Privacy policy.

1. Who we are

This policy covers the website robertthompson.co.uk and the personal data we collect when you deal with our restaurants: RT Café Grill, Thompson’s and The Cellar, all at Royal Maritime House, Ryde.

We are Wight Table Limited, a company registered in England and Wales (company number 08519683). Registered office: The Quay, 30 Channel Way, Ocean Village, Southampton, SO14 3TG. Trading address: Royal Maritime House, 17 St Thomas Street, Ryde, Isle of Wight, PO33 2DL.

For the purposes of UK data protection law, Wight Table Limited is the data controller for the personal data described here.

2. What we collect, and when

When you…	We collect
Book a table	Name, email, phone, date and time, party size, dietary requirements, occasion, and a card to hold the booking where a deposit applies. Bookings are taken through SevenRooms.
Enquire about The Cellar or an event	Name, email, phone, preferred date, guest numbers, occasion, and whatever you tell us about the event.
Sign up to the newsletter	Email address, which interests you tick (Thompson’s dates, wine evenings, The Cellar, Christmas), and a record of your consent: the date and time, the page you signed up from, and your confirmation click.
Buy or use a gift voucher	The buyer’s name and email; the recipient’s name, and their email or postal address if you ask us to send it to them; your message; the amount and the voucher code. When a voucher is used in the restaurant we record the amount, the date and which member of the team took it. Card details go straight to Stripe; we never see the full number.
Visit the restaurant	CCTV on the premises, for security only.
Browse the website	Technical data that any website receives: IP address, browser and pages viewed. We also keep our own count of page visits and of clicks such as “Book a table”, without cookies and without anything that identifies you. Google Analytics only if you accept it. See section 9.

3. How we use your information

• To run your booking: confirm it, remind you, note dietary needs and occasions, take and refund deposits.
• To answer you: Cellar and event enquiries, general questions, press requests.
• To send the newsletter, only if you have opted in and confirmed your address: Thompson’s dates, wine evenings, seasonal menus, gifting reminders. Roughly monthly.
• To take payment for deposits and gift vouchers, and to send the voucher and its receipt.
• To improve the site, using anonymous, aggregated analytics.
• To meet legal duties: tax, accounting and food safety records.
• To keep the premises and the team safe, through CCTV.

4. Our legal basis

• Contract: bookings and gift vouchers.
• Consent: the newsletter and any non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: running and improving the business, preventing fraud, security of the premises. We only rely on this where it is reasonable and does not override your rights.
• Legal obligation: tax, accounting and food-safety law.

5. Who we share it with

We do not sell personal data. We share it only with the services we use to run the business, each of which processes it on our instructions:

• SevenRooms: reservations and guest records.
• Netlify: hosts the website. It receives your IP address when a page loads, as any web server does.
• Stripe: takes card payments for gift vouchers. Stripe is the controller of the card details you give it.
• Amazon Web Services (Amazon SES, London): sends the newsletter, the confirmation email when you sign up, gift voucher emails, and our replies to private dining enquiries and festive pre-orders.
• Supabase: our own secure database, hosted in London. It holds the mailing list and its consent records, website enquiries, gift vouchers and our own visit counts.
• Bunny.net: the content network that serves the photographs and short films on the site. It receives your IP address when an image loads, as any web server does.
• Google Fonts: serves the typefaces on the site. Google receives your IP address when a font loads.
• Google Analytics: only if you press Accept on the cookie banner.
• Our accountants and auditors, for financial records.
• Regulators or the police, only where the law requires it.

6. How long we keep it

• Booking records: up to three years after your last visit, so we can recognise you and remember preferences.
• Newsletter: until you unsubscribe. We keep the record of your original consent for a period afterwards so we can show it was given. If an email to you bounces or you mark one as spam, we keep your address on a do-not-email list so it is not written to again.
• Gift vouchers: for the 12 months a voucher is valid, then with the transaction records below.
• Enquiries: up to two years after the last exchange.
• Transaction records: at least six years, as HMRC requires.
• CCTV: up to 30 days, then overwritten, unless kept for an active investigation.

7. Your rights

Under UK GDPR you can ask to access the data we hold about you, correct it, delete it (in most circumstances), object to processing including direct marketing, restrict processing, withdraw consent at any time, and receive your data in a portable format. You can also complain to the Information Commissioner’s Office.

To use any of these, email info@robertthompson.co.uk. We reply within one month.

8. Newsletter and marketing

We only email you news if you have asked for it. When you sign up on the site we send one email to confirm it is really you; nothing else is sent until you click it. Every newsletter has an unsubscribe link, and you can also email us to be removed. Unsubscribing does not stop the emails you need about a booking, an enquiry or an order.

We do not send marketing texts.

9. Cookies

A cookie is a small file the site stores on your device. This site uses two kinds:

Kind	What it does	Your choice
Strictly necessary	One cookie of our own, rt_consent, which remembers your answer to the cookie banner for a year. If you buy a gift voucher, Stripe sets its own cookies on its payment page to prevent fraud.	Always on; they carry out something you have asked for.
Analytics	Google Analytics tells us, in aggregate, which pages are read and how people arrive. It does not identify you to us, and advertising features are switched off.	Only if you press Accept on the banner. Decline keeps it off.

Our own visit count. Separately from cookies, the site counts page visits and clicks on buttons such as “Book a table”. It uses a random number kept in your browser for the length of your visit only, which is gone when you close the tab. It is not linked to your name, email or IP address and is never shared.

Links in our emails. A link in one of our newsletters carries the name of that issue and of the link, never anything about you. If you arrive that way, the site keeps the name for your visit only, notes it with any gift voucher you buy and passes it to SevenRooms with a booking, so we can tell which emails are worth sending.

We do not use advertising or social-media tracking cookies. When you book (SevenRooms), pay (Stripe) or follow a link to Instagram, their own cookie policies apply.

Changing your mind. Your choice is remembered on this device. To change it, clear the cookies for robertthompson.co.uk in your browser and the banner will ask again.

10. Photography in the restaurant

We photograph and film the food, the rooms and the team for the website and social media. We do not use pictures in which a guest is recognisable unless that guest has agreed. If you find yourself in a photograph you did not agree to, tell us and we will take it down.

11. Children

The website and the newsletter are not aimed at children, and we do not knowingly collect personal data from anyone under 16. Children are welcome in the restaurant; their booking details are handled under their parent’s or guardian’s name.

12. Data outside the UK

Supabase and Amazon SES hold our data in London. SevenRooms, Netlify, Stripe, Bunny.net and Google may process data in the United States or elsewhere. Where that happens, the transfer is covered by the UK’s adequacy decisions or by standard contractual clauses approved by the ICO, so your data keeps the same protection.

13. Security

Data is held on password-protected systems with access limited to the people who need it. Card payments are handled by Stripe and SevenRooms’ payment partners, which are PCI-DSS compliant, and we never see full card numbers. The newsletter, enquiry and voucher forms send your details over an encrypted connection to our own database, and the keys to our email and payment services are never in the web page. The staff pages that look up vouchers sit behind a PIN and lock after repeated wrong tries. No system is perfectly secure; if a significant breach ever happened we would tell you and the ICO promptly.

14. Changes to this policy

We update this page when something changes and move the date at the top. For a significant change we will tell newsletter subscribers directly.

15. Contact and complaints

Wight Table Limited, trading as Robert Thompson restaurants
Royal Maritime House, 17 St Thomas Street, Ryde, Isle of Wight, PO33 2DL
info@robertthompson.co.uk or 01983 526118

If you are not satisfied with our answer you can complain to the Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, SK9 5AF, 0303 123 1113, ico.org.uk.