Hook & Ladder Privacy Policy Statement

Who We Are

This is the Data Privacy Statement of Hook & Ladder Café, with head office based at Sarsfield Street, Limerick, phone number +353 61 413 778.

We operate cafés under the brand name Hook & Ladder in Limerick (Sarsfield Street, Castletroy & Corbally) and Waterford (Tramore Road). We also operate a café under the brand Ampersand on Sexton Street in Limerick, cookery schools in Limerick and Waterford, sell home accessories, and cater for private events.

About This Statement

This Privacy Policy demonstrates our commitment to protecting your personal data and complying with the General Data Protection Regulation (GDPR).

It explains:

  • What personal data we collect
  • Why we collect it
  • How we use and share it
  • How long we keep it
  • Your rights in relation to your personal data

Personal Data We Process

We collect and process personal data to:

  • Manage your account and orders
  • Provide our products and services
  • Meet legal and regulatory obligations
  • Communicate with you
  • Send marketing communications (with your consent)
  • Protect our legitimate business interests

Where we need to process your data for a new purpose, we will inform you and, where required, obtain your consent.

Sales Transactions

For online or phone orders, we may collect:

  • Name
  • Phone number
  • Email address
  • Billing and delivery address

We aim to process payments at the point of sale and do not store card details unless required to guarantee a reservation. Any stored card details are securely held and deleted once no longer required.

Payments

Payments are processed via our third-party payment provider Stripe. Stripe uses industry-standard encryption and security protocols to ensure your payment data is protected. Hook & Ladder does not store your full payment card details.

Online Accounts

Customers may create an account to:

  • View order history
  • Manage personal details

Payment details are not stored by us.

Cookery School

We collect:

  • Name
  • Email address
  • Phone number

This is gathered via attendance sheets and feedback forms. Attendance sheets may also record marketing consent. Feedback forms are securely disposed of after review.

Mobile App (Flipdish)

Orders placed via Flipdish may collect:

  • Name
  • Mobile number
  • Payment details
  • Location data (if enabled)

Flipdish operates as a separate data processor and is GDPR compliant.

Website Contact Form

We collect:

  • Name
  • Phone number
  • Email address
  • Message content

This data is processed securely and accessed only by relevant staff.

Marketing Communications

We maintain an email list for newsletters and offers.

  • You will only be added with explicit consent
  • You may unsubscribe at any time

We may also contact you for surveys if you have consented.

Social Media

We use platforms such as Facebook, Instagram, and Twitter for promotions. Personal data may be processed by these platforms according to their own privacy policies.

Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Contractual necessity – to fulfil orders and services
  • Legal obligation – to comply with laws and regulations
  • Consent – for marketing communications
  • Legitimate interests – to operate and improve our business

Retention of Personal Data

We retain your personal data as follows:

  • Account holders: retained until inactivity of 5 years, then deleted
  • One-time transactions: retained for 5 years
  • Marketing data: retained until you withdraw consent

Sharing Your Personal Data

We may share your personal data:

  • Where legally required
  • With trusted service providers who support our business operations
  • With contractors under GDPR-compliant agreements

Third-Party Providers

We may share data with:

  • Mailchimp (email marketing)
  • Microsoft (email and document storage)
  • WP Engine (website hosting)
  • Flipdish (online ordering)
  • WooCommerce (online sales)
  • Facebook (advertising)
  • Stripe (payments)

All providers are required to comply with GDPR or equivalent data protection standards.

Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability
  • Lodge a complaint with the Data Protection Commission

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

Hook & Ladder Café
Sarsfield Street
Limerick
Phone: +353 61 413 778