How Guys Bar protects your information

This policy explains what we collect, why we collect it, and how you can contact us about your data.

Effective Date: 19 September 2026

1. Introduction

Welcome to the Guys Bar website.

At Guys Bar, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us, make a reservation or otherwise interact with our services.

We process all personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Irish Data Protection Act 2018 and other applicable privacy legislation.

By using this website, you acknowledge that you have read this Privacy Policy.

2. Data Controller

The data controller responsible for your personal information is:

Guys Bar Main Street Clifden Co. Galway H71 Y277 Ireland

Telephone: +353 95 21130 Email: admin@guysbarclifden.com

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.

3. Scope of this Policy

This Privacy Policy applies to all visitors and users of the Guys Bar website, including individuals who:

browse our website
contact us by email or telephone
make table reservations
follow links to gift voucher or other third-party services where available
communicate with us through our website

This policy does not apply to third-party websites that may be linked from our website.

4. Information We Collect

Depending on how you use our website, we may collect different categories of personal information.

4.1 Contact Information

When you contact us, we may collect:

your full name
email address
telephone number
the contents of your message
any information you voluntarily choose to provide

4.2 Reservation Information

When making a booking, we may collect:

your name
telephone number
email address
booking date
booking time
number of guests
special requests or dietary notes
reservation status
communication relating to your booking

4.3 Technical Information

When you visit our website, certain technical information may be collected automatically, including:

IP address and request information processed by hosting or infrastructure providers
browser type
operating system
device type
referring website where available
date and time of access
pages visited
interactions with the website
session duration
approximate location
privacy preferences stored in your browser
technical information shared with Google only where Google Analytics 4 or Google Maps is allowed to load

This information helps provide the website, maintain security, support optional third-party content and understand website usage where you allow analytics to load. Google Analytics 4 may collect usage and device information such as pages visited, approximate location, browser and device details, interactions, session duration and referral source.

5. How We Use Your Information

We use your personal information only where necessary to operate our business and provide our services.

Your information may be used to:

respond to enquiries
manage table reservations
provide customer support
communicate regarding reservations or customer enquiries
maintain website functionality
maintain website security
detect fraud or misuse
comply with legal obligations
maintain accounting and business records

We only collect information that is relevant and necessary for these purposes.

6. Legal Basis for Processing

Under GDPR, we process personal data using one or more of the following legal bases.

Performance of a Contract

We process your information where it is necessary to provide a service you have requested, including:

table reservations
customer enquiries relating to services

Legitimate Interests

We may process personal information where it is necessary for the legitimate interests of Guys Bar, including:

improving our website
maintaining website security
preventing fraud
protecting our business
responding to customer enquiries
improving customer experience

Whenever we rely on legitimate interests, we ensure that your rights and freedoms are fully considered.

Legal Obligations

Certain information may be retained where required by law, including for:

taxation
accounting
regulatory compliance
legal claims
law enforcement requests where legally required

Consent

Where required, we will ask for your consent before processing your personal data. In the current website this mainly applies to:

Google Analytics 4 and website usage analytics
optional third-party content such as Google Maps

Google Analytics 4 is only loaded after you give consent where consent is legally required. You may withdraw or change this choice at any time from Privacy settings or Cookie settings in the footer. Necessary storage remains active because it is required for the website and platform to function.

7. Cookies and Similar Technologies

Our website uses necessary browser storage so the site and platform can operate. Browser storage can include cookies, localStorage and sessionStorage; these are related technologies but they are not all technically cookies.

The website uses Google Analytics 4 to understand how visitors use the website and to improve the website and services. Analytics cookies or storage are used only after analytics consent is granted where consent is legally required.

For detail, please read our Cookie Policy.

Necessary storage

Necessary storage supports core website functions, platform fallback data, privacy preferences and, for authorised staff users, admin session handling.

Analytics cookies or storage

Google Analytics 4 may use cookies or similar storage to measure website usage and produce aggregated usage statistics. This can include pages visited, referral source, approximate location, device and browser information, interactions and session duration.

Optional third-party content

Google Maps is not loaded until you allow optional third-party content or choose to load the map. Loading the map may share technical information such as IP address, browser and device details with Google.

Managing choices

You can manage analytics and optional third-party content at any time using Privacy settings in the footer. You can also clear cookies and browser storage through your browser settings.

8. Third-Party Services

To operate our website and provide services, we use third-party providers. Based on the current application, these may include:

website hosting providers
Supabase for database, authentication, storage and server-side functions
Resend for booking-related emails
Google Analytics 4 if you consent to website usage analytics
Google Maps if you choose to load the map
external social media services if you choose to follow those links
CBE Inova for online gift vouchers

These providers may process personal information or technical data only where their service is used. Third-party websites have their own privacy practices.

Online gift vouchers are provided and managed through the third-party CBE Inova platform. Authorised Guys Bar staff may access voucher, customer and fulfilment information in CBE Inova where necessary to administer, fulfil or redeem vouchers, including postal fulfilment where applicable. CBE Inova voucher transaction data is not stored in the Guys Bar booking platform or its Supabase database. CBE Inova’s data protection role depends on the applicable contractual and processing arrangement.

External online ordering is expected to be provided through CBE Inova, but the live workflow has not yet been confirmed. We will review and update this privacy information when that workflow goes live and the actual processing is known.

9. Data Retention

We aim to retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information and legal requirements.

Our retention arrangements include:

Guest profiles, guest notes and tags, no-show bookings, cancelled bookings and completed past bookings: a configured retention threshold of 1095 days (3 years), followed by anonymisation through the approved manual retention process.
Privacy operation audit logs: a retention threshold of 1095 days, followed by deletion through the configured retention process.
Technical abuse/rate-limit records: a retention threshold of 1 day, followed by deletion. Booking submission logic also performs routine cleanup of throttle records older than one day.
customer enquiries until resolved
business correspondence where necessary
accounting and financial records as required by Irish law
website security logs for fraud prevention and system security

The configured period for identifiable reservation and customer data is 1095 days (3 years). Reaching a retention threshold makes records eligible for processing under the relevant rule; anonymisation or deletion takes place when the approved retention process is executed, rather than necessarily on the day the threshold is reached.

Destructive customer-data retention is intentionally manual rather than scheduled. An authorised administrator reviews eligible records and explicitly confirms the operation, and eligibility is checked again when it runs. Enabling a retention rule does not itself anonymise or delete customer records.

Anonymisation removes identifying customer information while allowing non-identifying operational and statistical booking information, such as booking ID, date and time, status, party size and table history, to be preserved.

These platform retention periods do not specify how long CBE Inova retains voucher transaction data. If you have a question about a specific record, please contact us using the details in this policy.

10. Your Rights Under GDPR

Under applicable data protection legislation, you have the right to:

request access to your personal information
request correction of inaccurate or incomplete information
request deletion of your personal data where legally applicable
request restriction of processing
object to certain types of processing
receive your personal data in a portable format where applicable
withdraw consent at any time where processing relies on consent
lodge a complaint with the Irish Data Protection Commission

Please contact us using the details below if you wish to make a request. Authorised Guys Bar administrators can search, export, correct and anonymise platform-held customer records when handling verified requests. These tools do not remove data from third-party providers or infrastructure logs outside Guys Bar platform tables.

11. Data Security

Protecting your personal information is extremely important to us.

We implement appropriate technical and organisational measures designed to safeguard personal information against:

unauthorised access
accidental loss
unlawful disclosure
misuse
alteration
destruction

Our website uses encrypted HTTPS connections and secure infrastructure to help protect information transmitted through the website.

Although we strive to maintain a high level of security, no online system can guarantee absolute security.

12. International Data Transfers

Some of our trusted service providers may process information outside Ireland or the European Economic Area (EEA).

Where international transfers occur, appropriate safeguards are implemented in accordance with GDPR. These safeguards may include:

European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
other legally recognised transfer mechanisms

We take reasonable steps to ensure that your personal information remains protected regardless of where it is processed.

13. Third-Party Websites

Our website may contain links to external websites, social media platforms or third-party services.

This Privacy Policy applies only to the Guys Bar website.

We are not responsible for the privacy practices, content or security of external websites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Children's Privacy

Our website is intended for a general audience and is not specifically directed towards children.

We do not knowingly collect personal information from children without appropriate legal grounds.

If you believe that a child has provided us with personal information, please contact us so that appropriate action can be taken.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology or our business operations.

The latest version will always be published on this page together with the updated effective date.

We encourage visitors to review this Privacy Policy periodically.

16. Contact Us

If you have any questions regarding this Privacy Policy or the way we process personal information, please contact us.