1. Who we are
This Privacy Policy explains how Steam Wine Bar Ltd (“Steam Wine Bar”, “we”, “us”, or “our”) collects, uses, and protects personal data when you visit our website, book an event, attend an event, contact us, or join our mailing list.
Data controller: Steam Wine Bar Ltd, 1 St George’s Lane, London, EC3R 8DJ, United Kingdom.
If you have any questions about this policy or your data, please contact us at events@steamwinebar.com or by phone on 020 7929 0819.
2. The data we collect
We only collect personal data that we genuinely need to deliver our service or to communicate with you. The categories below cover everything we might hold about you.
| Type of data | What it covers |
|---|---|
| Identity | First name, surname, title where given |
| Contact | Email address, phone number, billing address, company name where given |
| Booking | Event name, number of guests, dietary requirements, drinks package selected, special requests |
| Payment | Card payment metadata returned by Stripe (card brand, last four digits, transaction reference). We do not store full card numbers or security codes ourselves. |
| Communication | Email replies, enquiry form messages, telephone notes, post-event feedback |
| Marketing preferences | Whether you have opted in to our newsletter and event announcements, and any opt-out you have submitted |
| Technical | IP address, browser type, device type, pages visited on our website, referring source |
3. Why we collect it, and our lawful basis
UK GDPR requires us to identify a lawful basis for every kind of data processing. The table below covers ours.
| Purpose | Lawful basis |
|---|---|
| Taking and managing your event booking | Performance of a contract with you |
| Processing your payment for an event | Performance of a contract with you |
| Sending you booking confirmations, balance reminders, and event details | Performance of a contract with you |
| Replying to your enquiries | Legitimate interest (responding to a request) |
| Sending marketing emails about future events | Consent (you opted in), or legitimate interest where you are an existing customer of the same kind of service |
| Keeping financial records of bookings and payments | Legal obligation (UK tax and accounting law) |
| Improving the website and understanding what works | Legitimate interest, supported by limited cookie use |
4. Who we share data with
We use a small number of carefully chosen third party services to run the venue. These are the only organisations who routinely receive your personal data, and only the minimum needed for them to do their job.
| Processor | What they do for us |
|---|---|
| Stripe Payments Europe Ltd | Card and online payment processing for event bookings. Subject to Stripe’s own privacy policy. |
| HighLevel Inc. | Our customer relationship management and email marketing platform. Holds your name, contact details, booking history and marketing preferences for the purposes of sending you booking emails and any newsletter you have opted in to. |
| Microsoft Corporation | Email infrastructure for events@steamwinebar.com and other staff inboxes via Microsoft 365. |
| Hostinger International Ltd | Web hosting for steamwinebar.com and related subdomains. |
| Google Ireland Ltd | Where applicable, anonymous traffic analytics and embedded fonts and maps. |
We will only share your data with anyone else if we are legally required to (for example, by a court order, or to comply with HMRC), or if you have specifically asked us to.
We do not sell your personal data to anyone, ever.
5. International transfers
Some of the processors above are based outside the United Kingdom or the European Economic Area. Where this applies, we rely on the appropriate safeguards required by UK GDPR, including the UK International Data Transfer Addendum and Standard Contractual Clauses where relevant.
6. How long we keep your data
- Booking and transaction records: kept for six years after the end of the financial year in which the booking took place, in line with HMRC requirements.
- Marketing list (newsletter subscribers): kept until you unsubscribe or otherwise withdraw consent. We re-confirm consent periodically.
- Enquiries that did not lead to a booking: kept for up to 24 months in case you come back to us, then deleted.
- Website analytics: retained in aggregated form only, with no identifiable information beyond 14 months.
7. Your rights
Under UK GDPR you have the following rights in relation to your personal data. To exercise any of them, please email events@steamwinebar.com and we will respond within 30 days.
- Right to be informed: this policy is part of how we comply.
- Right of access: you can ask for a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct anything that is wrong.
- Right to erasure: you can ask us to delete your data, subject to our legal retention obligations.
- Right to restrict processing: you can ask us to pause certain processing activities.
- Right to data portability: you can ask for your data in a portable, machine-readable format.
- Right to object: you can object to direct marketing at any time, and we will stop immediately.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time, without affecting any processing already carried out.
If you are not happy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office. Their website is ico.org.uk and their helpline is 0303 123 1113. We would always rather you came to us first so we can put things right.
8. Cookies
Our website uses a small number of cookies, including a session cookie required for the booking flow to work correctly, and where applicable a Google Analytics measurement cookie. Full detail is in our Cookie Policy.
9. Children
Our service is intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe we hold data on a child, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of the page will always tell you when. For significant changes that affect how we use your data, we will email customers on our active list and post a notice on this page for at least 30 days.
Get in touch about your data
For any privacy question, data request, or complaint, please contact us:
Email: events@steamwinebar.com
Phone: 020 7929 0819
Post: Data Protection, Steam Wine Bar Ltd, 1 St George’s Lane, London, EC3R 8DJ