Privacy Policy

Information You Provide

We collect personal information that you voluntarily provide when making a reservation, contacting our concierge, or signing up for communications.

• Name, email address, phone number, and postal address.
• Reservation details such as date, time, party size, and special requests.
• Payment information processed securely by our payment provider.
• Any correspondence or feedback you send to us.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information about your device and browsing behaviour.

• IP address, browser type, and operating system.
• Pages visited, time spent, and referring URLs.
• Cookies and similar technologies as described in our Cookie Policy.

Information from Third Parties

We may receive information about you from third-party services, such as reservation platforms and social media, when you interact with us through those channels. This may include reservation details from OpenTable and publicly available information from social media profiles if you engage with our content.

Service Provision

We use your personal information to manage reservations, provide our dining and gaming services, and communicate with you about your bookings. This includes processing and confirming reservations, sending booking confirmations, reminders, and updates, and responding to enquiries and requests.

Marketing and Communications

With your consent, we may send you information about events, offers, and news from The Luminary. You can opt out at any time. This includes email newsletters and promotional communications, personalised recommendations based on your preferences, and opt-out instructions included in every marketing email.

Legitimate Interests

We may process your information for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our venue. This includes analysing website usage to enhance user experience, protecting against misuse of our services, and conducting internal audits and quality assurance.

Service Providers

We share personal information with trusted third-party service providers who assist us in operating our website, processing reservations, and delivering our services.

• OpenTable for reservation management.
• Payment processors for secure transactions.
• Email and marketing platforms.
• IT and hosting providers.

Legal and Regulatory Disclosures

We may disclose personal information when required by law, regulation, or legal process, or to protect the rights, property, or safety of The Luminary, our guests, or others. This includes compliance with UK Gambling Commission requirements, responding to lawful requests from public authorities, and enforcing our terms and conditions.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to appropriate safeguards. We will notify you of any such transfer and any changes to this policy.

Security Measures

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.

• Encryption of data in transit and at rest.
• Access controls and staff training.
• Regular security assessments and monitoring.

Retention Periods

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Reservation data retained for up to 24 months after the booking date.
• Marketing consent retained until withdrawn.
• Financial records retained for 6 years as required by UK tax law.

Access and Rectification

You have the right to request access to the personal data we hold about you and to have inaccurate information corrected. Submit a subject access request to receive a copy of your data, and request corrections to incomplete or inaccurate information.

Erasure and Restriction

You may request that we delete your personal data or restrict its processing under certain circumstances, such as when the data is no longer necessary or you object to processing. This includes the right to erasure, also known as the right to be forgotten, and the right to restrict processing while a dispute is resolved.

Data Portability and Objection

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to object to processing based on legitimate interests or direct marketing. Request data portability where technically feasible, and object to direct marketing at any time.

Withdrawing Consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal. Use the unsubscribe link in marketing emails, or contact us to withdraw consent for other processing.

Transfers Outside the UK

Some of our service providers may process personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions. We review all third-party providers for compliance with UK GDPR, and we implement supplementary measures where necessary.

Cookie Usage

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. This includes essential cookies for site functionality and analytics cookies to understand usage. You can manage cookie preferences through your browser settings. For detailed information, please review our Cookie Policy.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, and we will update the effective date accordingly. Material changes will be highlighted on our website, and we encourage you to review this policy periodically.