Privacy Policy

1. Who We Are

Lock 13 Brewpub ("we", "us", "our") is the data controller responsible for your personal data. We are an Irish hospitality business operating a brewpub, restaurant, cocktail bar, and on-site brewery.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

2.1 When You Book a Table or Event

• Name, email address, phone number
• Date, time, and party size of your booking
• Dietary requirements or accessibility needs you share with us
• Special occasion details (e.g. birthday, anniversary)

2.2 When You Place an Online Order

• Name, email address, phone number
• Order details and payment information (processed securely by Toast — we do not store card details)

2.3 When You Make an Enquiry

• Name, email address, phone number
• Company name (for corporate enquiries)
• The content of your message

2.4 When You Purchase a Gift Voucher

• Your name and email address
• Recipient name and email address
• Payment information (processed securely by Toast)

2.5 When You Visit Our Website

• IP address and browser type (via essential cookies)
• Pages visited and time spent (only if you consent to analytics cookies)
• Device type and screen resolution

2.6 When You Sign Up to Our Mailing List

• Email address

3. Why We Collect Your Data (Legal Basis)

Under the General Data Protection Regulation (GDPR), we must have a lawful basis for processing your personal data. We rely on the following:

Purpose	Legal Basis
Processing table bookings	Performance of a contract
Processing online food orders	Performance of a contract
Processing event and corporate enquiries	Legitimate interest
Processing gift voucher purchases	Performance of a contract
Sending marketing emails	Consent (you can withdraw at any time)
Dietary/accessibility information	Explicit consent / vital interests
Website analytics	Consent (via cookie banner)
Essential website functionality	Legitimate interest

4. Who We Share Your Data With

We only share your personal data with trusted third parties who help us run our business. We never sell your data.

• ResDiary — Online booking management (table reservations)
• Toast — Point-of-sale, online ordering, and gift voucher processing
• Google Analytics — Website analytics (only with your consent)
• Meta (Facebook/Instagram) — Advertising pixels (only with your consent)
• Mailchimp / Klaviyo — Email marketing (only if you subscribe)
• Cloudflare — Website hosting and security

Some of these providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

5. How Long We Keep Your Data

Data Type	Retention Period
Booking records	2 years from the date of booking
Online order records	7 years (Irish tax/accounting requirements)
Corporate enquiry records	2 years from last contact
Gift voucher records	7 years (Irish tax/accounting requirements)
Marketing mailing list	Until you unsubscribe
Website analytics data	26 months (Google Analytics default)
Cookie consent preferences	6 months

6. Cookies

Our website uses cookies — small text files stored on your device. When you first visit our site, you'll see a cookie consent banner where you can choose which cookies to accept.

6.1 Essential Cookies

Required for the website to function properly. These cannot be disabled.

• Cookie consent preference — Remembers your cookie choices (localStorage, 6 months)

6.2 Analytics Cookies

Help us understand how visitors use our website so we can improve it. Only activated with your consent.

• Google Analytics — Tracks page views, session duration, and traffic sources

6.3 Marketing Cookies

Used to show you relevant advertisements on social media. Only activated with your consent.

• Meta Pixel — Enables targeted advertising on Facebook and Instagram

You can change your cookie preferences at any time by clearing your browser's local storage and revisiting our website.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Ask us to correct inaccurate data
• Right to Erasure — Ask us to delete your personal data ("right to be forgotten")
• Right to Restrict Processing — Ask us to limit how we use your data
• Right to Data Portability — Request your data in a machine-readable format
• Right to Object — Object to processing based on legitimate interest or direct marketing
• Right to Withdraw Consent — Where processing is based on consent, you can withdraw at any time

To exercise any of these rights, contact us at info@lock13.ie or write to us at the address above. We will respond within 30 days.

8. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at info@lock13.ie.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:

• HTTPS encryption on our website (SSL/TLS)
• Secure third-party payment processing (Toast PCI-DSS compliance)
• Access controls limiting who can view personal data
• Regular review of data processing activities

10. Complaints

If you're unhappy with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always show the most recent revision. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: