Privacy Policy

This website is operated by The George & Dragon Inn(“we”, “us”, “our”), trading at:

Email: info@thegeorgeanddragonhotel.com · Telephone: +44 1787 371 285

We are the data controller for personal information collected through this website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect the following categories of personal data:

• Contact information — name, email address, phone number (when you contact us or submit an enquiry).
• Room booking information — check-in/out dates, guest numbers, and special requests (processed by eviivo).
• Table booking information — date, time, and party size (processed by Resos).
• Usage data — pages visited, browser type, approximate location, and time on site (collected via cookies only with your consent).
• Communications — messages sent to us via our contact form, email, or telephone.

We use your personal data to:

• Respond to enquiries and booking requests.
• Process room reservations through eviivo.
• Process table bookings through Resos.
• Improve and maintain our website.
• Meet legal obligations (e.g. identification requirements at check-in).

Legal basis: We process your data under the following lawful bases — contractual necessity (to fulfil a booking), legitimate interests (to respond to enquiries and improve our services), legal obligation, and consent (for analytics cookies).

Our website uses cookies. You can manage your preferences using the banner displayed when you first visit the site, and you can update your choices at any time via your browser settings.

Third-party booking systems (eviivo, Resos) operate their own cookie consent as independent data controllers. Their use of your data is governed by their respective privacy policies.

We use the following third-party services that may process your personal data:

• eviivo — room booking platform. See eviivo.com/privacy-policy.
• Resos — table reservation system. See resos.com/privacy.
• Resend — transactional email delivery (contact form enquiries). See resend.com/legal/privacy-policy.

We retain your personal data only for as long as necessary. Booking records are kept for up to 7 years to comply with financial and legal obligations. Contact form enquiries are retained for as long as needed to resolve the matter. Website analytics data is retained per the default settings of the relevant service.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — at any time where we rely on consent.

To exercise any of these rights, please contact us at info@thegeorgeanddragonhotel.com. We will respond within 30 days.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Booking data is handled exclusively by our trusted third-party processors (eviivo and Resos), each of whom maintain their own security standards and compliance programmes.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113

This website is built and maintained by Yiasemis Collection, who provide web development and hospitality software services. Where Yiasemis Collection processes data in connection with operating this website, they act as a data processor on behalf of The George & Dragon Inn. Their own privacy practices are governed by the Yiasemis Collection Privacy Policy.

We may update this privacy policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version. Continued use of our website after changes constitutes acceptance of the updated policy.