until you unsubscribe or ask us to remove you.

Your rights

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you've given. To exercise any of these rights, email hello@heronn.co and we'll respond within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. Significant changes will be flagged to you by email where we hold your address.