Privacy and Cookie Policy

The Dog & Duck | How we use and protect personal information

Last updated: 5 August 2026

Sherwood Bistro Ltd, trading as The Dog & Duck, is the controller responsible for the personal information described in this policy.

Sherwood Bistro Ltd is registered in England and Wales under company number 16605658. Its registered office is 70–72 Nottingham Road, Mansfield, United Kingdom, NG18 1BN. The restaurant address is Main Road, Kings Clipstone, Mansfield, Nottinghamshire, NG21 9BT.

You can contact us at info@dognduck.co.uk, by calling 01623 354400, or by writing to the restaurant address above.

This policy explains how we collect and use personal information when you use our website, make or attend a booking, submit a pre-order, contact us, join our mailing list, enter a promotion, make a payment or visit our premises.

Depending on how you interact with us, we may collect:

· Your name, telephone number, email address and postal address.

· Booking information, including the date and time, party size, requests, attendance, cancellations and booking history.

· Pre-orders and information about allergies, intolerances, dietary requirements, accessibility needs or other assistance requested.

· Payment and deposit information. Complete card details are normally processed by our payment provider rather than stored by us.

· Messages, complaints, feedback, survey responses and records of our communications with you.

· Marketing choices and information about how you interact with our emails and promotions.

· Website and device information, such as IP address, browser, device identifiers, pages viewed, referral source and cookie choices.

· CCTV images when you visit our premises.

· Information supplied when you enter a competition, attend an event or enquire about private hire.

If you provide information about another person, you should make sure they know that you are sharing it with us and direct them to this policy where appropriate.

We use personal information only where we have a lawful basis. The bases that normally apply are:

· Contract: to take, manage and fulfil a booking, pre-order, deposit, event or other request and to communicate with you about it.

· Legal obligation: to meet tax, accounting, licensing, food-safety, allergen, fraud-prevention and other legal requirements.

· Legitimate interests: to operate and improve the restaurant and website, provide customer service, handle complaints, maintain security, prevent fraud, manage capacity and protect our legal rights. We consider the impact on your rights before relying on this basis.

· Consent: for optional marketing, non-essential cookies and similar technologies, and where we ask for consent to use sensitive information. You may withdraw consent at any time, although this does not affect earlier lawful use.

We may use your information to confirm and manage bookings; take deposits and payments; prepare pre-orders; respond to enquiries and complaints; make reasonable adjustments; provide allergen and dietary support; keep the premises and guests safe; maintain records; analyse and improve our services; and send marketing where permitted.

Information about allergies, health or accessibility can be special category information under data-protection law. Where this applies, we will use it only where an additional legal condition is available, normally your explicit consent, or where its use is necessary to protect someone’s vital interests in an emergency.

Providing this information is optional, but we may be unable to accommodate a dietary, allergy or accessibility requirement safely if relevant information is not provided. You may withdraw consent, but this may affect what we can safely provide.

We will send email or text marketing only where we have the required consent or another lawful permission. Marketing consent is separate from agreeing to a booking and is not a condition of dining with us.

You can unsubscribe using the link in a marketing message or contact us at info@dognduck.co.uk. We may keep a minimal suppression record so that we do not contact you again after you opt out.

We may share information where necessary with organisations that support our operations, including:

· GoDaddy, which provides our website hosting and website-management services.

· SevenRooms, which provides our online reservation and customer-management services.

· Square, which provides our point-of-sale and payment-processing services.

· Email, communications, IT support, analytics and marketing providers.

· Professional advisers, insurers, auditors and service providers.

· Police, courts, regulators, local authorities or other bodies where disclosure is required or permitted by law.

· A purchaser or prospective purchaser if the business or its assets are sold, subject to appropriate safeguards.

These organisations may act as our processors or as independent controllers. We require processors to use information only for authorised purposes and to protect it appropriately. We do not sell personal information.

Some technology providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses, together with any additional safeguards that are required.

You can contact us for more information about the safeguards relevant to your information.

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and dispute-resolution requirements. Our usual periods are:

· Booking, pre-order, deposit, payment and transactional records: normally up to six years after the relevant transaction or the end of our relationship.

· General enquiries that do not result in a booking or dispute: normally up to 12 months after the enquiry is closed.

· Complaints, incidents and claims: normally up to six years after closure, or longer where a claim, investigation or legal duty requires it.

· Marketing information: until you withdraw consent or opt out, or after a reasonable period of inactivity. A minimal suppression record may be retained afterwards.

· CCTV: normally up to 31 days, unless footage is needed for an incident, investigation, insurance matter or legal claim.

· Cookie and analytics information: for the period described in our cookie-preference tool or the relevant provider’s settings.

We may retain information for longer where required by law or where reasonably necessary to establish, exercise or defend legal claims. We securely delete or anonymise information when it is no longer needed.

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss, disclosure or destruction. Access is limited to people who need the information for their work.

No internet transmission or storage system is completely secure. If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where required by law.

Depending on the circumstances, you may have the right to:

· Ask for access to the personal information we hold about you.

· Ask us to correct inaccurate or incomplete information.

· Ask us to erase information where the right to erasure applies.

· Ask us to restrict how information is used.

· Object to processing based on legitimate interests and object at any time to direct marketing.

· Receive certain information in a portable format.

· Withdraw consent at any time where we rely on consent.

· Complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exemptions. We may ask for information needed to verify your identity. We will not normally charge a fee, but the law permits a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.

To exercise a right, contact info@dognduck.co.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

Our website uses cookies and similar technologies, including pixels, tags, scripts and local storage. These technologies may store or access information on your device.

We may use the following categories:

· Strictly necessary technologies: required for security, navigation, booking functions, payments and remembering privacy choices. These do not require consent where the legal exemption applies.

· Functional technologies: remember optional preferences and provide enhanced website features.

· Analytics technologies: help us understand website use and improve performance. These may include Google Analytics where enabled.

· Advertising technologies: help measure promotions and tailor advertising. These may include Meta Pixel and related Meta technologies where enabled.

Except where a technology is strictly necessary, it will not be activated until you have given the required consent through our cookie banner or preference tool. You can accept or reject optional categories and change your choice at any time using the Manage Cookie Preferences link on our website.

The cookie-preference tool should provide the current name, provider, purpose and duration of each cookie or similar technology in use. Browser controls can also block or delete cookies, but doing so may affect website functionality.

Our website may contain links to third-party websites or services. Those organisations are responsible for their own privacy practices. We recommend reading their privacy information before providing personal information.

Our website and marketing are not directed at children. Booking information about children should be provided by a parent, guardian or responsible adult only where necessary, such as to reserve a highchair or suitable table.

We do not currently make decisions that have legal or similarly significant effects on customers solely by automated means. If this changes, we will update this policy and provide any information required by law.

We may update this policy when our services, technology or legal obligations change. The current version will be published on our website with its updated date. Where a change is significant, we will take reasonable steps to bring it to the attention of affected individuals.

Sherwood Bistro Ltd trading as The Dog & Duck. Restaurant: Main Road, Kings Clipstone, Mansfield, Nottinghamshire, NG21 9BT. Registered office: 70–72 Nottingham Road, Mansfield, United Kingdom, NG18 1BN. Email: info@dognduck.co.uk. Telephone: 01623 354400. Company number: 16605658.