Privacy Policy & Cookie Policy
Website privacy notice
Thirsty Thursday Stokesley
Effective date: 6 January 2026
Last reviewed: 6 January 2026
1) Introduction
This privacy notice explains how Thirsty Thursday Stokesley (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website www.thirstythursdaystokesley.co.uk, subscribe to our newsletter, contact us, or take part in promotions.
We are committed to protecting your privacy and handling your personal data fairly, transparently and securely in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2) Who we are (Data Controller)
Data Controller: Thirsty Thursday Stokesley
Email: info@thirstythursdaystokesley.co.uk
Address: Office 19, Unit 2, Roseberry Ct, Stokesley, Stokesley Business Park, Middlesbrough TS9 5QT
Telephone: 07971 065941
Privacy contact
We have appointed a person responsible for data protection matters.
Email: info@thirstythursdaystokesley.co.uk
Complaints
If you are not satisfied with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.
We’d appreciate the opportunity to resolve your concerns first, so please contact us before making a complaint where possible.
3) Age restrictions
Our website is not intended for children under 13, and we do not knowingly collect personal data from children under 13.
4) The personal data we collect
We may collect and process the following categories of personal data:
(A) Identity Data
Your name (and title where provided).
(B) Contact Data
Your email address, telephone number and postal address (where provided).
(C) Communications Data
Information you provide when you contact us (for example via email, phone, contact forms, or social media).
(D) Technical Data
IP address, browser type/version, device information, operating system and basic technical information about your visit.
(Collected through standard website logs and essential cookies.)
(E) Usage Data
How you use our website (such as pages visited).
Note: you have confirmed you do not use analytics services such as Google Analytics.
(F) Marketing Data
Newsletter subscription preferences, and email engagement data such as opens and clicks (where Mailchimp provides this).
Special category data
We do not intentionally collect special category personal data (such as health data, ethnicity, religion, political opinions etc.). If you provide such information voluntarily, we will handle it carefully and only use it where necessary to deal with your request.
5) How we collect your personal data
We collect personal data in the following ways:
(A) Directly from you
When you:
-
subscribe to our newsletter
-
contact us by email, phone, social media or through the website
-
enter promotions, competitions or prize draws (if applicable)
-
provide feedback or reviews
(B) Automatically when you use our website
We collect technical data through:
-
essential cookies (necessary for core website functions)
-
server logs and security logs (standard for website hosting)
(C) From third parties
We use Mailchimp to manage newsletter sign-ups and email marketing. Mailchimp provides us with information such as subscription status and engagement statistics (opens/clicks).
6) Lawful bases for processing
UK GDPR requires a lawful basis for processing personal data. We rely on:
(A) Consent
Where you sign up to receive our newsletter and marketing emails, and where you consent to any non-essential cookies (if ever introduced).
(B) Legitimate interests
Where processing is necessary for our legitimate interests, such as:
-
responding to enquiries
-
improving and maintaining our website
-
protecting our business against fraud and security threats
-
administering promotions/prize draws (where relevant)
(C) Legal obligation
Where we must keep records to meet legal or regulatory requirements.
(D) Contract
Where necessary to provide a service or fulfil an arrangement with you (for example where you have booked or requested a service through us offline).
7) What we use your personal data for (purposes table)
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to enquiries and customer support | Identity, Contact, Communications | Legitimate interests |
| Newsletter subscription and marketing emails | Identity, Contact, Marketing data | Consent |
| Managing unsubscribes / maintaining suppression lists | Contact, Marketing data | Legal obligation / Legitimate interests |
| Running promotions / prize draws (where used) | Identity, Contact, Communications | Legitimate interests / Contract (depending on structure) |
| Website security and technical administration | Technical, Usage | Legitimate interests |
| Legal compliance / record keeping (where applicable) | Identity, Contact, Communications | Legal obligation |
8) Marketing (Mailchimp)
If you opt in, we use Mailchimp to send our newsletter and marketing communications.
What Mailchimp processes
Mailchimp may process:
-
your email address and name (if provided)
-
subscription status
-
email engagement data (such as opens and clicks)
-
technical data linked to email activity (e.g., device type)
How to opt out
You can unsubscribe at any time by:
-
clicking the unsubscribe link in any marketing email, or
-
emailing info@thirstythursdaystokesley.co.uk
When you unsubscribe, we may keep your email address on a suppression list to ensure we do not contact you again by mistake.
9) Sharing your personal data
We do not sell your personal data.
We may share personal data with trusted service providers who support our operations, including:
-
Mailchimp (newsletter management and email delivery)
-
Guru (website hosting and server administration)
-
professional advisers (e.g., accountants, insurers, legal advisers) where required
-
regulators or authorities (such as HMRC, law enforcement) where legally required
All service providers must keep your data secure and only process it for specified purposes.
10) International data transfers
Some of our service providers (including Mailchimp) may process personal data outside the UK, including in the United States.
Where personal data is transferred outside the UK to a country not covered by UK adequacy regulations, we ensure appropriate safeguards are in place, such as:
-
the UK International Data Transfer Agreement (IDTA), or
-
the UK Addendum to EU Standard Contractual Clauses,
along with additional protections where required.
You can request more information about the safeguards used for international transfers by contacting us at info@thirstythursdaystokesley.co.uk.
11) Cookies & website tracking
We use essential cookies only to ensure the website works properly and remains secure.
Essential cookies (no consent required)
These cookies are necessary for:
-
basic website functionality
-
security and fraud prevention
-
managing user sessions (where required)
-
remembering certain settings (where essential)
Because these are strictly necessary, they do not require consent under PECR.
Non-essential cookies
You have confirmed you do not currently use analytics or advertising cookies (such as Google Analytics or Meta Pixel).
If we add these in the future, we will update this notice and introduce a cookie consent banner that allows you to accept or reject non-essential cookies.
Managing cookies
You can control cookies through your browser settings. Please note that disabling cookies may affect how the site functions.
12) Data security
We use appropriate technical and organisational measures to protect personal data, including:
-
secure hosting via Guru
-
access controls to systems
-
secure website connections (HTTPS)
-
regular website and plugin updates
-
limiting access to personal data to those who need it
If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the ICO and affected individuals where legally required.
13) How long we keep your data (retention)
We keep personal data only for as long as necessary.
Enquiries and communications
-
Typically kept for 12–24 months after resolution (unless required longer for legal reasons).
Newsletter data (Mailchimp)
-
Kept until you unsubscribe.
-
Suppression list records are kept indefinitely, solely to ensure we respect your opt-out request.
Website logs / security logs
-
Typically kept for up to 12 months for security and troubleshooting, unless a longer retention period is required to investigate incidents.
Where we must retain information to comply with legal obligations (e.g. accounting records), we will do so for the required period.
14) Your rights
You have rights under UK GDPR, including the right to:
-
access your personal data
-
correct inaccurate data
-
request deletion of data
-
restrict processing
-
object to processing
-
request data portability
-
withdraw consent (where consent is the lawful basis)
To exercise your rights, email: info@thirstythursdaystokesley.co.uk
We may need to confirm your identity before responding. We aim to respond within one month.
15) Third-party links
Our website may include links to third-party websites or embedded content (for example social media). We are not responsible for those websites’ privacy practices. Please review their privacy notices before providing them with your personal data.
16) Changes to this privacy notice
We may update this notice from time to time. The latest version will always be published on this page and will show an updated “Last reviewed” date.