The small print
Privacy
This explains what we do with your details when you book afternoon tea, buy event tickets or gift vouchers, send us an enquiry, or visit this website. We keep it simple: we only collect what we need to look after your booking, and we never sell your details.
Who we are. Eat Me Drink Me is a trading name of Thomas & Russell Ltd (company no. 17220536), 6 Beaufort Arms Court, Monmouth NP25 3UA. We are the “controller” of your personal data. Questions or requests: cafe@eatmedrinkme.co.uk.
What we collect and why
- Afternoon tea bookings: your name, email, phone number (if you give one), the date, time and number of guests, and any notes about dietary needs or allergies. We use these to hold your table, prepare your tea safely and contact you about your booking. Dietary and allergy notes can be health information; we only use them to keep you safe, and only the café team can see them.
- Event tickets: the buyer’s name and email, and the names on each ticket, so we can send your tickets and check you in at the door. If you buy tickets at our till and give an email for your receipt, we use it to send your tickets.
- Gift vouchers: the buyer’s email and the names and message you add, so we can send and honour the voucher.
- Enquiries (parties, groups, space hire): the details you send, so we can reply.
- Marketing emails: only if you tick the box asking for them. You can stop them at any time by replying to any email.
The legal bases are: taking and fulfilling your booking or order (contract); replying to enquiries and keeping the site secure (our legitimate interests); and your consent for marketing emails and for any health details you choose to tell us.
Payments
Payments are taken by Square on Square’s own secure payment page. We never see or store your card details. Square sends you a receipt and processes payment data under its own privacy notice.
Who else handles your data
We use a small number of trusted providers to run the website, each only for that purpose:
- Cloudflare – hosts this website and its booking database.
- Square – card payments, gift cards and the café till.
- Google Workspace – our email (booking confirmations and replies come from our Google mailbox) and, if we use it, the café’s booking calendar, which holds the name, time and party size only.
Some of these companies may process data outside the UK; where they do, they use the safeguards UK data protection law requires.
How long we keep it
- Afternoon tea bookings: names, contact details and dietary notes are deleted 90 days after your visit.
- Event tickets: names and emails are deleted 90 days after the event.
- Gift vouchers: the buyer’s email, names and message are deleted 90 days after the voucher expires.
- Enquiries: deleted after 180 days.
- Records of emails the website sent: deleted after 60 days.
We keep basic records of payments (amounts and dates, without your contact details) for as long as we need them for our accounts. Copies of emails between us stay in the café’s mailbox, and booking calendar entries stay in the café’s diary, until we tidy them up; ask us and we’ll delete yours.
Cookies and analytics
We don’t use advertising or tracking cookies, so there’s no cookie banner. Visitor statistics are counted by Cloudflare Web Analytics, which doesn’t use cookies or identify you. Staff who sign in to edit the website get one essential sign-in cookie. Square’s payment page may set its own cookies when you pay.
To stop the booking forms being misused, we briefly keep a scrambled (one-way) version of your internet connection’s address; it can’t be turned back into the address, and it’s removed within a day or as soon as your checkout finishes.
Your rights
You can ask to see the personal data we hold about you, correct it, have it deleted, or object to how we use it. Just email cafe@eatmedrinkme.co.uk. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Last updated 22 October 2026.