Fern & Ivy 26 High Street, Treorchy, CF42 6NR

Last updated: 25 August 2026

Fern & Ivy ("we", "us", "our") operates the website https://fernandivy.co.uk/ and the Fern & Ivy restaurant and cocktail bar at 26 High Street, Treorchy, CF42 6NR. We are the data controller responsible for the personal information collected through this website.

This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your information, contact us at:

Email: info@fernandivy.co.uk
Phone: 01443 704376
Post: Fern & Ivy, 26 High Street, Treorchy, CF42 6NR

1. The information we collect

We collect personal information in the following ways:

Information you give us directly

Table bookings: your name, contact details (email address and/or phone number), the date, time and size of your booking, and any special requests you include (for example dietary requirements, accessibility needs, or details of a special occasion).
Gift card purchases: your name, contact details, the recipient's name (if you provide it), and the amount purchased. Payment card details are collected and processed securely by our payment provider — we do not see or store your full card number.
Enquiries: your name, contact details and the content of your message when you contact us through the website, by email or by phone, including enquiries about private hire and functions.

Information collected automatically

Cookies and similar technologies: when you visit our website, cookies may collect information such as your IP address, browser type, device information and how you use the site. See section 6 (Cookies) for details.
Social media content: our website displays content from our Facebook page. See section 5 (Facebook feed and social media) for how this works.

We do not knowingly collect personal information from children through this website.

2. How we use your information and our lawful bases

Under UK GDPR we must have a lawful basis for using your personal information. We use your information as follows:

To take and manage table bookings — including confirming, amending or cancelling reservations and accommodating special requests. Lawful basis: performance of a contract (taking steps to provide the service you have requested).
To sell and fulfil gift cards — including processing payment and issuing the gift card. Lawful basis: performance of a contract.
To respond to enquiries — including questions about our menus, opening hours, private hire and events. Lawful basis: our legitimate interest in responding to people who contact us.
To run and improve our website — including keeping it secure and understanding how it is used. Lawful basis: our legitimate interest in operating a safe, functional website; consent where required for non-essential cookies.
To meet our legal obligations — including keeping accounting and tax records of transactions. Lawful basis: legal obligation.

Where you tell us about dietary requirements or accessibility needs that reveal information about your health (for example an allergy), we use that information only to provide your booking safely. By providing it, you consent to us using it for that purpose.

We do not use your personal information for automated decision-making or profiling, and we will not send you marketing messages unless you have agreed to receive them.

3. Who we share your information with

We do not sell your personal information. We share it only with:

Our booking system provider, which processes reservation details on our behalf so we can manage table bookings.
Our payment provider, which processes gift card payments securely on our behalf.
Our website hosting and IT providers, which store website data on our behalf.
Meta Platforms (Facebook), in connection with the Facebook feed on our website — see section 5.
Professional advisers and authorities, such as our accountants, or HMRC and other regulators where we are legally required to share information.

Providers acting on our behalf are only permitted to use your information to provide their services to us, under contracts that require them to protect it.

4. International transfers

Some of our service providers (including Meta Platforms) may process personal information outside the UK. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK's adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

5. Facebook feed and social media

Our website includes an embedded feed that displays posts from the Fern & Ivy Facebook page. This feed is provided by Meta Platforms Ireland Limited ("Facebook").

When you view a page containing the Facebook feed:

your browser connects to Facebook's servers to load the content, and Facebook receives technical information such as your IP address, browser details and the page you are visiting;
if you are logged in to a Facebook account, Facebook may be able to link your visit to our website with your Facebook profile;
Facebook may set cookies or use similar technologies in accordance with its own policies.

We do not control how Facebook uses this information. For details, please see Facebook's privacy policy at https://www.facebook.com/privacy/policy and its cookie policy at https://www.facebook.com/privacy/policies/cookies. You can manage how Facebook uses your data through your Facebook account settings.

Our website also contains links to our Facebook and Instagram pages. If you follow these links, or interact with us on social media, the relevant platform's own privacy policy applies. Where we interact with you on our social media pages (for example replying to your comment or message), we and the platform may act as joint controllers of that interaction.

6. Cookies

Cookies are small text files placed on your device when you visit a website. We use:

Essential cookies, which are necessary for the website to function (for example to remember your cookie preferences or support the booking process). These do not require your consent.
Third-party cookies, which may be set by embedded services such as the Facebook feed described in section 5. Where these cookies are not essential, they are only set with your consent.

You can withdraw or change your cookie consent at any time through the cookie settings on our website, and you can also block or delete cookies through your browser settings. Blocking some cookies may affect how parts of the website work.

7. How long we keep your information

We keep personal information only for as long as we need it:

Booking details are kept for a limited period after your visit so we can deal with any follow-up queries, and are then deleted.
Gift card and payment records are kept for up to 6 years after the end of the relevant financial year, as required for tax and accounting purposes.
Enquiry correspondence is kept for as long as needed to deal with your enquiry and any follow-up.
Cookie data is kept for the lifetime of the relevant cookie, as set out in our cookie settings.

When information is no longer needed, we delete it securely.

8. How we protect your information

We take appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access, including secure hosting, encrypted connections (HTTPS) on our website, and limiting access to those who need it.

9. Your rights

Under UK data protection law you have the right to:

Access — request a copy of the personal information we hold about you;
Rectification — ask us to correct inaccurate or incomplete information;
Erasure — ask us to delete your information in certain circumstances;
Restriction — ask us to limit how we use your information in certain circumstances;
Objection — object to our use of your information where we rely on legitimate interests;
Portability — receive certain information in a portable format;
Withdraw consent — where we rely on your consent (for example for non-essential cookies), you can withdraw it at any time.

To exercise any of these rights, contact us at info@fernandivy.co.uk. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the chance to resolve any concerns first, so please do contact us before approaching the ICO.

10. Links to other websites

Our website may contain links to other websites, including our booking and gift card providers and social media platforms. This policy applies only to our website — please check the privacy policies of any other websites you visit.

11. Changes to this policy

We may update this policy from time to time, for example if our services or legal requirements change. The latest version will always be published on this page with the date it was last updated.

Privacy Policy