The short version

We only collect what we need to take your booking, sell you a gift card, answer your messages and run a safe bar. We also share photos of our nights; tell us if you'd rather not appear.
We never sell your personal information.
We only send you marketing if you've said yes, and you can stop it at any time.
Analytics cookies only run on our website if you accept them.
To see, correct or delete what we hold about you, email info@ninelivesbar.com.

1. Who we are

Nine Lives is a trading name of Eight Holyrood Ltd, a company registered in England and Wales (company number 08383282). Our registered office is 8 Holyrood Street, London SE1 2EL.

Eight Holyrood Ltd is the "controller" of the personal information described in this policy. That means we decide how and why it's used, and we're responsible for looking after it. This policy covers Nine Lives at 8 Holyrood Street, Nine Lives W1 at 75 Dean Street, and this website.

For anything to do with your personal information, contact us:

Email: info@ninelivesbar.com
Phone: 020 7407 8226
Post: Data protection, Eight Holyrood Ltd, 8 Holyrood Street, London SE1 2EL

2. What we collect and why

Data protection law says we must have a lawful reason (a "legal basis") for each use of your information. The table below sets out what we collect, why, our legal basis, and how long we keep it.

When	What we collect	Why	Legal basis	How long we keep it
Booking a table	Name, phone, email, party size, date and time, and any notes you give us, such as the occasion or seating. We also keep a record of your past bookings.	To hold your table, contact you about your booking and look after you on the night.	Contract: taking and managing your booking.	Up to 3 years after your last booking, unless you ask us to delete it sooner.
Group bookings and enquiries	Name, contact details, group size, date, details of the occasion and anything else you tell us.	To reply, plan your booking, and take and refund deposits.	Contract once you book; before that, our legitimate interest in replying to you.	2 years after we were last in touch. Payment records are kept for 6 years.
Buying a gift card online	Name, email, billing address, phone number if you give it, and what you ordered. Your card details are taken by our payment provider, not by us.	To take payment, send your gift card email, track its balance and handle refunds.	Contract; and our legal obligation to keep accounting records.	6 years from the end of the financial year of purchase, as UK tax law requires.
Using a gift card	The order number, and the date and amount of each visit it's used on.	To track the balance and prevent misuse.	Contract; and our legitimate interest in preventing fraud.	As for buying a gift card.
Paying at the bar	Payment amount, date, and the last four digits and type of your card. We never see your full card number.	To take payment and handle refunds.	Contract; and our legal obligation to keep accounting records.	6 years, as UK tax law requires.
Emails, calls and social media messages	Your name, contact details and what you tell us.	To reply and help you.	Our legitimate interest in replying to you.	2 years after we were last in touch.
Marketing emails and texts	Name, email, phone, and your booking history and preferences.	To tell you about events, news and offers, only if you've opted in.	Your consent. You can unsubscribe at any time using the link in any email, or by emailing us.	Until you unsubscribe. After that we keep only your email address or phone number, so we know not to contact you again.
CCTV in and around the bar	Images of people in and around the bar.	To keep guests and our team safe, to prevent and detect crime, and to meet our premises licence conditions.	Our legitimate interest in safety and security; and our legal obligations under our premises licence.	Usually 31 days. Longer if it's needed for an incident, or if the police or licensing authority ask for it.
Photos and video at events	Images of people in the bar.	To show what our nights are like on our website and social media.	Our legitimate interest in promoting the bar. Tell us if you'd rather not appear, and we'll take down a post you're in if you ask.	For as long as the post stays up.
Accidents and incidents	Names, contact details, what happened, and details of any injury.	To look after people, meet our health and safety and licensing duties, and deal with any claims.	Our legal obligations; and our legitimate interests. For injury details, it's needed to establish, make or defend legal claims.	Up to 6 years.
Applying for a job	Your CV, contact details and interview notes. If we offer you a job, we also need right-to-work documents.	To recruit for the role.	Steps taken at your request before a contract; and our legal obligation to check right to work.	6 months after the role is filled if you're unsuccessful, unless you agree we can keep you on file for longer. If we employ you, we keep right-to-work copies for your employment plus 2 years, as the Home Office requires.
Visiting our website	Your IP address, browser and device type, and the pages you visit. More detail is collected only if you accept analytics cookies.	To keep the site secure and working, and, with your consent, to see how it's used.	Our legitimate interest in running a secure website; your consent for analytics cookies.	See section 5, Cookies.

Allergies and dietary needs

If you tell us about an allergy or dietary need, for example when you book, we use it only to prepare your food and drink safely. Because this can be health information, we only record it with your explicit consent: when you tell us, we'll ask if you're happy for us to note it on your booking. We keep it on your guest record until you ask us to remove it, or for up to 3 years after your last booking.

Checking your age

Nine Lives is strictly over 18, so we may ask to see photo ID at the door or at the bar. We look at it to confirm your age. We don't copy or keep it.

Under 18s

Our bars are for over-18s only, and our website and services aren't meant for anyone under 18. We don't knowingly collect information about under-18s. If you think we have, please tell us and we'll delete it.

Automated decisions

We don't make decisions about you using only automated means.

If you don't give us information

Some information is needed to provide what you've asked for. For example, we can't hold a table without a name and a way to contact you, or send a gift card without an email address.

3. Who we share it with

We never sell your personal information. We only share it with:

The companies that run our systems for us, who may only use it on our instructions:
- Squarespace (our website, online shop and order emails)
- SevenRooms (table bookings, guest records, and marketing emails and texts if you've opted in)
- our online and in-bar card payment providers
- our till system provider
- our email and office software providers
- Google (website analytics, only if you accept cookies)
Other booking sites, such as Google or a restaurant guide, if you book with us through one of them. They pass us your booking details. Their own privacy policies cover what they do with your information.
Professional advisers, such as our accountants, lawyers and insurers, where they need it.
The police, the licensing authority, HMRC or other public bodies, where the law requires it or it's needed to prevent or detect crime.
A buyer of our business, if we ever sell or restructure it, on the condition that they look after your information in line with this policy.

4. Information stored outside the UK

Some of our suppliers, including Squarespace, SevenRooms and Google, store or access information outside the UK, including in the United States. When that happens, the transfer is protected in one of two ways:

UK "adequacy" regulations, including the UK–US data bridge for US companies signed up to it
contract terms approved by the UK Information Commissioner

Email us if you'd like more detail.

5. Cookies

Cookies are small files a website saves on your device. We use two kinds:

Essential cookies make the website work, keep it secure and remember your basket. They don't need your consent and can't be switched off.
Analytics cookies tell us how many people visit and which pages they use, so we can improve the site. They only run if you click accept on our cookie banner.

You can change your choice at any time. Clear the cookies for ninelivesbar.com in your browser settings, and the banner will ask you again next time you visit.

Cookie	Set by	What it does	How long	Type
crumb	Squarespace	Protects the site and its forms from a type of attack called cross-site request forgery.	Until you close your browser	Essential
Cookie banner preference	Squarespace	Remembers whether you accepted or declined cookies.	Until you clear it	Essential
CART, hasCart	Squarespace	Remembers what's in your basket.	2 weeks	Essential
CHECKOUT_WEBSITE, Commerce-checkout-state	Squarespace	Makes checkout work, including payment.	Until you close your browser	Essential
orderStatusSessionToken, SiteUserInfo, SiteUserSecureAuthToken	Squarespace	Only set if you view your order status or sign in to a customer account. Keeps you signed in.	Up to 3 years	Essential
ss_cid, ss_cpvisit, ss_cvisit, ss_cvr, ss_cvt	Squarespace Analytics	Count visitors and visits so we can see how the site is used.	30 minutes to 2 years	Analytics: only if you accept
_ga, _ga_FZFZ3YZ1XW	Google Analytics	Tell visitors apart and measure how the site is used. Google keeps the data for no more than 14 months.	2 years	Analytics: only if you accept

Some of our links take you to other websites, such as our SevenRooms booking page, Instagram, Spotify and Google Maps. Those sites set their own cookies, and their own privacy policies apply.

6. Keeping it safe

We use reputable suppliers with strong security, and we limit access to personal information to the people on our team who need it. We never see or store your full card number. If something ever goes wrong, we'll act quickly. Where the law requires it, we'll tell you and the Information Commissioner's Office.

7. Your rights

Under UK data protection law you have the right to:

see the personal information we hold about you and get a copy of it
ask us to correct anything that's wrong or incomplete
ask us to delete your information
ask us to limit how we use it
object to us using it where we rely on our legitimate interests
stop marketing at any time
ask us to send your information to you or another organisation in a commonly used format
withdraw your consent at any time, where we rely on it. This won't affect anything we did before you withdrew it.

To use any of these rights, email info@ninelivesbar.com. It's free. We may need to check your identity first, and we'll reply within one month. Some rights have limits: for example, we must keep sales records for as long as tax law says.

8. Complaints

If you're unhappy with how we've handled your information, please tell us first at info@ninelivesbar.com and we'll do our best to put it right. We'll acknowledge your complaint within 30 days and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Changes to this policy

We'll update this policy when the way we use personal information changes. The date at the top shows when it last changed. Read it alongside our terms and conditions.