Privacy Policy

Last Updated: November 21, 2025

1. Introduction

Next Level Bar Limited ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Next Level Bar Limited is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at the details provided at the end of this policy.

3. Information We Collect

We may collect the following types of personal data:

Identity Data: Name, date of birth (for age verification)
Contact Data: Email address, telephone number, postal address
Transaction Data: Details of purchases, loyalty card usage, payment information
Technical Data: IP address, browser type, device information, cookies
Usage Data: How you use our website, services, and products
Marketing Data: Your preferences for receiving marketing communications

4. How We Collect Your Data

We collect personal data through:

Direct interactions (bookings, enquiries, loyalty card registration)
Automated technologies (cookies, analytics)
Third parties (payment processors, social media platforms)

5. How We Use Your Data

We use your personal data for the following purposes:

To process bookings, reservations, and party enquiries
To manage our loyalty card scheme and rewards
To process payments and prevent fraud
To communicate with you about our services
To send marketing communications (with your consent)
To improve our website, services, and customer experience
To comply with legal obligations

6. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance: To fulfill bookings and provide services
Consent: For marketing communications and non-essential cookies
Legitimate Interests: To improve our services and prevent fraud
Legal Obligation: To comply with legal requirements

7. Data Sharing and Third Parties

We may share your data with trusted third parties including:

Payment processors (to handle transactions securely)
Analytics providers (Google Analytics)
Email service providers (Postmark, for sending transactional emails)
Legal authorities (when required by law)

We do not sell your personal data to third parties. All third-party processors are required to maintain appropriate security measures and only process data in accordance with our instructions.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Loyalty card data is retained while the card is active and for up to 2 years after the last transaction.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for marketing at any time

To exercise any of these rights, please contact us using the details below. We will respond within one month of your request.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

11. Cookies

Our website uses cookies to enhance your browsing experience and analyse site usage. You can control cookie settings through your browser preferences. For more information about the cookies we use, please see our Cookie Policy.

12. International Transfers

We primarily store and process data within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

13. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Next Level Bar Limited
Email: enquiries@nextlevelbar.co.uk
Or visit us at our Contact page

16. Complaints

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO
Website: ico.org.uk
Helpline: 0303 123 1113