Website privacy notice
Thirsty Thursday Stokesley
Effective date: 6 January 2026
Last reviewed: 6 January 2026
This privacy notice explains how Thirsty Thursday Stokesley (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website www.thirstythursdaystokesley.co.uk, subscribe to our newsletter, contact us, or take part in promotions.
We are committed to protecting your privacy and handling your personal data fairly, transparently and securely in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Thirsty Thursday Stokesley
Email: info@thirstythursdaystokesley.co.uk
Address: Office 19, Unit 2, Roseberry Ct, Stokesley, Stokesley Business Park, Middlesbrough TS9 5QT
Telephone: 07971 065941
We have appointed a person responsible for data protection matters.
Email: info@thirstythursdaystokesley.co.uk
If you are not satisfied with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.
We’d appreciate the opportunity to resolve your concerns first, so please contact us before making a complaint where possible.
Our website is not intended for children under 13, and we do not knowingly collect personal data from children under 13.
We may collect and process the following categories of personal data:
Your name (and title where provided).
Your email address, telephone number and postal address (where provided).
Information you provide when you contact us (for example via email, phone, contact forms, or social media).
IP address, browser type/version, device information, operating system and basic technical information about your visit.
(Collected through standard website logs and essential cookies.)
How you use our website (such as pages visited).
Note: you have confirmed you do not use analytics services such as Google Analytics.
Newsletter subscription preferences, and email engagement data such as opens and clicks (where Mailchimp provides this).
We do not intentionally collect special category personal data (such as health data, ethnicity, religion, political opinions etc.). If you provide such information voluntarily, we will handle it carefully and only use it where necessary to deal with your request.
We collect personal data in the following ways:
When you:
subscribe to our newsletter
contact us by email, phone, social media or through the website
enter promotions, competitions or prize draws (if applicable)
provide feedback or reviews
We collect technical data through:
essential cookies (necessary for core website functions)
server logs and security logs (standard for website hosting)
We use Mailchimp to manage newsletter sign-ups and email marketing. Mailchimp provides us with information such as subscription status and engagement statistics (opens/clicks).
UK GDPR requires a lawful basis for processing personal data. We rely on:
Where you sign up to receive our newsletter and marketing emails, and where you consent to any non-essential cookies (if ever introduced).
Where processing is necessary for our legitimate interests, such as:
responding to enquiries
improving and maintaining our website
protecting our business against fraud and security threats
administering promotions/prize draws (where relevant)
Where we must keep records to meet legal or regulatory requirements.
Where necessary to provide a service or fulfil an arrangement with you (for example where you have booked or requested a service through us offline).
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to enquiries and customer support | Identity, Contact, Communications | Legitimate interests |
| Newsletter subscription and marketing emails | Identity, Contact, Marketing data | Consent |
| Managing unsubscribes / maintaining suppression lists | Contact, Marketing data | Legal obligation / Legitimate interests |
| Running promotions / prize draws (where used) | Identity, Contact, Communications | Legitimate interests / Contract (depending on structure) |
| Website security and technical administration | Technical, Usage | Legitimate interests |
| Legal compliance / record keeping (where applicable) | Identity, Contact, Communications | Legal obligation |
If you opt in, we use Mailchimp to send our newsletter and marketing communications.
Mailchimp may process:
your email address and name (if provided)
subscription status
email engagement data (such as opens and clicks)
technical data linked to email activity (e.g., device type)
You can unsubscribe at any time by:
clicking the unsubscribe link in any marketing email, or
emailing info@thirstythursdaystokesley.co.uk
When you unsubscribe, we may keep your email address on a suppression list to ensure we do not contact you again by mistake.
We do not sell your personal data.
We may share personal data with trusted service providers who support our operations, including:
Mailchimp (newsletter management and email delivery)
Guru (website hosting and server administration)
professional advisers (e.g., accountants, insurers, legal advisers) where required
regulators or authorities (such as HMRC, law enforcement) where legally required
All service providers must keep your data secure and only process it for specified purposes.
Some of our service providers (including Mailchimp) may process personal data outside the UK, including in the United States.
Where personal data is transferred outside the UK to a country not covered by UK adequacy regulations, we ensure appropriate safeguards are in place, such as:
the UK International Data Transfer Agreement (IDTA), or
the UK Addendum to EU Standard Contractual Clauses,
along with additional protections where required.
You can request more information about the safeguards used for international transfers by contacting us at info@thirstythursdaystokesley.co.uk.
We use essential cookies only to ensure the website works properly and remains secure.
These cookies are necessary for:
basic website functionality
security and fraud prevention
managing user sessions (where required)
remembering certain settings (where essential)
Because these are strictly necessary, they do not require consent under PECR.
You have confirmed you do not currently use analytics or advertising cookies (such as Google Analytics or Meta Pixel).
If we add these in the future, we will update this notice and introduce a cookie consent banner that allows you to accept or reject non-essential cookies.
You can control cookies through your browser settings. Please note that disabling cookies may affect how the site functions.
We use appropriate technical and organisational measures to protect personal data, including:
secure hosting via Guru
access controls to systems
secure website connections (HTTPS)
regular website and plugin updates
limiting access to personal data to those who need it
If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the ICO and affected individuals where legally required.
We keep personal data only for as long as necessary.
Typically kept for 12–24 months after resolution (unless required longer for legal reasons).
Kept until you unsubscribe.
Suppression list records are kept indefinitely, solely to ensure we respect your opt-out request.
Typically kept for up to 12 months for security and troubleshooting, unless a longer retention period is required to investigate incidents.
Where we must retain information to comply with legal obligations (e.g. accounting records), we will do so for the required period.
You have rights under UK GDPR, including the right to:
access your personal data
correct inaccurate data
request deletion of data
restrict processing
object to processing
request data portability
withdraw consent (where consent is the lawful basis)
To exercise your rights, email: info@thirstythursdaystokesley.co.uk
We may need to confirm your identity before responding. We aim to respond within one month.
Our website may include links to third-party websites or embedded content (for example social media). We are not responsible for those websites’ privacy practices. Please review their privacy notices before providing them with your personal data.
We may update this notice from time to time. The latest version will always be published on this page and will show an updated “Last reviewed” date.