Privacy Policy

The Hollydale, Peckham Last updated: 23 April 2026

1. Introduction

This privacy policy explains how Shining Bright Hospitality Ltd, trading as The Hollydale ("we", "us", "our"), collects, uses, and protects your personal information when you visit our website at thehollydalepeckham.com, subscribe to our mailing list, make a reservation, book an event, or otherwise interact with us.

We are the data controller for the personal information we hold about you. If you have any questions about this policy or your personal data, please contact us:

• Email: hello@thehollydaletavern.com

• Phone/WhatsApp: 07418 626419

• Address: 115 Hollydale Road, London SE15 2TF

  The Hollydale is operated by Shining Bright Hospitality Ltd (company number 15017370), registered in England and Wales.

  2. What personal information we collect

  Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number

• Booking information — date, time, number of guests, special requests, dietary requirements

• Event ticket purchases — booking details and payment information (full card details are processed by our payment provider and are not stored by us)

• Enquiry details — information you provide when filling out our party hire or contact forms

• Marketing preferences — whether you've consented to receive our newsletter

• Technical information — IP address, browser type, device information, pages visited, and similar data collected through cookies (see Section 8)

• CCTV footage — if you visit our premises, your image may be recorded on our CCTV system (see Section 9)

  3. How we collect your information

We collect personal information when you:

• Subscribe to our mailing list

• Make a reservation through our website

• Book and pay for a ticketed event (e.g. pub quiz, live music, Sip & Paint)

• Submit a party hire or enquiry form

• Email, call, or WhatsApp us directly

• Visit our premises (via CCTV)

• Visit our website (via cookies and similar technologies)

  4. Why we use your information and our legal basis

  Under UK data protection law, we must have a lawful basis for processing your personal information. We rely on the following:

• Performance of a contract — to take reservations, process event bookings, and manage party hire

• Legitimate interests — to respond to enquiries, run our business, operate CCTV for the safety of staff and customers and the prevention of crime, prevent fraud, and improve our services

• Consent — to send you marketing emails about events, news, and offers (you can unsubscribe at any time). Where our marketing relates to alcohol or other age-restricted products, we only market to individuals who have confirmed they are aged 18 or over

• Legal obligation — to comply with tax, accounting, licensing (including conditions under the Licensing Act 2003), and other legal requirements

  5. Who we share your information with

  We don't sell your personal information to anyone. We share limited information with trusted service providers who help us run our business:

• Wix.com Ltd — our website host and provider of the booking system, online payments, and email newsletter tools

• Wix Payments / Stripe — to securely process card payments for event bookings

• Google — where enquiry forms are hosted on Google Forms

• Meta Platforms (WhatsApp) — where you contact us via WhatsApp, message content and metadata are processed by WhatsApp in accordance with its own privacy policy

• Professional advisers — accountants, lawyers, and insurers, where necessary

• Law enforcement or regulators — where CCTV footage or other information is lawfully

  requested in connection with the investigation of a crime or a regulatory matter

We may also disclose personal information where required by law or to protect our legal rights.

6. International transfers

Some of our service providers (including Wix and Google) process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK has deemed to provide adequate protection.

7. How long we keep your information

We only keep your personal information for as long as we need it:
• Reservations and enquiries — up to 24 months after your last interaction

• Event booking and payment records — 6 years, to meet UK accounting and tax requirements

• Marketing subscribers — until you unsubscribe, after which we keep a minimal suppression record to ensure we don't contact you again

• CCTV footage — typically retained for up to 31 days on a rolling basis and then automatically overwritten, unless footage needs to be preserved for an incident investigation or legal purpose

• Website analytics and cookies — as set out in our cookie notice and your browser settings 8. Cookies

  Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how visitors use it. Some cookies are set by Wix (the platform that powers our website) and by third parties.

  You can manage or disable cookies through your browser settings, or through the cookie banner on our site where available. For more information about how Wix uses cookies, see Wix's privacy policy.

  9. CCTV

We operate a CCTV system at our premises at 115 Hollydale Road for the purposes of:

• Ensuring the safety of staff, customers, and visitors

• Preventing and detecting crime

• Meeting conditions attached to our premises licence under the Licensing Act 2003

• Assisting the police and other authorities with the investigation of incidents

  Clear signage is displayed at the entrance to let you know CCTV is in operation. Footage is stored securely and access is restricted to authorised personnel. We only share footage with third parties (such as the police) where there is a lawful basis to do so, or where we are required to by law.

  You have the right to request access to CCTV footage in which you appear. Requests should be made in writing to hello@thehollydaletavern.com as soon as possible after the event, as footage is typically overwritten within 31 days.

  10. Marketing and age-restricted products

  Because we sell alcohol, our marketing communications may reference age-restricted products. We only send marketing emails to people who have actively opted in, and we ask subscribers to confirm they are aged 18 or over at the point of signup. You can unsubscribe from marketing at any time by clicking the link at the bottom of any of our emails or by emailing hello@thehollydaletavern.com.

  11. Your rights

  Under UK GDPR, you have the following rights in relation to your personal information:

• Access — ask for a copy of the personal information we hold about you

• Rectification — ask us to correct inaccurate or incomplete information

• Erasure — ask us to delete your information (the "right to be forgotten")

• Restriction — ask us to limit how we use your information

• Portability — ask us to transfer your information to another provider

• Objection — object to us processing your information, including for direct marketing

• Withdraw consent — withdraw any consent you've given us at any time
  To exercise any of these rights, please email hello@thehollydaletavern.com. We'll respond within

  one month.

  12. Children

  Our website and services are not directed at children under 16, and we don't knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we'll delete it.

  13. Security

  We take appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, and disclosure. Our website is hosted on Wix, which provides SSL encryption, and payments are processed by PCI-DSS compliant providers.

  14. Changes to this policy

  We may update this policy from time to time. The "last updated" date at the top of the policy shows when it was most recently revised. Material changes will be brought to your attention where appropriate.

  15. Complaints and ICO registration

  Shining Bright Hospitality Ltd is registered with the Information Commissioner's Office (ICO) as a data controller.

  If you're unhappy with how we've handled your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the ICO:

• Website: ico.org.uk

• Phone: 0303 123 1113

• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF