top of page

Privacy Policy​

 

Last updated: February 2026

This Privacy Policy explains how personal data is collected, used, stored, and protected by The Box Office Lounge, a restaurant located at 41 Torwood Street, Torquay, TQ1 1DZ, and owned and operated by Arena Torquay Ltd ("we", "us", "our").

​

We are committed to protecting your privacy and handling your personal data in a transparent and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
 

1. Who We Are (Data Controller)

  • Business name: The Box Office Lounge

  • Owner / Legal entity: Arena Torquay Ltd

  • Address: 41 Torwood Street, Torquay, TQ1 1DZ, United Kingdom

  • Email: info@boxofficelounge.co.uk

  • Telephone: 01803 467039

Arena Torquay Ltd is the data controller responsible for your personal data.

​

2. Personal Data We Collect

We may collect and process the following types of personal data:

  • Contact details – such as name, email address, phone number

  • Booking information – table reservations, special requests, dietary requirements

  • Payment information – payments are processed securely by third‑party providers; we do not store full card details

  • Communication data – emails, messages, or phone calls you send to us

  • Marketing preferences – if you choose to receive promotions or updates

  • CCTV footage – for safety, security, and crime prevention purposes

  • Website data (if applicable) – IP address, browser type, cookies, and usage data

​

3. How We Collect Your Data

We collect personal data when you:

  • Make a reservation in person, by phone, online, or by email

  • Visit or interact with our website or social media pages

  • Contact us with an enquiry or feedback

  • Sign up for marketing communications

  • Visit our premises where CCTV is in operation

​

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases to process personal data:

  • Contract – to manage reservations, orders, and customer services

  • Legal obligation – to comply with accounting, tax, or licensing laws

  • Legitimate interests – to operate our business, improve services, and ensure security

  • Consent – for marketing communications where required

​

5. How We Use Your Personal Data

We use your data to:

  • Manage bookings and customer requests

  • Provide food, drink, and hospitality services

  • Communicate with you about reservations or enquiries

  • Process payments and maintain financial records

  • Improve our services and customer experience

  • Send marketing communications (only where you have opted in)

  • Maintain safety and security through CCTV monitoring

​

6. Marketing Communications

We will only send marketing communications where you have given consent or where permitted by law.

You can opt out at any time by:

  • Clicking the unsubscribe link in our emails, or

  • Contacting us directly using the details above

​

7. Sharing Your Data

We may share your personal data with:

  • Payment processors

  • Booking and reservation system providers

  • IT and website service providers

  • Professional advisers (accountants, legal advisers)

  • Law enforcement or regulatory authorities where legally required

All third parties are required to respect the security of your data and process it in accordance with the law.

​

8. International Transfers

We do not knowingly transfer personal data outside the United Kingdom. If any data is transferred internationally (for example, via third‑party service providers), appropriate safeguards will be in place in accordance with UK GDPR.

​

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements.

Typical retention periods include:

  • Reservation and customer communication data – up to 2 years

  • Financial records – 6 years (to comply with HMRC requirements)

  • CCTV footage – up to 30 days unless required for investigation

​

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data

  • Restrict processing of your data

  • Object to processing

  • Request data portability

  • Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details in Section 1.

​

11. Cookies and Website Use

If we operate a website, cookies may be used to improve functionality and user experience. You will be provided with cookie information and choices where required by law.

​

12. CCTV

CCTV is in operation on our premises for the purposes of crime prevention, public safety, and staff protection. Footage is securely stored and accessed only by authorised personnel.

​

13. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

​

14. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

​

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available upon request or on our website (if applicable).

If you would like, I can:

  • Add a cookie policy section

  • Tailor this for online ordering / delivery apps

  • Format it for website use or PDF printing

  • Review it against your actual booking and payment systems

bottom of page