Privacy Policy

Last updated: 1 August 2026

1. Introduction

The Residence Bar & Kitchen respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you:

Visit our website.
Contact us by telephone, email, website form or social media.
Make a table reservation.
Enquire about or book a party, private event or venue hire.
Purchase tickets, packages, food or beverages.
Subscribe to our mailing list.
Attend our venue or one of our events.
Participate in a promotion, competition or customer survey.
Interact with our advertisements or social-media pages.

This policy also explains your rights under UK data protection law.

2. Who We Are

The Residence Bar & Kitchen is operated by: CK Foods Limited
Our trading address is: The Residence Bar & Kitchen, 2 Rillaton Walk, The Hub:MK, Milton Keynes, MK9 2BQ

Email: mk@trbmk.co.uk
Telephone: 01908 764908

For the purposes of UK data protection law, CK Foods Limited is generally the data controller responsible for deciding how and why your personal information is used.

Some third-party platforms, including DesignMyNight, Google, Meta, Wix and Mailchimp, may also act as separate controllers for particular processing activities. Their own privacy notices will apply to the activities for which they independently determine how personal information is used.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following information.

Contact and identification information

This may include:

Your name.
Email address.
Telephone number.
Postal or billing address.
Company or organisation name.
Job title.
Booking reference.
Account or membership details.
Proof-of-age information where required.

We will not normally retain copies of identification documents unless there is a specific lawful and necessary reason to do so.

Booking and event information

This may include:

The date and time of your booking.
Number of guests.
Type of event.
Preferred venue area.
Package or menu selected.
Guest age information where relevant.
Accessibility requirements.
Seating or layout requests.
Entertainment and decoration requirements.
Minimum-spend or venue-hire arrangements.
Communications regarding your booking.
Cancellation, deposit or payment information.

Payment and transaction information

This may include:

Products or services purchased.
Amounts paid.
Deposits and refunds.
Payment status.
Limited payment-card information supplied by a payment provider.
Billing and accounting records.

We do not normally receive or retain your complete payment-card number. Payments may be handled by payment processors or booking platforms subject to their own security and privacy terms.

Dietary, allergy and accessibility information

You may provide information about:

Allergies.
Food intolerances.
Dietary requirements.
Disabilities.
Accessibility requirements.
Other health-related requirements relevant to your visit.

Some of this information may be considered special-category personal data. We use it only where necessary to safely provide our services, respond to your request or protect your vital interests.

Please provide only information that is relevant to your booking or visit.

Marketing information

This may include:

Whether you have agreed to receive marketing.
Your marketing preferences.
Email campaign interactions, such as whether a message was delivered, opened or selected.
Promotions or events that appear to interest you.
Records of when consent was provided or withdrawn.

Website and device information

This may include:

IP address.
Browser type.
Device type.
Operating system.
Approximate location, such as town, city or region.
Pages visited.
Time spent on pages.
Referral source.
Website interactions.
Booking or enquiry conversions.
Cookie and advertising identifiers.

We use non-essential analytics and advertising technologies only in accordance with the choices made through our cookie consent system.

CCTV and venue security information

CCTV may operate in and around the venue.

CCTV recordings may capture:

Images of customers, staff and visitors.
Date and time of attendance.
Movement around the venue.
Security or incident information.

CCTV is used for safety, crime prevention, incident investigation, staff and customer protection and compliance with licensing responsibilities.

Photographs and recordings

Photography or filming may take place during public events, live entertainment or promotional activities.

We may collect:

Photographs.
Video recordings.
Audio recordings.
Images or comments submitted through social media.

Where practical, we will notify guests when organised promotional filming or photography is taking place. Guests may speak to management where they do not wish to appear in identifiable promotional content.

4. How We Collect Your Information

We may collect information directly from you when you:

Complete a form on our website.
Make a booking.
Contact us by email or telephone.
Speak to our staff.
Join our mailing list.
Purchase a ticket.
Enter a competition.
Respond to a survey.
Attend an event.
Post or message us on social media.

We may also receive information from:

DesignMyNight and the Collins booking system.
Tag Venue or another venue-enquiry platform.
Ticketing and payment providers.
Event organisers.
A lead organiser making a booking on behalf of a group.
Google Analytics and Google Ads.
Meta platforms, including Facebook and Instagram.
Mailchimp.
Wix and applications used on our Wix website.
Publicly available sources.
Professional advisers, insurers or authorities where appropriate.

Where another person makes a booking on your behalf, we may receive your name, dietary requirements, accessibility needs or other relevant booking information from that person.

The organiser should ensure that they are authorised to provide this information and that relevant guests are made aware of this Privacy Policy.

5. How and Why We Use Personal Information

We use personal information for the following purposes.

Managing enquiries and bookings

We use your information to:

Respond to enquiries.
Check availability.
Prepare proposals and quotations.
Confirm reservations.
Manage deposits and payments.
Arrange food, staffing and entertainment.
Communicate booking changes.
Manage cancellations and refunds.
Provide the services you requested.

Our lawful basis will normally be that processing is necessary to enter into or perform a contract with you.

Providing food, hospitality and event services

We use information to:

Allocate tables and venue spaces.
Prepare food and packages.
Manage dietary and allergy requirements.
Arrange accessibility support.
Manage guest numbers.
Provide private events and venue hire.
Deliver customer service.

Our lawful bases may include performance of a contract, legitimate interests, explicit consent for relevant health information and protection of vital interests where there is an emergency.

Processing payments and keeping financial records

We use transaction information to:

Take payments and deposits.
Issue refunds.
Prevent fraudulent transactions.
Maintain accounting and tax records.
Resolve financial disputes.

Our lawful bases include performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting the business.

Customer service and complaints

We use information to:

Respond to questions.
Investigate complaints.
Review customer feedback.
Resolve disputes.
Improve service standards.
Manage insurance or legal claims.

Our lawful bases include performance of a contract, legitimate interests and legal obligations.

Marketing

Where permitted, we may use your contact details to send information about:

Upcoming events.
Live music and entertainment.
Party and venue-hire services.
Seasonal events.
Food packages.
Promotions and offers.
News from The Residence.

We may send electronic marketing where:

You have provided consent; or
The law permits us to contact an existing customer about similar services under the soft opt-in rules.

You can unsubscribe at any time by:

Selecting the unsubscribe link in a marketing email.
Updating your preferences where available.
Contacting us at mk@trbmk.co.uk.

Service messages concerning a booking, payment, cancellation or important venue information are not marketing messages and may still be sent where necessary.

Website analytics

With your consent, we may use Google Analytics and similar technologies to understand:

How visitors find our website.
Which pages are viewed.
How visitors navigate through the website.
Which devices and browsers are used.
Whether visitors complete enquiries or bookings.
How the website can be improved.

We may also use limited platform information necessary to maintain the security, stability and performance of our Wix website.

Advertising and conversion measurement

With your consent, we may use Google Ads conversion tracking and Meta Pixel to:

Measure whether advertisements result in visits, enquiries or bookings.
Understand advertisement performance.
Create advertising audiences.
Show more relevant advertising.
Avoid repeatedly showing the same advertisement.
Improve future campaigns.

Google and Meta may receive online identifiers, device information, browsing activity and information about actions taken on our website.

Depending on your settings and the providers’ practices, this information may be combined with other information held by those providers.

Safety, security and licensing

We use relevant information to:

Protect customers, staff and property.
Prevent and investigate crime.
Manage intoxication, disorder or antisocial behaviour.
Enforce venue rules.
Respond to emergencies.
Meet licensing and health-and-safety responsibilities.
Assist the police, emergency services or local authorities.

Our lawful bases may include legitimate interests, legal obligations and protection of vital interests.

Business administration and legal matters

We may use information to:

Operate and improve our business.
Maintain records.
Train staff.
Manage suppliers.
Prevent fraud.
Enforce agreements.
Establish, exercise or defend legal claims.
Meet regulatory and legal requirements.

Our lawful bases include legitimate interests and legal obligations.

6. Our Lawful Bases

Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract

Processing is necessary to enter into or perform a booking, event, purchase or other agreement with you.

Legal obligation

Processing is necessary to comply with laws and regulatory requirements, including accounting, taxation, licensing, health and safety and law-enforcement requirements.

Legitimate interests

Processing is necessary for our legitimate business interests, including:

Responding to customers.
Operating and improving our venue.
Maintaining security.
Preventing fraud.
Protecting our legal rights.
Managing complaints.
Maintaining appropriate business records.

We consider whether these interests are overridden by your rights and freedoms before relying on this basis.

Consent

We rely on consent for activities including:

Optional website tracking.
Advertising and profiling cookies.
Certain electronic marketing.
Some uses of health, allergy or accessibility information.
Other optional processing explained when consent is requested.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

Vital interests

In an emergency, we may process or share information where necessary to protect someone’s life or physical safety.

7. Special-Category Information

Information about allergies, medical conditions, disabilities or accessibility requirements may be treated as special-category data.

We will normally process this information only where:

You have voluntarily provided it for your booking or visit.
You have explicitly agreed to its use.
Processing is necessary to protect vital interests.
Processing is required for legal claims or another lawful exception.

We will limit access to staff or suppliers who reasonably need the information to safely deliver the service.

8. Who We Share Personal Information With

We may share relevant information with trusted organisations including:

Website and technology providers

This includes Wix, website applications, IT support, hosting, security and communications providers.

Booking and ticketing providers

This includes DesignMyNight, Collins and other booking or ticket platforms used for reservations and events.

When a person books through DesignMyNight, DesignMyNight may collect information and share booking details with us. DesignMyNight may also process some information for its own purposes under its separate Privacy Notice.

Marketing and analytics providers

This includes:

Google Analytics.
Google Tag Manager.
Google Ads.
Meta Platforms, including Facebook and Instagram.
Mailchimp.

These providers may process online identifiers, campaign interactions and contact details depending on the services used and your consent choices.

Payment providers

We may share information with banks, merchant-service providers and payment processors to collect payments, process refunds and prevent fraud.

Event and service providers

Information may be shared with approved caterers, performers, security providers, decorators, photographers or other suppliers where necessary to fulfil a booking.

Only information reasonably required for their role will be shared.

Professional advisers

This may include accountants, solicitors, insurers, consultants and debt-recovery providers.

Public authorities

We may disclose information to the police, courts, licensing authorities, local authorities, HM Revenue & Customs, regulators, emergency services or other bodies where required by law or reasonably necessary to protect people or property.

Business transactions

If the business or venue is sold, restructured or transferred, relevant information may be disclosed to professional advisers and potential purchasers, subject to appropriate confidentiality and data-protection safeguards.

We do not sell customer contact lists or personal information to unrelated third parties.

9. International Data Transfers

Some service providers may process personal information outside the United Kingdom, including in the United States or other countries.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is used.

These safeguards may include:

UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to approved Standard Contractual Clauses.
Contractual, security and organisational protections.
Another lawful transfer mechanism.

Further information about the safeguards used by individual providers may be found in their respective privacy notices.

10. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may include:

Unsuccessful or general enquiries: normally up to 24 months after the last meaningful contact.
Booking and transaction records: normally up to six years where needed for accounting, taxation, contractual or legal purposes.
Private-event agreements and associated communications: normally up to six years after the event or resolution of any dispute.
Marketing information: until you unsubscribe, withdraw consent or your information is removed under our retention-review process.
Marketing suppression records: limited information may be retained to ensure we respect your request not to receive further marketing.
Cookie information: according to the duration stated in our Cookie Policy or until consent is withdrawn.
Complaints and incidents: for as long as reasonably necessary to investigate and resolve the matter and manage potential legal claims.
CCTV: for a limited security-retention period, unless footage is required for an incident, investigation, insurance matter or legal proceedings.

We may retain information for longer where required by law, a regulator, court proceedings or an ongoing dispute.

Information that is no longer required will be securely deleted, anonymised or destroyed.

11. Security

We use reasonable technical and organisational measures intended to protect personal information against:

Unauthorised access.
Loss.
Misuse.
Alteration.
Disclosure.
Accidental destruction.

Measures may include access controls, password protection, staff training, secure systems, backups and contractual safeguards with service providers.

No internet-based system is completely secure. Guests should take care when sending sensitive information by ordinary email or social media.

12. Children’s Information

Our website and marketing services are not directed at children.

Bookings should normally be made by an adult aged 18 or over.

We may receive limited information concerning children or guests under 18 where this is necessary for:

A family booking.
A private event.
Age restrictions.
Dietary or accessibility requirements.
Safety or emergency purposes.

The adult organising the booking should provide only the information reasonably necessary and should have appropriate authority to provide it.

We do not knowingly use children’s personal information for behavioural advertising or direct marketing.

13. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

Ask whether we process your personal information.
Request a copy of your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to erase information in certain circumstances.
Ask us to restrict processing.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Request data portability in certain circumstances.
Withdraw consent.
Complain about our use of your information.

These rights are not absolute. We may need to retain or continue using some information where there is a legal, regulatory, contractual or overriding legitimate reason.

We may ask for information to verify your identity before responding to a request.

To exercise your rights, contact:

Email: mk@trbmk.co.uk
Address: The Residence Bar & Kitchen, 2 Rillaton Walk, The Hub:MK, Milton Keynes, MK9 2BQ

14. Automated Decision-Making and Profiling

We do not normally make decisions that produce legal or similarly significant effects solely through automated processing.

Where you consent to advertising technologies, Google and Meta may use information for advertising measurement, audience creation or personalised advertising in accordance with their own privacy terms and your account or device settings.

You can refuse or withdraw consent through our website’s cookie settings.

15. Third-Party Websites

Our website may link to services operated by other organisations, including:

DesignMyNight.
Google.
Facebook and Instagram.
Mailchimp-hosted pages.
Ticketing platforms.
External event or supplier websites.

We do not control how these organisations use information collected directly through their websites. Their own privacy policies should be reviewed before providing personal information.

16. Complaints

Please contact us first if you have concerns about how we use your information so that we have an opportunity to investigate.

Email: mk@trbmk.co.uk
Telephone: 01908 764908

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in:

Our services.
Technology.
Booking providers.
Marketing tools.
Legal requirements.
Our data-processing activities.

The latest version will be published on our website with an updated revision date.

Material changes may also be communicated by another appropriate method where required.