The WatersideBar · Rooms · Restaurant
Reserve a Table Reserve a Room
Reserve a Table Reserve a Room
Legal

Privacy Policy

Last updated: 24 September 2026

1. Who we are

This website is operated by Waterside Bar Restaurant, trading as Waterside, of 1 Parrin Lane, Monton, Manchester, M30 8AN (“Waterside”, “we”, “us”, “our”), a trading name of Cromptons Limited, registered in England and Wales under company number 04215926. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Waterside is the data controller for personal data collected through this website.

Contact: info@watersidebarrestaurant.com. Waterside’s registration with the ICO as a data controller is currently in progress — registration reference: [ICO REGISTRATION REFERENCE — PENDING]. See the Legal Notice for full detail.

2. What data we collect

We collect the following categories of personal data:

  • Contact form data — name, phone number, email address, and any message content you submit via our contact form.
  • Christmas booking form data — name, phone number, email address, preferred date and time, celebration type, party size, and any message or dietary/allergy details you provide.
  • Technical data — IP address, browser type, device type, and pages visited, collected automatically by our hosting provider for security and reliability purposes.
  • Correspondence — if you email or otherwise contact us directly, we keep a record of that correspondence.

Table reservations and room bookings are made through third-party booking platforms (see Section 4) and are not collected directly by this website. We do not run our own advertising or analytics tracking on this website, and we do not sell personal data, to anyone, ever. Pages on this site do display Tripadvisor widgets, which are loaded directly from Tripadvisor (see Sections 4 and 8).

3. How we use your data, and our lawful basis

  • Responding to enquiries — to reply to messages sent via the contact form or Christmas booking form. Lawful basis: consent (Art. 6(1)(a) UK GDPR) and, where an enquiry concerns a potential booking, our legitimate interest in progressing that booking (Art. 6(1)(f)).
  • Fulfilling a booking — where you make a Christmas booking or reservation with us, to perform that booking. Lawful basis: performance of a contract (Art. 6(1)(b)).
  • Keeping this site secure and working — to detect abuse, prevent fraud, and maintain the reliability of the site. Lawful basis: legitimate interests (Art. 6(1)(f)).
  • Legal compliance — where we’re required to keep records (for example, for tax purposes). Lawful basis: legal obligation (Art. 6(1)(c)).

4. Who we share your data with

We keep the number of third parties who can access your data to a minimum. Data submitted through our contact and Christmas booking forms is processed by:

  • Netlify, Inc. — our website hosting and form-submission provider. Netlify processes form submissions on our behalf as a data processor. See Netlify’s privacy policy.

If you make a table reservation or room booking, that booking is handled directly by our third-party booking platforms, who act as independent data controllers for the information you provide to them:

  • Dojo — used for table reservations.
  • eviivo — used for room bookings.

Please refer to their own privacy policies for how they handle your data.

This site also displays Tripadvisor’s Travellers’ Choice badge and a scrolling reviews banner. Because these widgets are loaded directly from Tripadvisor’s servers, Tripadvisor receives technical data (such as your IP address and browser details) when a page loads, and acts as an independent data controller for that data. Please refer to Tripadvisor’s own privacy and cookie policies, available on tripadvisor.co.uk.

Our Allergen Guide page displays a document embedded from Google Docs. Because it is loaded directly from Google’s servers, Google receives technical data (such as your IP address and browser details) when that page loads, and acts as an independent data controller for that data. Please refer to Google’s privacy policy.

We do not share your data with any other third party for marketing purposes, and we do not sell personal data.

5. International data transfers

Netlify’s infrastructure may process and store data outside the UK and European Economic Area, including in the United States. Where this occurs, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the data recipient’s certification under the UK Extension to the EU–US Data Privacy Framework. You can request further information about these safeguards by contacting us.

6. How long we keep your data

Contact and Christmas booking form enquiries are retained for no longer than 12 months from the date of your last contact with us, unless you go on to book with us, in which case data relevant to that booking is retained in line with our contractual and legal obligations (including UK tax record-keeping requirements, generally 6 years). We periodically review and delete data we no longer need.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Request erasure of your data
  • Restrict how we process your data
  • Object to processing based on legitimate interests
  • Receive your data in a portable format
  • Withdraw consent at any time
  • Lodge a complaint with the ICO

To exercise any of these rights, contact us at info@watersidebarrestaurant.com. We’ll respond within one month, as required by law.

If you’re unhappy with how we’ve handled your data, you have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or by phone on 0303 123 1113.

8. Cookies

We do not set advertising or analytics cookies of our own. Netlify may set a strictly necessary cookie to process form submissions securely (spam/bot filtering). The embedded Tripadvisor widgets are loaded from Tripadvisor’s servers and may set their own cookies or use similar technologies, which we do not control — see Tripadvisor’s own cookie policy for details. The same applies to the Google Docs document embedded on our Allergen Guide page. If we add analytics or marketing cookies in future, this policy — and a consent banner — will be updated accordingly before they go live.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including transmitting this site exclusively over HTTPS and limiting access to submitted data to those who need it to respond to your enquiry or booking.

10. Children’s privacy

This website is not directed at children. We do not knowingly collect personal data from anyone under 13.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The “last updated” date at the top of this page shows when it was last revised.