Privacy notice
How we look after the information you share with us through this website, when you ask to book a table, and when you buy or receive a gift voucher.
Last updated 29 October 2026
Who we are
HAMILTON'S TEA HOUSE LTD (trading as Hamilton's Tea House), company number 13308100, 17 Downing Street, Farnham GU9 7PB, is the data controller for the personal information described in this notice. If you have any questions about this notice, use our contact form, call us on 01252 941 241, or write to us at 17 Downing Street, Farnham GU9 7PB.
When you send us a message
We collect your name, your email address, an optional phone number and your message. We use them only to read and reply to you. Our lawful basis is our legitimate interest in answering people who get in touch, and taking steps you ask for before you book or buy from us.
When you ask to book a table
We collect your name, your email address or phone number (or both), what you would like to have, the date and time you would like, how many guests, and any notes you add. We use these to check we have room, to confirm or decline your request by email or phone, and to have your table ready. There is nothing to pay online. You pay at the teahouse on the day. Our lawful basis is taking the steps you ask for before your visit, and then providing your booking.
Allergies and dietary needs
If you tell us about an allergy or dietary need in your booking notes, that is information about your health, so we treat it with extra care. We use it only to prepare your visit safely, only our team sees it, and we delete it 30 days after your visit. We rely on your explicit consent, which you give by choosing to include it. You can ask us to remove it at any time, and you are always welcome to tell us on the day instead.
When you buy a gift voucher
We collect your name and email address. If you choose to add them, we also collect the name and email address of the person the voucher is for, an occasion and a personal message. We use your details to take your payment, send you the voucher and its code, and help with any questions about it. If you give us their email address, we email the voucher to them too, with your name and your message on it. Our lawful basis for your details is the contract between us. For the person receiving the gift, it is our legitimate interest in delivering the gift you asked us to send and honouring the voucher when they visit.
Please only give us someone's details if they would expect to hear from us about your gift.
If someone has bought you a gift voucher
The person who bought your voucher gave us your name and, if they chose to, your email address. We use these only to send you the voucher and to honour it when you visit. We do not use them for marketing and we do not add you to any mailing list. We keep them as described below, and you have all the rights described in this notice.
Card payments
Voucher payments are taken by Stripe on a secure Stripe page. Your card details go straight to Stripe, and neither we nor our website team ever see or store them. Stripe receives your email address and payment details and tells us whether the payment went through. Stripe processes the payment for us, and also acts as an independent controller for its own legal duties, such as preventing fraud and meeting financial regulations. You can read how Stripe uses your information at stripe.com/gb/privacy.
Website analytics
We use Google Analytics to see how people use this website, such as which pages are visited most, so we can keep it useful. We only do this with your consent, which is our lawful basis for it. Nothing is sent to Google Analytics unless you choose Accept analytics on the cookie banner.
If you accept, Google Analytics collects the pages you visit, the type of device and browser you use, your approximate location (such as your town or region), and how you arrived at our website, for example from a search or another website. Google receives your device's IP address to work out your approximate location, but Google Analytics does not log or store IP addresses. We have switched off Google signals, so this information is not linked to your Google account. Google Analytics keeps information linked to your browser or device for up to 14 months after your last visit, and the detailed record of each visit for 2 months, then deletes it automatically. After that we only see overall totals, such as how many people visited a page, which do not identify anyone.
You can change your choice at any time. Choose Cookie preferences at the bottom of any page, then accept or reject analytics. If you reject after accepting, analytics stops and its cookies are removed from your browser. Rejecting does not stop you using any part of the website.
Who helps us
We do not sell your information or use it for advertising. A few trusted companies help us run the website, bookings and vouchers, and most of them use your information only on our instructions. Google Fonts and Google Maps are different. Google decides how it uses the information they receive, under its own privacy policy at policies.google.com/privacy.
- Underdown Labs Limited (trading as UF Labs) builds and runs our website, booking requests and voucher sales as our data processor, using the providers below.
- Supabase stores contact messages, booking requests and voucher records, in Ireland (EU).
- Hetzner hosts the website, in Germany (EU).
- Amazon Web Services (Amazon SES) sends our booking, voucher and contact emails from London (UK). Brevo sends them from the EU if Amazon SES is unavailable.
- Cloudflare runs our web address, and every visit to the website passes through its network, so it sees your device's IP address and browser details. It uses them to protect the website from attacks and spam, including a security check on some forms (Cloudflare Turnstile).
- Google Analytics (Google) measures how the website is used, only if you accept analytics. Google acts as our processor for this.
- Google Fonts supplies some of the lettering on our website, so your device's IP address reaches Google when a page loads.
- Google Maps shows our location if you choose to load the map. Google then receives your device's IP address and may set its own cookies.
Form submissions, booking requests and voucher notifications are delivered to a private inbox that only our team can read. When you reply to one of our emails, your reply comes to that same inbox.
Information sent outside the UK
We keep your information in the UK and the EU wherever we can. Stripe, Cloudflare and Google may process some of it in the United States. When they do, it is protected by the UK-US Data Bridge or by data transfer contracts approved under UK law.
How long we keep it
- Messages from our contact form are kept for 12 months, then deleted.
- Booking requests are kept for 12 months after the booking date, then deleted. Allergy and dietary notes are deleted 30 days after your visit.
- Voucher purchases that are started but not paid for are deleted after 30 days.
- For gift vouchers, names, email addresses and gift messages are kept until 12 months after the voucher is used up or expires, then deleted. We keep the payment record (amount, date and voucher code) for six years after the end of the financial year, because tax law requires us to keep financial records.
- Website analytics information, if you accept analytics, is kept by Google Analytics for up to 14 months after your last visit (the detailed record of each visit for 2 months), then deleted automatically.
- Stripe keeps its own payment records under its own privacy notice.
Your rights
Under UK data protection law you have the right to ask for a copy of your information, to ask us to correct or delete it, to ask us to limit how we use it, to object to how we use it, and in some cases to have it passed to another organisation. Where we rely on your consent, for allergy notes and website analytics, you can withdraw it at any time. To make a request, use our contact form, call us on 01252 941 241, tell us when you visit, or write to us at 17 Downing Street, Farnham GU9 7PB. We will reply within one month. If you are not happy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We use the cookies the website needs to work. These include security cookies that Cloudflare may set to block attacks and spam, and a note in your browser that remembers your cookie choice. We also use analytics cookies (Google Analytics, with names starting _ga), but only if you accept them on the cookie banner. They stay in your browser for up to 2 years after your last visit, unless you reject analytics or clear your cookies. We do not use advertising cookies. You can change your analytics choice at any time with Cookie preferences at the bottom of any page. When you pay for a voucher, Stripe's payment page uses its own cookies to keep the payment secure. When our team signs in to manage bookings, their browser remembers the sign-in so they stay logged in. The map on our home page loads Google's cookies only if you click to show it.
Changes to this notice
We may update this notice from time to time. Please check the date at the top to see when it last changed.
