How We Handle Your Data
1. Data Controller
The data controller is the entity that decides how and why your data is used. For this website, booking enquiries, contact forms and newsletter signups, that is:
Baba Jerk — Data Controller
- Legal name
- Baba Jerk Wales
- Trading as
- Baba Jerk
- Registered address
- COEDWIG FAY, DEVIL'S BRIDGE, ABERYSTWYTH
- Companies House no.
- 12658628
- Data contact
- contact@babajerk.com
We are a small business and do not currently appoint a dedicated Data Protection Officer. Data questions are handled through the contact details above.
2. What We Collect, And Why
Every category of personal data we touch, with the lawful basis under UK GDPR Art. 6, what we use it for, and how long we keep it.
| Data | Purpose | Lawful Basis | Retention |
|---|---|---|---|
| Booking enquiry form name, email, phone, event date, location, guest count, message | To reply with availability, a quote, menu suggestions and practical event questions. | Contract Pre-contract steps at your request. | Up to 6 years where needed for business, tax or dispute records. |
| Newsletter signup email address and consent status | To send schedule updates, food news and occasional event announcements. | Consent Opt-in via the form. | Until unsubscribe or until we clean inactive records. |
| Contact form / direct emails name, email, message content | To reply to your question. | Legitimate Interest Running and responding as a small business. | Normally 12 months unless the message becomes part of a booking/business record. |
| Site analytics basic visitor and page-use information | To understand which pages help visitors and which need improving. | Consent / Legitimate Interest Depending on the tool used and consent settings. | As configured in the analytics platform. |
| Cookies & similar storage | For essential site functions and any optional analytics/marketing tools we enable. | PECR + Consent | See cookie policy |
3. Who We Share It With
We do not sell, rent or trade personal data. We share it only where needed to operate the website, reply to enquiries, manage bookings, send emails, take payments, keep accounts, or comply with the law.
- Hosting provider — Hetzner GmbH
We may also disclose data if legally required, for example to HMRC, a court, a regulator, or to protect against fraud.
4. How We Keep It Safe
We use HTTPS, restricted admin access, WordPress user permissions, server backups and reasonable security controls appropriate to a small food business website. If a personal data breach occurs, we will assess it and notify the ICO and affected people where required.
5. Your Rights Under UK GDPR
You can ask to access, correct, delete, restrict or receive a copy of your personal data. You can object to some processing and withdraw newsletter consent at any time.
Access
Ask for a copy of data we hold about you.
Correction
Ask us to correct inaccurate or incomplete details.
Deletion
Ask us to delete data where we no longer need to keep it.
Consent
Unsubscribe from newsletters or withdraw consent where applicable.
To exercise these rights, contact contact@babajerk.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
6. Cookies
For the full inventory and consent controls, see our Cookie Policy.
7. Children
This site is not directed at children under 13. We do not knowingly collect personal data from children through this website.
8. Changes To This Policy
If we make material changes, we will update the version/date shown above and amend this page.