Our Privacy Policy
The Fish Shack Privacy Policy
Last updated: March 2026
This Privacy Policy explains how The Fish Shack (“we”, “us”, “our”) collects, uses and protects your personal information when you use our website or contact us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).
1. Who We Are (Data Controller)
Coastal Events Catering Ltd t/a The Fish Shack
Unit 2, Cerbera Way
Bispham
FY2 0UX
United Kingdom
Email: hello@thefishshack.co.uk
Phone: 01253 228590
We are the data controller responsible for your personal information.
2. What Information We Collect
Information you provide directly
When you contact us through our website forms, email or phone, we may collect:
- Name
- Email address
- Phone number
- Event details or enquiry information
- Any other information you choose to provide
Automatically collected data
When you visit our website, we may collect:
- IP address
- Browser type and device information
- Pages visited and time spent on the site
- Cookies and tracking data (see section 7)
Google reCAPTCHA
We use Google reCAPTCHA to protect our forms from spam and abuse.
reCAPTCHA may collect:
- IP address
- Browser and device information
- Behavioural data (e.g., mouse movements)
This is processed under Google’s Privacy Policy and Terms of Service.
3. How We Use Your Information
We use your personal data to:
- Respond to enquiries and provide customer support
- Provide quotes and information about our services
- Manage bookings and event arrangements
- Improve our website and user experience
- Protect our website from spam and malicious activity (via reCAPTCHA)
- Comply with legal obligations
We do not use your data for automated decision‑making or profiling.
4. Legal Basis for Processing
We process your personal data under the following lawful bases:
- Legitimate interests – responding to enquiries, running our business, improving our services
- Contract – when you book an event or request a quote
- Legal obligation – where required legal or regulatory purposes.
- Consent – where you opt in to receive marketing emails (if applicable).
5. How Long We Keep Your Data
We keep your information only for as long as necessary:
- Enquiry data: up to 12 months
- Booking and event data: up to 7 years (for accounting/legal purposes)
- Marketing consent data: until you unsubscribe
- Website logs and analytics: typically 12–26 months, depending on the tool
After this, data is securely deleted or anonymised.
6. Sharing Your Information
We do not sell or share your personal data with third parties for marketing.
We may share data with:
- Service providers (e.g., website hosting, email services)
- Google (via reCAPTCHA)
- Professional advisers
- Authorities where legally required
All third‑party processors are GDPR‑compliant.
7. Cookies & Tracking Technologies
Cookie Banner (CookieYes)
When you first visit our website, you will see a CookieYes consent banner.
This allows you to:
- Accept all cookies
- Reject non‑essential cookies
- Manage your cookie preferences at any time
Your choices are stored and respected in line with UK GDPR requirements.
Types of cookies we use
- Strictly necessary cookies – required for the website to function
- Performance/analytics cookies – help us understand how visitors use the site
- Functionality cookies – improve your browsing experience
- Security cookies – used by Google reCAPTCHA to prevent spam
You can change or withdraw your consent at any time via the cookie settings link on our site or through your browser settings.
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent (where applicable)
- Request data portability
To exercise your rights, contact us at hello@thefishshack.co.uk.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Security
We take appropriate technical and organisational measures to protect your data, including secure servers, encryption where appropriate, and restricted access.
10. Links to Other Websites
Our website may contain links to external sites. We are not responsible for their privacy practices or content.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.