1. Data Controller
The data controller for this website is The Cross Inn, Strawberry Lane, Penally, Tenby, Pembrokeshire, SA70 7PU. Contact: crossinnpenally@yahoo.co.uk
2. What Data We Collect
We may collect the following personal data:
- Name, phone number, and email address (when you contact us or make a booking)
- Website usage data (via cookies and analytics — see our Cookie Policy)
- Any information you voluntarily provide via email or phone
3. How We Use Your Data
We use your personal data to:
- Process table bookings
- Respond to enquiries and provide customer service
- Improve our website and services through analytics
- Comply with legal obligations
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:
- Consent: Where you have given clear consent (e.g. marketing cookies, GDPR checkbox on forms)
- Contract: Where processing is necessary to fulfil a booking or order
- Legitimate interests: Where processing is necessary for our legitimate business interests (e.g. improving our services)
5. Data Processors
We use the following third-party services that may process your data:
- Netlify: Website hosting and form submissions (USA, with EU Standard Contractual Clauses)
- Google Analytics 4 (GA4): Website analytics and usage tracking
- Google Tag Manager (GTM): Tag management for analytics
- Meta Pixel: Marketing and advertising analytics
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Booking and order data is retained for up to 12 months. Analytics data is retained according to the default retention periods of each analytics platform.
7. Your Rights
Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. For full details, see our Your Rights page.
8. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint
9. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page. Last updated: April 2026.
10. Contact Us
For any data protection queries, contact us at: crossinnpenally@yahoo.co.uk