Liverpool Policy

This policy explains how AF Burgers LTD collects and processes personal data when you use our Liverpool website. It covers information gathered during browsing, table reservations, Wi-Fi sign-ups, mailing list enrolment, loyalty schemes and Black Card issuance.

How to make a complaint

If you have any concerns about how we use your personal data, contact us at:

• Address: Almost Famous, Parr Street, Liverpool, L1 4JN
• Email: infoliverpool@www.almostfamousburgers.com

For unresolved issues, the Information Commissioner’s Office is available at www.ico.org.uk.

Changes to this notice

• This policy took effect 20 November 2020.
• We will notify you of any changes by posting them on this website or by emailing or posting a copy to you.
• Please keep your personal information current — contact us at the email above if it changes.

Third party links

This website may include links to third-party websites and social platforms. We do not control these sites and recommend you read each one’s privacy policy separately.

The personal data we collect

• Contact Data: address, email, telephone numbers.
• Financial Data: bank account and payment card details.
• Identity Data: first name, last name, title.
• Marketing and Communications Data: your preferences for marketing contact.
• Profile Data: purchase and reservation history.
• Technical Data: IP address, browser type, timezone, operating system.
• Transaction Data: payment details and product purchases.
• Usage Data: how you interact with the website.

We do not collect special category data (race, ethnicity, religious beliefs, sexual orientation, political opinions, health information or criminal records).

How your data is collected

• Direct interactions: contact forms, Wi-Fi sign-ups, marketing requests.
• Gift cards and product purchases: financial + transaction data when you buy from the website.
• Automated technologies: cookies, server logs and similar tracking.
• Third parties: analytics providers such as Google Analytics.

How we use your data

• To perform a contract (e.g. gift card purchase, table reservation).
• For legitimate business interests.
• To comply with legal or regulatory obligations.
• With your consent — for example, for email marketing.

Marketing and opt-out rights

You will receive marketing communications if you have requested information or made purchases and haven’t opted out. You can stop marketing at any time by:

• Logging in to adjust your preferences.
• Following the opt-out link in any marketing message.
• Emailing infoliverpool@www.almostfamousburgers.com.

We do not share your personal data with external organisations for their own marketing without your express consent.

Sharing your data

Where required, we share data with:

• Group entities for operational efficiency.
• Governmental and regulatory authorities where required.
• Professional advisers — lawyers, auditors, accountants.
• IT and system administration service providers.
• Business acquirers or merger partners.

All recipients must maintain confidentiality and use data only for the specified purposes.

International transfers

When your personal data leaves the European Economic Area, we use safeguards including transfers only to countries with adequate protection, EU-approved standard contractual clauses, and EU-US Privacy Shield certification where applicable.

Data security

• Appropriate security measures prevent unauthorised access, loss or disclosure.
• Access is limited to employees with a legitimate business need.
• Staff are trained on data protection rights and responsibilities.
• Procedures are in place to detect and report breaches.

Data retention

• Personal data is kept only as long as necessary.
• Retention considers data sensitivity, risk and legal requirements.
• Data is deleted after 6 months of website inactivity.
• Personal data may be anonymised for research purposes.

Your legal rights

• Be informed about how data is used.
• Access the data we hold about you.
• Rectify inaccurate or incomplete information.
• Erase data in certain circumstances.
• Restrict processing under specific conditions.
• Data portability — receive data in electronic format where applicable.
• Object to processing for legitimate interests or marketing.
• Not be subject to profiling in certain automated decisions.

To exercise any of these rights, contact us using the details above. No fee applies except for unfounded, repetitive or excessive requests. We aim to respond within one calendar month.

Cookies

• Google Analytics — _ga, _gat, _gid. Statistical usage data. Up to 2 years.
• Stripe — __stripe_sid, __stripe_mid. Payment client recognition. 1 year.
• Google — NID. Remembers preferences. Up to 2 years.
• Client recognition — G_ENABLED_IDPS. 2 years.

You can block cookies via your browser settings (www.allaboutcookies.org). Blocking cookies may prevent access to some website features. All non-essential cookies expire after 2 years.