Privacy Policy

Last updated: 6 October 2026

‍

Culineer Limited (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website (culineer.co.uk or any associated sites), contact us, or engage our hospitality consultancy services — including audit visits to your property.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we offer services to clients in Ireland or elsewhere in the European Union, we also comply with the EU General Data Protection Regulation (EU GDPR) and Ireland's Data Protection Acts 1988 to 2018. If you have any questions, please contact us using the details at the end of this policy.

Who We Are

Culineer Limited is a hospitality consultancy registered in England and Wales, working with clients in the UK, Ireland and the United States. We specialise in restaurant and pub operations, employee training, pub conversions, new restaurant openings, menu engineering, and hotel & resort guest experience and dining audits.

Personal Data We Collect

We may collect the following personal data:

• Contact information: name, email address, phone number, business name, and job title.
• Enquiry and service data: details you provide in contact forms, emails, Discovery Audits, or consultations (e.g., about your restaurant, pub, hotel, or resort operations, challenges, or project requirements).
• Technical data: IP address, browser type and version, device information, pages visited, and cookie data (see Cookies and Tracking below).
• Marketing data: preferences for receiving updates or newsletters.
• Audit and engagement data: for Guest Experience Audits and Dining Audits, this includes confidential staff interview notes, photographs, and property-specific observations collected during on-site visits. This may include limited personal data about client staff, such as names, job roles, and interview responses, collected in the course of delivering audit services.

We do not collect special category data (e.g., health, race) unless it is voluntarily provided and relevant to a specific service.

How We Collect Your Data

• Directly from you (via website forms, email, phone, or meetings).
• Automatically through website technologies (cookies, analytics).
• From third parties (e.g., business referrals), where lawful.
• During on-site audit visits, including staff interviews and mystery-guest evaluations conducted as part of a Guest Experience Audit or Dining Audit engagement.

‍

How and Why We Use Your Data

(Purposes and Lawful Basis)

We process your personal data for the following purposes:

• To respond to enquiries and provide services (e.g., Discovery Audits, Guest Experience Audits, Dining Audits, Launch Programme, Implementation Packages, training) — legitimate interests or contract (where we have an agreement).
• To conduct, evaluate, and report on audits, including staff interactions and property standards observed on a client's behalf — legitimate interests or contract with the commissioning client.
• To improve our website and services — legitimate interests.
• Marketing and communications (e.g., newsletters about hospitality insights) — consent, which you can withdraw at any time, or, for existing clients, legitimate interests where the law allows it. Every marketing email includes an easy way to unsubscribe. For contacts in Ireland, we follow the ePrivacy Regulations 2011 (S.I. No. 336 of 2011).
• Legal and administrative obligations (e.g., accounting, tax, dispute resolution) — legal obligation.

We only process data that is necessary and proportionate to these purposes.

‍

Sharing Your Data

We may share your data with:

• Trusted service providers (e.g., website hosting, email platforms, analytics tools) who process data on our behalf.
• Software platforms used to record, store, and manage audit findings and photographs as part of delivering our audit services.
• Professional advisers (e.g., accountants, lawyers) where required.
• Business partners or subcontractors involved in delivering our services.

We do not sell your personal data. Any third parties are required to maintain appropriate security and comply with data protection laws.

International Transfers

Our primary operations are in the UK. Personal data from Ireland and the rest of the EU may be transferred to us in the UK under the European Commission's adequacy decision for the UK. Where we transfer data to countries without such a decision, for example to service providers based in the United States, we use appropriate safeguards such as the EU–US Data Privacy Framework, the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum, as applicable.

‍

Data Security

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Staff interview data collected during audits is treated as confidential and is used only for the purposes of the relevant audit engagement. However, no system is completely secure.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes outlined in this policy, or as required by law (typically 6–7 years for business and financial records). Audit reports and related records are generally retained for the duration of the client relationship and a reasonable period afterward. After this, data is securely deleted or anonymised.

Your Rights

Under the UK GDPR and the EU GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent (where applicable).

To exercise these rights, contact us at privacy@culineer.co.uk. We will respond within one month. You also have the right to complain to a data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO): ico.org.uk. In Ireland, it is the Data Protection Commission (dataprotection.ie). Elsewhere in the EU, you may complain to the supervisory authority in your country.

Cookies and Tracking

Our website uses cookies and similar technologies. You can review and change your cookie preferences at any time using the cookie settings option on our site. Currently, our website uses only cookies that are strictly necessary for it to function correctly. We will not set analytics or advertising cookies unless you have given your consent. If this changes, this section and our consent banner will be updated accordingly.

Third-Party Links

Our site may contain links to external websites. We are not responsible for their privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated “last updated” date. We encourage you to review it periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact:

Leland Oxley,  Culineer Limited

Company Registration No.: 17286391

45 Albemarle Street, London W1S 4JL

privacy@culineer.co.uk

+44 207 459 4545