Last updated: 30 October 2026
Who is responsible?
The Archive Café is responsible for the personal information described here. Contact us at archivecafe2025@gmail.com or write to The Archive Café, 13–15 Victoria Square, Holmfirth, West Yorkshire, HD9 2DN.
This notice covers the public website at archivecafe.co.uk and www.archivecafe.co.uk. Table reservations have a separate privacy and cookies notice. Private party bookings and payment providers explain their processing in their own services; read the information shown when you use them.
Information we use and why
- Browsing and security: our hosting provider, Cloudflare, processes connection and request information, such as IP addresses, browser information, requested pages and security events, to deliver and protect the website. We rely on our legitimate interests in running a secure, reliable website.
- Newsletter signup: if you choose to subscribe, we collect your email address and your marketing choice to send occasional café news and offers. Our legal basis is your consent. You do not need to subscribe to browse, visit or book.
- Enquiries: when you email us, we use your contact details and the information you provide to answer your enquiry. Depending on the enquiry, this is to take steps towards or perform a booking contract, or for our legitimate interests in handling customer enquiries.
- Customer records: a newsletter signup may update the marketing choice on an existing café customer record. Booking communication and marketing consent are separate; making a reservation does not itself subscribe you to marketing.
Do not send payment-card information by email or through the newsletter form. Card entry for online bookings takes place with the payment provider, rather than on this main website.
Confirming your newsletter subscription
We send a confirmation link valid for 24 hours. Your marketing preference is enabled only after you select Confirm subscription. We retain consent wording, its version and confirmation time. Pending confirmation records are deleted seven days after expiry. Short-lived hashed request counters help limit abuse and are deleted after expiry.
Withdrawing newsletter consent
You can withdraw consent at any time by emailing archivecafe2025@gmail.com with “Unsubscribe” and the email address you subscribed with. You can also use an unsubscribe link where one is provided in a newsletter. Withdrawal does not affect the lawfulness of earlier processing.
Cookies and browser storage
We use Cloudflare Web Analytics to understand page visits and website performance. This service does not use cookies or local storage to track visitors and does not track people across other websites. Cloudflare explains its approach in its Web Analytics information. We do not use advertising pixels or optional tracking cookies on the main website.
Cloudflare may use strictly necessary security cookies if protection checks are required. Their purpose is to protect access to the service, rather than to track you for advertising. The cookies and their duration depend on the protection applied; Cloudflare explains its cookies and lifetimes. Browser settings let you inspect or remove stored cookies, although blocking essential security cookies can prevent a protection check from working.
The reservation service uses essential session storage to remember an in-progress booking when you go to the payment provider and return. Staff sign-in and staff notification settings use separate authentication and device storage. See the reservation privacy notice for that service. Payment-provider pages have their own cookie information.
If we introduce technology that requires consent, we will provide the required information and choices before activating it. We will update this notice when our use changes.
Fonts, Instagram images and external links
Our fonts are hosted on this website: loading a page does not request fonts from Google. The Instagram gallery uses saved images and captions served through our own website, rather than an embedded Instagram widget. It does not require you to sign in to Instagram.
Opening an Instagram or Facebook post, Google Maps directions, a Google review link, or another external link takes you to that provider. Their privacy and cookie practices apply there.
Who receives information?
Authorised café staff can access the information needed for their work. Cloudflare provides website hosting, database storage and security. Email providers process messages we send or receive. We may share relevant records with professional advisers or authorities where necessary for a legal obligation or a dispute.
Service providers may process data outside the UK. Their arrangements and safeguards are described in their privacy and contractual information, including Cloudflare’s privacy policy and data processing addendum. Contact us for information about the providers, processing locations and applicable transfer safeguards relevant to your information.
How long do we keep information?
We retain newsletter information while your subscription remains active. After withdrawal, we may retain a minimal record of your preference to avoid contacting you again. Removing marketing consent does not automatically delete separate booking or accounting records.
For enquiries and operational records, retention depends on the purpose, whether the matter is resolved, and any continuing accounting, security or legal-claim requirement. The website signup system does not automatically delete customer records after a fixed period. Hosting and security logs follow the provider’s applicable retention settings. Contact us to ask about your records or request deletion.
Your rights
You can request access, correction, erasure, restriction or portability of your personal information where applicable. These rights have legal limits; for example, some records may be needed for legal obligations or claims. We may need to verify your identity before responding.
You can object to processing based on legitimate interests, and you have the right to object to direct marketing at any time. Contact archivecafe2025@gmail.com to exercise your rights or raise a concern.
You can complain to the UK Information Commissioner’s Office. Where EU data-protection law applies, you may also contact the supervisory authority in your country.