Michelin Plaque 
AA 1 Rosette Privacy Policy
The Galley Restaurant | 41 Fore Street, Topsham, Exeter, Devon EX3 0HU | [email protected] | 01392 876078
We take your privacy seriously. This policy explains what personal data we collect when you visit our website, make a reservation, purchase a voucher, or get in touch with us — and what we do with it.
Who we are
The data controller is Mitchell Restaurants Ltd, trading as The Galley, of 41 Fore Street, Topsham, Exeter, Devon, EX3 0HU. Registered in England & Wales, Company No. 07410018. VAT No. GB 100 9990 23.
If you have any questions about this policy or how we handle your data, contact us at:
The Galley Restaurant
41 Fore Street, Topsham, Exeter, Devon, EX3 0HU
[email protected]
01392 876078
What data we collect and why
Table reservations
When you book a table through our website (via ResDiary) or by telephone, we collect your name, email address, phone number, party size, and any dietary notes or preferences you provide. We use this to confirm your booking, send reminders, and make sure the kitchen is prepared for any requirements you have shared.
The legal basis for this processing is contract performance — we need it to fulfil your booking.
Gift vouchers
When you purchase a gift voucher through GiftPro, your name, email address, and payment details are processed. Payment data is handled entirely by our payment processor and is never stored by us. We use your contact details to deliver the voucher and keep a record of the transaction.
The legal basis is contract performance.
Private dining and event enquiries
When you submit a private dining enquiry, we collect your name, email address, phone number, occasion details, and any other information you choose to share. We use this solely to respond to your enquiry and, if you proceed, to arrange your event.
The legal basis is legitimate interests — specifically, to respond to enquiries made to us.
Newsletter
If you subscribe to our monthly newsletter, we collect your email address. We send one email a month about what is on the menu, upcoming events, and seasonal notes from the kitchen. We never pass your address to third parties for marketing.
The legal basis is your consent. You can unsubscribe at any time using the link in any email we send, or by writing to us.
Contact by email or telephone
When you contact us directly, we may keep a record of that correspondence to help us respond accurately and follow up where necessary. We do not retain contact records beyond what is reasonably necessary.
The legal basis is legitimate interests.
Website analytics
We use Google Analytics to collect data about how visitors use our website — which pages are viewed, how long is spent on them, what device or browser is used, and how visitors found us. We do not use it to identify you personally, and we use it only to improve the website. Analytics cookies are set only after you accept them; see Cookies below.
The legal basis is consent.
How long we keep your data
We keep reservation and voucher records for up to three years from the date of the booking or transaction — primarily for financial record-keeping obligations under UK law. Newsletter subscribers remain on our list until they unsubscribe. Contact correspondence is retained for twelve months unless we have an ongoing reason to keep it longer.
Who we share your data with
We do not sell your personal data. We share it only with the third-party services required to run the restaurant:
- ResDiary — our reservations platform. Their privacy policy is at resdiary.com/privacy-policy.
- GiftPro — our voucher and gift experience platform.
- Web3Forms — the form service that delivers our newsletter sign-ups and private dining enquiries to our inbox.
- Google Analytics — website analytics, and only once you have accepted analytics cookies. Google's privacy policy is at policies.google.com/privacy.
- Our accountant and HMRC — where required for tax and financial compliance.
All processors we use are contracted to handle your data lawfully and securely, and only for the purposes we have specified.
Cookies
Our website uses cookies. Strictly necessary cookies keep the site working — delivering pages, keeping them secure, taking a booking, and remembering your cookie choice. Analytics cookies are only placed once you have accepted them. We run no advertising or cross-site tracking cookies.
When you first visit, nothing but the strictly necessary cookies is set until you choose. You can change your choice at any time using the Cookie settings link at the foot of every page, or by adjusting your browser settings. Declining also clears any analytics cookies already stored in your browser.
Cookies we use
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
consentMode | The Galley | Remembers your cookie choice so we do not ask again. Strictly necessary. | 1 year |
_ga | Google Analytics | Distinguishes one visitor from another. Analytics — only set if you accept. | 2 years |
_ga_… | Google Analytics | Keeps track of a single visit to the site. Analytics — only set if you accept. | 2 years |
In addition, our reservations page loads a booking widget from ResDiary, which sets its own cookies to keep your booking session working while you choose a table. These are strictly necessary to the booking service you have asked us to provide, so they are not covered by the analytics choice above. Their privacy policy is at resdiary.com/privacy-policy.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate data.
- Erase your data, where there is no lawful reason for us to keep it.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, where consent is the basis for processing.
- Data portability — receive a copy of your data in a structured, machine-readable format.
- Restrict processing in certain circumstances.
To exercise any of these rights, write to us at [email protected]. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO). The ICO can be contacted at ico.org.uk or by calling 0303 123 1113. We would ask that you contact us first so we can try to resolve any concern directly.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent revision. For significant changes, we will notify newsletter subscribers by email.