Last updated: 23 February 2026

Introduction

The Winning Post ("we", "our", "us") is committed to protecting and respecting the privacy of all individuals who visit our website at winningpostspennymoor.co.uk and our physical premises at Merrington View, Kirk Merrington, Spennymoor DL16 7RY. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this policy periodically, as we may update it from time to time to reflect changes in our practices or legal requirements. Any significant changes will be clearly indicated on this page with a revised "last updated" date.

Information We Collect

We may collect and process the following types of personal information when you interact with our website, make a reservation, or visit our premises:

  • Contact Information: Your name, email address, telephone number and postal address when you make a booking, send us an enquiry via our contact form or correspond with us by email or telephone.
  • Reservation Details: Information related to your booking, including date, time, party size and any special requirements or dietary needs you share with us.
  • Website Usage Data: Technical information such as your IP address, browser type, operating system, referring website, pages visited and the duration of your visit. This data is collected through standard web server logs and analytics tools.
  • Communication Records: Records of any correspondence you have with us, including emails, contact form submissions and telephone enquiry details.
  • Feedback and Reviews: Any comments, reviews or feedback you voluntarily provide about your experience at The Winning Post.

How We Use Your Information

We use the personal information we collect for the following purposes:

  • To process and manage table reservations and booking enquiries.
  • To respond to your questions, comments and requests in a timely manner.
  • To provide you with information about our services, menu updates, special events and promotions where you have consented to receive such communications.
  • To improve our website, services and overall customer experience based on usage patterns and feedback.
  • To comply with our legal obligations and protect our legitimate business interests.
  • To manage and administer private events and functions that you arrange with us.

Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases for processing your personal information:

  • Consent: Where you have given us clear consent to process your personal data for a specific purpose, such as subscribing to communications.
  • Contract: Where processing is necessary to fulfil a contract with you, such as when you make a table reservation.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and responding to enquiries, provided your rights do not override those interests.
  • Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.

Data Sharing

We do not sell, trade or rent your personal information to third parties. We may share your data with trusted service providers who assist us in operating our website and business, such as web hosting providers and email service providers. These third parties are contractually obligated to handle your data securely and only for the purposes we specify. We may also disclose your information if required to do so by law or in response to a valid request from a law enforcement authority.

Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Reservation records are typically retained for up to 12 months after the booking date. Contact form enquiries and correspondence are retained for up to 24 months. Website analytics data is retained in anonymised form and does not identify individual users beyond the retention period.

Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. These measures include secure data storage, access controls and regular reviews of our security practices. However, please be aware that no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of your data.

Cookies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how visitors use our website. You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website. For detailed information about the cookies we use, please refer to any cookie notice displayed on our website.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal information we hold about you.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions.
  • Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, as required by law.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit. Following a link to any external site is entirely at your own risk.

Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe that we have inadvertently collected data from a child under 16, please contact us immediately and we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. The revised policy will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues. You can contact the ICO at ico.org.uk.