Privacy Policy

Privacy Policy

Amendment date: 10/09/2026

Your privacy is of the upmost importance to us and Graysons Restaurants are fully committed to protecting it. This privacy notice is designed to give you information on how we collect your data and who we share it with.

This privacy notice is issued on behalf of Graysons Restaurants Limited (“Graysons or we”). Graysons operates its website and is responsible for the collection and storage of personal data exclusively through our website https://graysons.com/  and not third-party websites that you can access via hyperlinks from our website.

Data controller

To the extent that the data processing activities relate to Graysons’ business in the UK, Graysons Restaurants Limited is a registered Data Controller under company registration No. 04654181 with registered office at: The Lighthouse, 368 Gray’s Inn Road, London, England, WC1X 8BB

Contact details of our compliance department responsible for data processing:

Correspondence address:

Graysons Restaurants Limited
Halford House, 2 Coval Lane
Chelmsford, CM1 1TD

Email address: gdpr@graysons.com

What personal data is processed?

a) Data processed when visiting our website

The following data is automatically collected when you visit our website:

• Name of retrieved web page
• Date and time of the retrieval
• Referrer URL (the previously visited page)
• IP address

b) Data processed when you contact us

You can also provide us with the following data if you contact us via the contact forms integrated on our website or by e-mail:

Your contact data: your name, e-mail address and phone number in connection with the content of your enquiry as you submit it to us.

You are not obliged to provide us with the data listed in the aforementioned sections a) and b). Without this data, however, we are not able to provide you with the website with all its functions or to answer your contact request.

Our website is purely for your information only, we do not accept payments.

For what purpose and on what legal basis is the data processing carried out?

Insofar as data about access to the website and the server log files also includes personal data, we collect and process this data in our legitimate interest within the meaning of Art. 6(1) lit. f Data Protection Regulation (GDPR) (in order to operate and improve the website).

Graysons only uses log data to ensure the technical functionality and security of the website. However, Graysons reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.

If you send us an inquiry about our offer via contact form or e-mail, we process your personal data for the purpose of carrying out pre-contractual measures within the meaning of Art. 6(1) lit. b GDPR (to be able to make you an offer and/or to answer your questions about our offer).

We will not use your contact details to send you direct marketing material.

Google Analytics

We use Google Analytics to help us understand how visitors interact with our website and to improve the user experience. Google Analytics may collect the following information:

User and Device Data

• Device Information: Device type, screen resolution, device model and operating system.
• Browser Information: Browser type, browser language settings and enabled browser features.
• Location Information: Approximate geographic location, such as city or region, derived from IP address information. We do not use Google Analytics to identify individual users or to access their full IP addresses.
• Identifiers: Unique client identifiers stored in first-party cookies, enabling us to recognise returning visitors and analyse website usage over time.

Traffic and Behaviour Data

• Traffic Sources: Information about how users arrive at our website, including direct visits, referral websites, social media channels and search engines.
• Page Activity: The pages visited, page titles viewed, navigation paths and time spent on pages.
• User Interactions: Standard engagement events automatically collected by Google Analytics, such as page scrolls, outbound link clicks, site searches, file downloads and other interactions with website content.

Purpose of Processing

We use this information to:

• Understand website performance and visitor behaviour.
• Improve website functionality, content and user experience.
• Measure the effectiveness of marketing and promotional activities.
• Generate anonymous statistical reports on website usage.

This data is collected and processed in an aggregated and anonymised form where possible and is not used to identify individual visitors.

Who do we share your data with?

As part of the provision of our website, we work with IT service providers who support us in the creation, operation and further development of the website and keep the website and its content stored on their servers. Furthermore, we use the tool of an IT service provider to analyze pseudonymous usage data (for more information on how we analyze usage data, see the section “What are cookies and what types do we use?”). The service providers we use in connection with the provision and operation of our website process personal data of the website users shared with them for this purpose as our data processor within the meaning of Art. 4(8) GDPR. We have therefore concluded data processing agreements with the service providers to protect your data.

We do not transfer personal data outside of the EEA and UK.

How long do we store personal data?

We store your personal data for as long as is necessary for the purposes for which it was collected. The retention or storage periods result from business requirements and relevant laws.

Stored personal data will be deleted if you revoke any consent you have given us to process it, if the data is no longer necessary for the fulfillment of the purpose for which it was processed, or if its processing is inadmissible for other legal reasons.

Cookies

For the purpose of running and maintaining our website, we collect data on the details of your visits including, but not limited to traffic data, location data and communication data. We do this via the use of cookies.

There are two types of cookie you may encounter when using this website:

First party cookies: these are our own cookies, controlled by us and used to provide information about usage of our site.

Third party cookies: these are cookies found in other companies’ internet tools which we are using to enhance our site, for example Instagram or LinkedIn have their own cookies, which are controlled by them.

Social Media

Please note that if you do choose to share content from the Graysons website through any social media providers that we don’t control the setting of these cookies and we recommend that you check the provider’s website for further information.

Access to Information & Your Rights

In accordance with the UK General Data Protection Regulations of 2018 all individuals have the following rights over the processing of their Personal Data –

• The right to be informed – to know what information we hold about you and why
• The right of access – to request copies of your personal data
• The right to rectification – to have inaccurate personal data corrected
• The right to erasure – to have personal data erased under limited conditions
• The right to restrict processing – to have the processing suspended in certain circumstances
• The right to data portability – to have personal data sent directly to another company
• The right to object – to personal data being used for marketing and advertising to you
• The right to lodge a complaint with us – if you have concerns about how your personal data has been collected, used, stored or otherwise handled, you may submit a complaint directly to Aramark by contacting gdpr@graysons.com.

We will acknowledge your complaint within 30 days of receipt and, without undue delay, we will:

• take appropriate steps to respond to your complaint, which will include making appropriate enquiries into it and informing you about its progress
• inform you of the outcome of the complaint.

You may also lodge a complaint with the competent data protection authority if you are dissatisfied with how we have handled your personal data or your complaint. Graysons is supervised by the following data protection authority:

Information Access Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
UK

0303 123 1113

The most effective and efficient way to contact the ICO regarding queries or complaints is by means of the webform.

Please note that there are exceptions to the above rights and that you may not be able to exercise them fully in every situation.

Updates

Graysons reviews and updates this privacy notice on a regular basis. All updates will be published on the website and will be kept in line with the most up to date data protection legislation.

Contact Us

If you have any queries relating to this notice or concerns about how we process your personal data please address them to gdpr@graysons.com.