This document explains how we process your personal data when you choose to provide your email address to receive a response to your feedback.
The controller of your personal data is:
Company Name: The George Pub
Address: Station Road, Cullingworth, Bradford, BD13 5HN
Contact Email: richard.cullen@tiffinsandwiches.co.uk
We process your personal data (email address) for the sole purpose of responding to the feedback you have submitted.
The legal basis for processing your data is your explicit consent, which you provide by ticking the checkbox before submitting your feedback (in accordance with Article 6(1)(a) of the General Data Protection Regulation - GDPR).
We only process the email address you voluntarily provide. Providing your email address is not a statutory or contractual requirement. It is entirely optional. If you do not provide it, the only consequence is that we will be unable to send you a personal reply to your feedback.
To provide this service, we may share your personal data with the following categories of recipients (known as data processors):
Hosting Provider: Our application is hosted on Google Cloud Platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your data is stored on servers located within the European Economic Area (EEA).
Email Delivery Provider: To send you a reply, we use the Amazon Simple Email Service (SES), provided by Amazon Web Services, Inc.
Authorized Personnel: Authorized employees or collaborators of the Data Controller who require access to the data to respond to your feedback.
Your email address will be processed only for the time necessary to handle your feedback and provide a complete response. After our correspondence is complete, your data will be deleted from our active systems and will be permanently erased after a short archival period not exceeding 90 days.
You have the following rights regarding your personal data:
Right to Access: You can request a copy of the data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data.
Right to Restrict Processing: You can request that we limit the processing of your data.
Right to Withdraw Consent: You can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at the email address provided in Section 1.
You have the right to lodge a complaint with a supervisory authority if you believe the processing of your personal data violates GDPR.
Your personal data will not be used for automated decision-making, including profiling.
Last Updated: July 15, 2025