EaT @ Green Duck – Privacy Policy

Last updated: August 2026

EaT @ Green Duck respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, join our Kitchen Loyalty Programme, purchase from us, communicate with us or otherwise interact with EaT @ Green Duck.

1. Who We Are

EaT @ Green Duck is the food and kitchen operation based at Green Duck Brewery and is operated by EaT Cuisine Group LTD (“we”, “us” or “our”).

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018, EaT Cuisine Group LTD is responsible for the personal information covered by this Privacy Policy where it determines how and why that information is processed.

EaT Cuisine Group LTD and Green Duck Brewery are separate businesses. Please refer to Green Duck Brewery's own Privacy Policy covering personal information it collects and processes independently.

Our contact details are provided at the end of this policy.

2. Information We May Collect

Depending on how you interact with EaT @ Green Duck, we may collect information including:

your name;

email address;

telephone number;

information submitted through website forms;

enquiry and correspondence details;

event or catering enquiry information;

Kitchen Loyalty Programme information;

marketing preferences and consent records;

information about purchases and transactions;

information relating to promotions, offers or loyalty rewards;

dietary requirements, allergies or other information you choose to provide in connection with an order, enquiry or event;

feedback, complaints or other communications with us; and

technical information relating to your use of our website, where applicable.

We will only collect information that is reasonably necessary for the relevant purpose.

3. Payment Information

Where you make a payment to EaT @ Green Duck, payment processing may be provided by a third-party payment provider, such as SumUp or another payment service we use from time to time.

EaT @ Green Duck may retain information relating to a transaction, such as the amount, date, products purchased, transaction reference and payment status.

We do not retain your full debit or credit card details.

Card and payment credentials are handled by the relevant payment provider in accordance with its own security and privacy practices.

4. How We Collect Your Information

We may collect personal information when you:

make a purchase;

submit a form through our website;

contact us by telephone, email, SMS, social media or another communication channel;

make a food, catering or event enquiry;

join or participate in our Kitchen Loyalty Programme;

enter a competition or promotion;

subscribe to marketing communications;

provide feedback or make a complaint; or

otherwise provide information to us directly.

We may also receive limited personal information from third parties where this is necessary to provide a service you have requested or where we have another lawful reason to receive it.

5. How We Use Your Information

We may use your personal information to:

respond to enquiries;

provide food, catering and related services;

administer purchases and transactions;

manage Kitchen Loyalty Programme membership and rewards;

manage event and catering enquiries;

communicate with you about an enquiry, order or service;

provide customer support;

deal with feedback and complaints;

maintain appropriate business and transaction records;

prevent fraud or misuse of our services;

improve our website, services and customer experience;

send marketing communications where permitted;

comply with our legal, regulatory, accounting and tax obligations; and

establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes that are incompatible with the reason it was collected unless permitted or required by law.

6. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may process information because:

It is necessary to perform a contract

For example, where we need information to fulfil an order or provide a service you have requested.

We have a legitimate interest

For example, responding to enquiries, maintaining appropriate customer records, improving our services, protecting our business and providing effective customer service, provided those interests are not overridden by your rights.

You have given your consent

For example, where you have specifically agreed to receive certain marketing communications.

We have a legal obligation

For example, where we are required to retain certain financial or transaction records.

The appropriate lawful basis will depend on why the information is being processed.

7. Allergies, Dietary & Other Sensitive Information

When ordering food or making a catering or event enquiry, you may provide information about allergies, dietary requirements, accessibility requirements or other circumstances relevant to the service you require.

Some information, particularly information relating to allergies or medical requirements, may constitute special category personal data under UK data protection law.

Where such information is provided, we will only use it where there is an appropriate lawful basis and condition for doing so, and for purposes connected with safely and appropriately providing or discussing the requested service.

Please only provide sensitive personal information where it is relevant and necessary.

8. Kitchen Loyalty Programme

If you join the EaT @ Green Duck Kitchen Loyalty Programme, we may use your information to:

create and maintain your loyalty record;

administer rewards or benefits;

record relevant transactions or visits;

communicate information relating to the programme; and

prevent fraudulent or inappropriate use of rewards.

Joining the Kitchen Loyalty Programme does not automatically mean that you must receive general marketing communications.

Where marketing consent is required, this will be requested separately or made clear when you sign up.

9. Email & SMS Marketing

Where permitted, EaT @ Green Duck may contact you by email and/or SMS with news, menus, offers, promotions, events and other information relating to our products and services.

We will only send electronic marketing where we have an appropriate lawful basis for doing so. Where you have provided consent, you can withdraw that consent at any time.

You can unsubscribe from marketing communications by using any unsubscribe facility provided in the message or by contacting us.

Stopping marketing communications will not prevent us from sending necessary service communications relating to an existing enquiry, transaction or service.

10. Who We May Share Information With

We do not sell your personal information.

To operate EaT @ Green Duck and provide our services, personal information may be shared with selected third parties where necessary and appropriate.

These may include:

GoHighLevel, where used to manage website forms, enquiries, customer records, communications or our CRM;

SumUp or other payment providers, where used to process transactions;

Email and SMS service providers, where used to send communications;

Website hosting, technology, analytics or IT service providers;

Professional advisers such as accountants, legal advisers or insurers;

Government bodies, regulators, law enforcement agencies or other organisations where disclosure is required by law; and

Green Duck Brewery, where information needs to be shared in connection with an enquiry, event, venue-related matter or another service involving Green Duck Brewery.

The inclusion of a third party in this section does not mean that we routinely share all customer information with that organisation.

Information will only be shared where there is a legitimate and appropriate reason to do so, and we will seek to limit the information shared to what is reasonably necessary for that purpose.

Where Green Duck Brewery processes personal information for its own purposes, its own Privacy Policy may apply.

11. Third-Party Services & Links

Our website may contain links to or integrate with websites and services operated by third parties.

For example, this may include payment providers, enquiry systems, social media platforms or Green Duck Brewery's website. Where you leave our website or interact directly with a third-party service, that organisation may collect and process information under its own privacy policy.

We encourage you to review the relevant privacy information where appropriate.

12. Cookies & Website Information

Our website may use cookies and similar technologies to enable website functionality, understand how visitors use the site and improve our online services. Some cookies may be essential for the website to operate, while others may relate to analytics, functionality or marketing.

Where required by law, non-essential cookies will only be used with your consent.

Further information may be provided through our website's cookie notice or cookie settings.

Please refer to our Cookies Policy here.

13. How Long We Keep Your Information

We will retain personal information only for as long as it is reasonably required for the purpose for which it was collected, or where we are required to retain it for legal, regulatory, tax, accounting or other legitimate business purposes. Different types of information may therefore be retained for different periods.

When information is no longer reasonably required, we will take appropriate steps to delete, anonymise or securely dispose of it. We may retain certain transaction and financial records for longer periods where required for accounting, tax or legal purposes.

14. How We Protect Your Information

We take reasonable organisational and technical measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Where we use third-party systems to store or process information, we select service providers appropriate to the relevant business purpose and take reasonable steps to ensure that personal information is handled appropriately.

However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.

15. International Data Transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

16. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

ask for access to personal information we hold about you;

ask us to correct inaccurate or incomplete information;

ask us to delete your personal information in certain circumstances;

ask us to restrict how your information is used;

object to certain processing;

request transfer of certain information in a portable format;

withdraw consent where processing is based on consent; and

object to direct marketing.

These rights are not absolute and may depend on the circumstances. If you wish to exercise any of your rights, please contact us using the details below.

We may need to verify your identity before responding to certain requests.

17. Complaints

If you have concerns about how EaT @ Green Duck has handled your personal information, please contact us in the first instance so that we have an opportunity to investigate and respond.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Further information about your data protection rights and making a complaint is available from the ICO.

18. Children's Privacy

Our services are primarily intended for adults and families purchasing food and related services.

We do not knowingly use children's personal information for direct marketing without an appropriate lawful basis and, where required, appropriate parental or guardian involvement. Where information about a child is reasonably necessary in connection with an event, catering requirement, allergy or dietary requirement, we will only use that information for the relevant purpose.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, services or legal obligations.

The latest version will be published on the EaT @ Green Duck website and the date at the top of this policy will indicate when it was last updated.

20. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or wish to exercise your data protection rights, please contact:

EaT @ Green Duck

Operated by EaT Cuisine Group LTD

Unit 15 Gainsborough Trading Est, Rufford Rd, Stourbridge DY9 7ND

Email: [email protected]

Telephone: 01384 930 005

For matters relating specifically to personal information collected independently by Green Duck Brewery, please contact Green Duck Brewery directly.