Last updated: April 2026

The Cornerstone Restaurant respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use and look after your personal data when you visit our website, contact us, make an enquiry, book a table, interact with us on social media, or otherwise use our services.

Our website address is: https://seafoodrestaurantmallaig.com/

1. Who we are

The Cornerstone Restaurant is a seafood restaurant based in Mallaig, Scotland.

Business name: The Cornerstone Restaurant
Address: Davies Brae, Mallaig, Scotland, PH41 4PU
Phone: +44 (0) 1687 462 306
Website: https://seafoodrestaurantmallaig.com/

For bookings, enquiries or questions about this Privacy Policy, please contact us using the details above.

2. What personal information we collect

We may collect and use the following types of personal information:

Information you give us directly

This may include:

  • Your name
  • Your phone number
  • Your email address
  • Booking or enquiry details
  • Any message you send to us through our website, email, telephone, Facebook, Instagram or other social media platforms
  • Information about dietary requirements, allergies, accessibility needs, or other requests linked to your booking

Please only provide information that is relevant to your enquiry or booking.

Information collected automatically through the website

When you visit our website, we may collect limited (anonymised) technical information such as:

  • IP address
  • Browser type and version
  • Device type
  • Pages visited
  • Date and time of visit
  • How you found our website
  • General website usage information

This helps us understand how people use the website and improve it over time.

Information from third-party platforms

If you contact us through Facebook, Instagram, Tripadvisor, Yelp, Google or another third-party platform, we may receive information from that platform depending on your own privacy settings and how you choose to interact with us.

Those platforms have their own privacy policies, and we recommend reading them if you use those services.

3. How we use your personal information

We use your personal information to:

  • Respond to your enquiry
  • Manage table bookings or group booking enquiries
  • Contact you about your booking
  • Record important details such as dietary requirements, allergies or accessibility needs
  • Provide customer service
  • Improve our website and customer experience
  • Manage reviews, feedback or social media messages
  • Protect our business, website and customers from misuse, spam or security issues
  • Meet legal, regulatory, tax or accounting obligations

4. Our lawful basis for using your information

Under UK data protection law, we need a lawful basis for using personal information.

Depending on the situation, we may use your information because:

  • It is necessary to provide a service or respond to your request, for example when you contact us about a booking.
  • We have a legitimate interest, for example improving our website, responding to customer enquiries, managing our restaurant, and protecting our business.
  • We need to comply with a legal obligation, for example keeping records for tax, accounting, health and safety, or legal purposes.
  • You have given consent, for example where optional cookies or marketing permissions apply.

Where we rely on consent, you can withdraw your consent at any time.

5. Dietary, allergy and accessibility information

If you tell us about dietary requirements, allergies, accessibility needs or other health-related information, we will only use this information where necessary to help us provide a safe and suitable service.

We will not use this information for marketing purposes.

6. How long we keep your information

We only keep personal information for as long as necessary.

As a general guide:

  • Booking and enquiry information is kept for as long as needed to manage the booking or enquiry.
  • Business, accounting or legal records may be kept for longer where required by law.
  • Website analytics information may be kept for the period set by the analytics provider.
  • Messages sent through social media platforms may remain available within those platforms according to their own retention settings and policies.

If we no longer need your personal information, we will delete it or anonymise it where appropriate.

7. Who we share your information with

We do not sell your personal information.

We may share limited personal information with trusted third parties where necessary to run our business and website. This may include:

  • Website hosting providers
  • Website maintenance or security providers
  • Email or communication providers
  • Booking, enquiry or form systems
  • Analytics providers
  • Social media platforms, if you contact us through them
  • Professional advisers such as accountants or legal advisers
  • Regulators, authorities or other parties where required by law

We only share the information needed for the relevant purpose.

8. Cookies and website tracking

Our website may use cookies and similar technologies. Cookies are small files placed on your device to help websites work properly, remember preferences, understand website usage, or support third-party services. We have a dedicated page about the cookies used on this website.

The ICO explains that PECR covers cookies and similar technologies, and that non-essential cookies usually require clear consent.

We may use:

Essential cookies

These help the website function properly and cannot usually be switched off.

Analytics cookies

These help us understand how visitors use the website, such as which pages are visited most often. This helps us improve the website.

Third-party cookies

Some pages may include links, embeds or features from third-party services such as Facebook, Instagram, Tripadvisor, Yelp, Google Maps or other platforms. These services may use their own cookies or tracking technologies.

You can usually control or delete cookies through your browser settings. Some parts of the website may not work properly if cookies are disabled.

9. Links to other websites

Our website may include links to other websites or platforms, including Facebook, Instagram, Tripadvisor and Yelp.

We are not responsible for the privacy practices or content of those third-party websites. When you leave our website, you should read the privacy policy of the website or platform you visit.

10. How we protect your information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure or alteration.

However, no website, email system or online service can be guaranteed to be completely secure. Please take care when sending personal information online.

11. Your data protection rights

Under UK data protection law, you have rights over your personal information. These may include the right to:

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your personal information in certain circumstances
  • Ask us to restrict how we use your information
  • Object to certain uses of your information
  • Ask for your information to be transferred to another organisation in certain circumstances
  • Withdraw consent where we rely on consent

The ICO says privacy notices should tell people about these rights and how they can complain if they have concerns.

To exercise your rights, please contact us using the details in this policy.

12. Complaints

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.