Privacy Policy
Last updated: July 2026
This policy explains what we do with your personal information when you use this website, contact us, or book a table with us.
Who we are
The Herbert Arms
Blackford, Chirbury
Montgomery
SY15 6BG
Telephone: 01938 691176
We are the data controller for the information described in this policy. That means we decide why and how it's used.
What we collect and why
When you fill in a form on this site. Our enquiry form asks for your name, email address, telephone number and whatever you tell us in the message field. We use this to answer your enquiry. Nothing more.
Form submissions are sent to us by email through a third-party delivery service. They aren't stored in a database on this website.
When you book a table. Our table bookings are handled by OpenTable. When you book through this site you're passing your details to OpenTable, who send the reservation on to us. They're a separate company acting as data controller for their own booking platform, and their privacy policy applies alongside this one: OpenTable privacy policy.
We receive your name, contact details and any note you've added to the booking. We don't take card payments through this website.
When you just browse. Our website uses cookies to keep the site working and to tell us roughly how many people visit and which pages they read. More detail below.
The legal basis for using your information
Under UK GDPR we need a lawful basis for handling your data. Ours are:
- Contract – dealing with a table reservation you've made.
- Legitimate interests – replying to an enquiry you've sent us, keeping our website secure and working properly, understanding how the site is used.
- Consent – non-essential cookies, including analytics. You can change or withdraw this at any point through the cookie settings on this site.
- Legal obligation – anything we're required to keep or disclose by law.
Cookies
Essential cookies make the site function. They remember your cookie choices and keep forms working. These are always on because the site won't run properly without them.
We also use Google Analytics 4 to see how many people visit and how they move around the site. This is only set if you agree to it. You can change your choice at any time using the cookie control panel on this site.
OpenTable sets its own cookies on the booking pages. Their policy covers those.
You can also clear or block cookies through your browser settings. Blocking essential cookies may stop parts of the site working.
Who we share your information with
We don't sell your data and we don't pass it to anyone for their own marketing.
We use a small number of suppliers who handle data on our behalf or alongside us:
- Our website host and email delivery provider
- OpenTable, for table reservations
- Google, for website analytics
We'll also disclose information where we're legally required to.
How long we keep it
- Enquiries that don't lead to a booking: 12 months
- Booking confirmations we hold by email: 12 months
- Reservation records held by OpenTable: as set out in their own policy
- Website analytics: 14 months
Where your data is held
Our website and email systems are hosted in the UK.
OpenTable and Google are both US companies and may process your data outside the UK. Where that happens they rely on the UK's international data transfer agreement and standard contractual clauses to keep your data protected to the same standard it would be here.
Keeping it safe
The site runs over an encrypted connection (HTTPS). Access to our email accounts and our OpenTable account is limited to staff who need it, and protected by passwords and two-factor authentication where the system supports it.
No system is completely secure, but if something goes wrong that puts your data at risk we'll tell you and the ICO where we're required to.
Your rights
You have the right to:
- Ask for a copy of the information we hold about you
- Have inaccurate information corrected
- Ask us to delete information, where we don't have a reason to keep it
- Object to or restrict how we use it
- Withdraw consent for analytics cookies, at any time
- Ask us to transfer your data to another provider
Write to us at the address above or email [EMAIL ADDRESS]. We'll respond within one month. For anything held on the booking platform you may need to contact OpenTable directly, and we'll help you do that.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We'd rather you came to us first so we can put it right.
Children
This website isn't aimed at children and we don't knowingly collect information from anyone under 13.
Changes
We'll update this policy when our systems or suppliers change. The date at the top tells you when it was last revised.