Watt Bar Logo

Privacy Policy

Last updated: September 2026

Watt Bar & Kitchen ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you visit our website [insert website address], make a booking or enquiry, or visit us in person.

1. Who We Are

Watt Bar & Kitchen
Address: 150 Charles Street, Sheffield City Centre, Sheffield, S1 2NE
Email: [email protected]
Phone: 07850 238152

We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What Information We Collect

We collect personal information when you:

  • Submit a booking or enquiry via our website, by phone, or in person
  • Make a table booking through ResDiary, our online booking system
  • Contact us by phone or email
  • Browse our website (via Koko Analytics)
  • Interact with an embedded Google Map on our website
  • Visit our venue, where areas are covered by CCTV for the safety and security of guests and staff

The data we may collect includes:

  • Name
  • Email address
  • Phone number
  • Booking details (date, time, party size, and any special requests, such as dietary requirements or accessibility needs)
  • Technical data (browser type, IP address, device type, pages visited, etc.)
  • CCTV footage, where you visit our premises

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiries
  • To take, confirm, and manage table bookings and private event enquiries
  • To accommodate dietary requirements, allergies, and accessibility needs you tell us about
  • To send booking confirmations or reminders (where you have consented)
  • To improve our website through usage analytics
  • To maintain the safety and security of our premises, staff, and guests via CCTV

We will never sell your personal data to third parties, and we will not use it for any purpose other than those listed above without first obtaining your consent.

4. Legal Basis for Processing

We process your personal data under the following lawful bases under the UK GDPR:

  • Contractual necessity: To take and manage a booking you have requested.
  • Consent: When you opt in to receive marketing or booking-related communications.
  • Legitimate interest: For business administration, venue security, and to improve the user experience of our website.
  • Legal obligation: Where we are required to retain data for accounting, tax, licensing, or food safety compliance purposes.

Where you tell us about an allergy or dietary requirement (which may be classed as health data, a special category of personal data), we process this on the basis of your explicit consent, solely to prepare your food and drink safely.

5. Website Analytics

We use Koko Analytics, a self-hosted, privacy-friendly analytics plugin, to collect anonymised information about how visitors use our website — for example, which pages are visited and how many people visit.

  • Koko Analytics does not use cookies and does not collect or store personally identifiable information.
  • All analytics data is stored on our own website's server, not shared with third parties, and is used solely to help us understand and improve website performance.

6. Booking and Contact Forms

Our website's booking and contact forms collect your name, phone number, email address, and any booking or enquiry details you provide, so that we can respond to your enquiry and manage your booking. This information is sent to us and stored securely; it is not shared with third parties except as set out in Section 12.

7. ResDiary Booking System

We use ResDiary, a third-party table booking and reservation platform, to manage bookings made through our website, by phone, or in person.

  • When you make a booking, ResDiary collects and stores your name, email address, phone number, and booking details (date, time, party size, and any notes such as dietary requirements or special occasions) on our behalf.
  • ResDiary acts as our data processor for the purposes of taking and managing your booking, and does not use your data for its own marketing purposes.
  • If you have opted in to receive marketing communications from us, ResDiary may be used to send these on our behalf; you can opt out at any time using the unsubscribe link in any marketing email, or by contacting us directly.
  • Where our website includes an embedded ResDiary booking widget, ResDiary may set cookies to allow the booking process to function — see Section 14 (Cookies) below.
  • ResDiary is a UK-based provider. You can read the ResDiary Privacy Policy at: https://www.resdiary.com/privacy-policy

8. Spam and Security Protection

[If the website uses a bot/spam-protection service on its forms — for example Google reCAPTCHA or Cloudflare Turnstile — name it here and link to its privacy policy, as this typically involves a third party processing technical data such as your IP address.]

9. Google Maps

Our website includes an embedded map provided by Google Maps, a service operated by Google LLC, to help you find our venue.

  • When you interact with or load the embedded map, Google may set cookies and collect data including your IP address and location data. This is governed by Google's own privacy policy.
  • We use a click-to-load approach where possible, meaning the Google Maps embed only activates when you choose to interact with it — helping to minimise data collection until you explicitly request the map.
  • Data collected via Google Maps may be transferred to and processed in the United States. Google LLC is certified under the UK–US Data Bridge.
  • You can read Google's Privacy Policy at: https://policies.google.com/privacy
  • Alternatively, you can view our location directly on Google Maps without loading an embed on our website.

10. CCTV

For the safety and security of our guests, staff, and premises, CCTV operates in and around our venue. Footage is retained for a limited period and is only accessed by authorised staff, or shared with the police or our insurers where necessary — for example, following an incident. Signage is displayed on our premises where CCTV is in operation.

11. How We Store and Protect Your Data

We take the security of your personal data seriously. Your information is protected using:

  • Encrypted storage and transmission (HTTPS/SSL)
  • Password-protected devices and systems
  • Restricted access — only staff who need your data to carry out their role can access it

Your data is retained only for as long as is necessary for the purpose it was collected, or as required by law (for example, financial records must be retained for six years under HMRC rules, and allergen-related records are kept in line with food safety guidance). Once data is no longer required, it is securely deleted.

12. Sharing Your Data

We do not sell your personal data. We may share it only with trusted third parties where it is necessary to run our business, including:

  • IT and hosting providers: For the operation and security of our website
  • ResDiary: To take, confirm, and manage your table booking, and to send booking-related or marketing communications where you have consented. See Section 7 above.
  • Email and communication platforms: To send related communications not handled through ResDiary
  • Google LLC: Via Google Maps (map embed functionality on our website). Google acts as a data processor for this service. Data may be transferred to the United States under the UK–US Data Bridge framework.
  • Police or insurers: Where necessary in connection with an incident captured on CCTV

All third parties with whom we share data are bound by data protection obligations in accordance with UK law. We do not transfer your data outside the UK without ensuring appropriate safeguards are in place.

13. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access: To request a copy of the personal data we hold about you
  • Right to rectification: To request that we correct inaccurate or incomplete data
  • Right to erasure: To request that we delete your personal data ("right to be forgotten")
  • Right to restrict processing: To request that we limit how we use your data
  • Right to object: To object to processing based on legitimate interests
  • Right to data portability: To receive your data in a portable format
  • Right to withdraw consent: At any time, where processing is based on your consent

To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within one calendar month.

14. Cookies

Our website uses a small number of cookies. The cookies we may set include:

  • Essential cookies: Required for the website to function correctly (e.g., form security tokens). These cannot be disabled.
  • Analytics (Koko Analytics): Cookie-free — no cookies are set by this platform.
  • ResDiary: If our website includes a ResDiary booking widget, ResDiary may set cookies to allow the booking process to function correctly across steps.
  • Google Maps: If you load the embedded map on our website, Google may set cookies. These are third-party cookies governed by Google's own cookie policy.

You can manage or disable non-essential cookies at any time through our cookie consent notice (if present) or through your browser settings.

15. Third-Party Links

Our website may contain links to third-party websites (for example, ResDiary, Google Maps, review platforms, or social media). This privacy policy applies only to our website. We are not responsible for the privacy practices of any third-party sites and encourage you to read their policies before submitting any personal data.

16. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance at [email protected] and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator:

17. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be published on this page with an updated date at the top. We encourage you to review this policy periodically.

If we make significant changes that affect how we use your personal data, we will take steps to notify you — for example, by displaying a notice on our website.

Watt Bar & Kitchen | 150 Charles Street, Sheffield City Centre, Sheffield, S1 2NE | [email protected] | 07850 238152