Legal
GDPR Compliance
This statement explains how The Bull Inn approaches UK GDPR and the Data Protection Act 2018 for the current public website.
Scope
This page covers personal data processing connected with the public website and enquiries made using the contact details published there. It should be read with our Privacy Policy and Cookie Policy.
Principles we follow
- Lawfulness, fairness and transparency — we explain what the site currently processes.
- Purpose limitation — we use information to operate the site and respond to enquiries.
- Data minimisation — the public site does not currently collect form submissions or marketing lists.
- Accuracy — we take reasonable steps to keep published contact details accurate.
- Storage limitation — we keep information only as long as needed for the purpose.
- Integrity and confidentiality — we use hosting and application controls appropriate to a public information website.
What the public site processes today
There is no contact form, booking form, analytics package, or consent banner on the current public site. Technical logs and a strictly necessary Laravel session cookie may be used to deliver and protect the site. The Contact page embeds a Google Map, which may involve Google processing under Google’s terms.
Your rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, and data portability, and rights related to automated decision-making. We do not use automated decision-making that produces legal or similarly significant effects about you on this website.
To exercise a right, contact enquiry@bull-inn.com. We aim to respond within one month.
Legal bases
We typically rely on legitimate interests for operating the website, contractual or pre-contractual steps when handling visit or event enquiries, and legal obligation where the law requires it.
Security and retention
We use reasonable technical and organisational measures for a site of this kind, including HTTPS, security headers, and restricted access to server configuration. No website can promise perfect security. Personal correspondence is retained only as needed to handle the enquiry and related records.
International transfers
If you use external services linked from the site (for example Google or Facebook), those providers may process data according to their own terms, which can include transfers outside the UK. Loading the optional map also involves Google.
Contact for data protection questions
Please contact us at:
The Bull Inn
26 Main Street
Gristhorpe
YO14 9PP
United Kingdom
Email: enquiry@bull-inn.com
Complaints
Please contact us first. You may also complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
https://ico.org.uk/make-a-complaint/ (opens in a new tab)
Last updated: August 2026