Privacy Policy
Last updated: 26 July 2026
Who We Are
This privacy policy explains how The Hidden Tap handles personal information collected through this website. The Hidden Tap is based at Botley Brewery, Mill Hill, Botley, Southampton, Hampshire, SO30 2GY.
What This Policy Covers
This policy covers information collected when you use our website, send us a message, use the contact form, browse public pages, or are given access to the admin area as an authorised editor.
Information You Give Us
If you contact us through the website, we may collect your name, email address, message, and any other details you choose to include. Please do not send unnecessary sensitive information through the contact form.
Technical Information We Process
When you use the website, standard technical information may be processed by the website and hosting environment. This can include IP address, browser type, device information, pages requested, referrer, request time, and basic server log information.
Website Statistics
The website may record internal page-view statistics so we can understand which public pages are being used. Where visitor counts are needed, IP addresses are stored as hashes rather than plain IP addresses. These statistics are for internal website management and are not used for advertising profiling.
Admin Accounts
If you are given access to the admin area, we store your email address and a password hash so you can log in securely. Passwords are not stored in plain text. Admin activity may also be reflected in normal server logs.
Why We Use Personal Information
- To respond to messages and enquiries.
- To operate and maintain the website.
- To protect the website from spam, misuse, and unauthorised access.
- To allow authorised users to manage website content.
- To understand basic public page traffic and improve the website.
- To keep reasonable business, legal, and security records.
Lawful Bases
We process enquiry information because it is necessary to respond to your request. We process website security, logging, admin account, and internal statistics information because we have a legitimate interest in running, securing, and improving the website. If we ever rely on consent for a specific purpose, you can withdraw that consent where applicable.
Who We Share Information With
We do not sell personal information. Information may be processed by website hosting, database, email, analytics, security, or technical service providers where needed to operate the website. We may also disclose information if required by law, to respond to lawful requests, or to protect our legal rights.
International Transfers
Some technical providers may process data outside the UK. Where this applies, we expect appropriate safeguards to be used by those providers.
How Long We Keep Information
Contact messages are kept only for as long as reasonably needed to manage the enquiry and related business records. Server logs and security data are kept for a reasonable operational period. Admin accounts are kept while access is required and removed when no longer needed.
Your Rights
Under UK data protection law, you may have rights to be informed, access your personal data, ask for inaccurate data to be corrected, ask for deletion, restrict processing, object to some processing, and complain to the Information Commissioner's Office.
How To Contact Us
Use the contact page if you have a privacy question or want to make a request about your personal information. We may need to verify your identity before responding to some requests.
Security
We use reasonable measures to protect the website and admin area. No website can be guaranteed completely secure, so please avoid sending highly sensitive information through the contact form.
Changes To This Policy
We may update this policy when the website, law, or our practices change. The latest version will be published on this page.