GDPR

Last updated: 26 July 2026

Our GDPR Commitment

The Hidden Tap aims to handle personal information fairly, lawfully, securely, and transparently. This page summarises how UK GDPR rights apply to personal data processed through this website.

Data Controller

For website enquiries and website administration, The Hidden Tap is responsible for deciding why and how personal information is used. The venue is based at Botley Brewery, Mill Hill, Botley, Southampton, Hampshire, SO30 2GY.

Personal Data We May Process

• Name, email address, and message details submitted through the contact form.
• IP address, browser details, request details, and server log information used for security and diagnostics.
• Hashed IP address, page path, referrer, and visit time used for internal website statistics.
• Admin user email addresses and password hashes for authorised website editors.

Purposes

• Responding to enquiries.
• Running, maintaining, and improving the website.
• Protecting the website against spam, abuse, and unauthorised access.
• Allowing authorised users to manage content.
• Keeping appropriate operational and security records.

Lawful Bases

Contact details are used so we can respond to your enquiry. Security, logging, admin account, and internal statistics data are processed under legitimate interests in operating and protecting the website. If a legal obligation applies, we may process information to comply with that obligation.

Your Rights

Depending on the circumstances, you may have the right to be informed, access your personal data, ask for inaccurate data to be corrected, ask for data to be erased, restrict processing, object to processing, and receive a copy of certain data in a portable format.

Access Requests

You can ask for a copy of personal information we hold about you. We may need to confirm your identity before releasing information. We aim to respond within the timescales required by UK GDPR.

Correction and Deletion

If information is inaccurate or incomplete, you can ask us to correct it. You can also ask for deletion in appropriate circumstances, although we may need to keep some information where there is a legal, security, or legitimate business reason.

Objection and Restriction

You may object to some processing or ask us to restrict processing in certain circumstances. We will consider requests in line with UK GDPR.

Complaints

If you are unhappy with how your information is handled, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office.

How To Make A Request

Use the contact page to make a GDPR request. Please provide enough information for us to identify the relevant record, such as the email address used in your enquiry.