Privacy Policy

Privacy Policy

Santorini Chichester — Last updated: June 2026

This policy explains how Santorini Chichester collects, uses, and protects your personal information when you visit our website, use our Santorini Chichester mobile app, or interact with us online. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Santorini Chichester is a restaurant based in Chichester, West Sussex, England. We are the data controller for the personal information collected through our website and mobile app.

If you have any questions about this policy or how we handle your data, please contact us:

2. What Personal Data We Collect

We collect personal data in the following ways:

Source Data collected Purpose
Contact form Name, email address, phone number (optional), message To respond to your enquiry
Table reservations / bookings Name, email address, phone number, party size, date & time, any dietary or access requirements you provide To confirm and manage your booking
Newsletter sign-up Email address To send you news, offers, and updates about Santorini Chichester
Mobile app (iOS) Name, email address, phone number (when booking), party size, date & time, special requests or notes, account identifier, device push notification token To sign you in, manage bookings, and send booking update notifications (if enabled)
Website analytics & cookies Device type, browser, pages visited, time on site, approximate location (country/city), IP address (anonymised where possible) To understand how visitors use our website and improve it

We do not collect sensitive personal data (such as health information) unless you voluntarily share dietary requirements or access needs when making a booking. Such information is used solely to prepare for your visit.

About the mobile app: You can sign in with Apple or Google. These services may provide your name and email address; Apple may offer a private relay email address. If you allow notifications, we store a device push token so we can send booking confirmations and updates. The app does not contain advertising, does not use your data for cross-app tracking, and has no in-app purchases.

3. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Contract – to process and manage your booking.
  • Legitimate interests – to respond to contact form enquiries and to understand how our website is used, where our interests do not override your rights.
  • Consent – to send you our newsletter (you can withdraw consent at any time), to place non-essential cookies on your device, and to send booking update notifications to the mobile app (you can turn notifications off in your device settings at any time).

4. Cookies and Analytics

Cookies are small text files stored on your device. We use the following types of cookies:

  • Essential cookies – necessary for the website to function (e.g. booking form sessions). These do not require your consent.
  • Analytics cookies – we may use a service such as Google Analytics to collect anonymised data about how visitors use our site. These are only set with your consent.
  • Marketing cookies – if we run advertising campaigns (e.g. via Meta/Facebook), a tracking pixel may be present. These are only activated with your consent.

When you first visit our website, you will be shown a cookie banner where you can accept or decline non-essential cookies. You can change your preferences at any time via the cookie settings link in the website footer.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

Note: The mobile app does not use website cookies. App sign-in and notifications are handled separately as described in section 2.

5. How We Use Your Data

We use your personal data only for the purposes described at the point of collection. Specifically:

  • To respond to your messages and enquiries.
  • To confirm, update, or cancel reservations.
  • To send you our newsletter (only if you have opted in).
  • To analyse website traffic and improve user experience.
  • To operate your mobile app account and sign you in securely.
  • To send booking update notifications when you have enabled them on your device.
  • To comply with legal obligations, such as fraud prevention.

We will never sell your personal data to third parties, and we will not use it for automated decision-making or profiling.

6. Who We Share Your Data With

We may share your data with trusted third-party service providers who help us operate our website, mobile app, and business, including:

  • Booking platform – to manage table reservations.
  • Email marketing provider – to send newsletters to subscribers who have opted in.
  • Analytics provider – such as Google Analytics, to analyse website usage.
  • Sign-in providers (Apple and Google) – to authenticate your account when you choose Sign in with Apple or Google in the app. Their use of your data is governed by their own privacy policies.
  • Push notification service (Google Firebase) – to deliver booking confirmations and updates to the mobile app. We do not use this for advertising.
  • App developer (Voltex Computers Limited) – to host and maintain the booking system and mobile app on our behalf.
  • Website hosting provider – to host and maintain this website.

All third-party providers are required to handle your data securely and in accordance with UK data protection law. We do not permit them to use your data for their own marketing purposes.

We may also disclose your information if required by law or to protect the rights, property, or safety of Santorini Chichester, our customers, or others.

7. How Long We Keep Your Data

Data type Retention period
Contact form enquiries Up to 12 months, then deleted
Booking records Up to 2 years for operational purposes, then deleted
Newsletter subscribers Until you unsubscribe or withdraw consent
Mobile app account data While your account is active and up to 2 years after your last booking, then deleted
Push notification tokens Until you sign out, delete the app, or disable notifications; removed when no longer needed
Website analytics data Up to 26 months, then deleted or anonymised

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access – you can request a copy of the personal data we hold about you.
  • Right to rectification – you can ask us to correct inaccurate or incomplete data.
  • Right to erasure – you can ask us to delete your data, subject to certain legal exceptions.
  • Right to restrict processing – you can ask us to limit how we use your data in certain circumstances.
  • Right to data portability – where processing is based on consent or contract, you can request your data in a portable format.
  • Right to object – you can object to processing based on legitimate interests or direct marketing at any time.
  • Right to withdraw consent – where we rely on consent (e.g. for newsletters or analytics cookies), you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@santorinichichester.co.uk or call us on 01243 696 300. We will respond within one month of receiving your request.

9. How to Make a Complaint

If you are unhappy with how we have handled your personal data, please contact us in the first instance so we can try to resolve the matter.

You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO):

10. Links to Other Websites

This privacy policy applies to our website and the Santorini Chichester mobile app. Our website and app may contain links to external sites or services (for example, social media platforms, Apple, or Google). We are not responsible for the privacy practices of third-party websites or services, and we encourage you to read their privacy policies before sharing personal data with them.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in the law or our practices. The current version will always be published on this page, with the “last updated” date shown at the top. We encourage you to check this page periodically.

12. Contact Us

For any questions, requests, or concerns about this privacy policy or your personal data, please get in touch:

Scroll to Top