See menusBook afternoon teaCall the cafe

Home/Privacy

Privacy notice

This is the plain-English version. We follow the UK Data Protection Act 2018 and the UK GDPR. Last updated 01/10/2026.

Who we are

Tea Time Cafe is operated by Tea Time Yorkshire Ltd at 87 Market Place, Thirsk, North Yorkshire YO7 1ET. The data controller is Tea Time Yorkshire Ltd, and Rosa Fothergill is the person to contact about it. You can reach us at rosa@teatimeyorkshire.co.uk or 01845 523869.

What we collect, and why

We only collect what we need to run the cafe and answer the things you ask us. In practice that's:

  • Booking forms— name, email, phone number, party size, booking date and time, dietary or special-occasion notes you supply, and for afternoon tea the names of any dishes you picked from our menu. We use this to confirm and run your booking.
  • Contact forms— name, email, phone (optional), and the content of your message. We use this to reply. If you tick the box to hear from us, we also keep your name and email on our mailing list.
  • Analytics— if you accept analytics cookies, we use two tools: Google Analytics 4 to count page views, and PostHog, hosted in the EU, to see which links get clicked and where our booking form trips people up. Between them they set three cookies. PostHog records clicks and page paths; it does not record what you type, and we have session recording turned off. Neither is used to identify you, and neither runs at all until you accept.

Lawful basis

  • Contract for arranging and running your booking.
  • Legitimate interests for replying to enquiries, basic site analytics, and protecting against spam.
  • Consentfor non-essential cookies (analytics). Withdraw it any time with the “Change cookie choices” link at the bottom of any page, which puts the choice back in front of you.
  • Consent for our occasional emails about what is on, given by ticking the box on the contact form. Every email has an unsubscribe link, and you can also email rosa@teatimeyorkshire.co.uk to come off the list.

How long we keep it

  • Booking, reservation and enquiry data: up to 24 months from your most recent visit.
  • Analytics: aggregated, retained for 14 months in Google Analytics.

Who we share it with

The site is hosted on Vercel. Bookings, reservations and enquiries are stored in a Neon Postgres database. Email is sent through Resend. Analytics, if you opt in, runs through Google and PostHog(PostHog on its EU infrastructure). We take no payment on this website, so no card details ever reach us or anyone acting for us. We don't sell your data, ever.

When you send a booking request, a table request, an enquiry or a message, a short note goes to a staff channel in Slack, passed on by n8n, an automation service, so whoever is on shift knows it has come in. Every note gives the kind of request and a reference number. A note about a booking, a table request or an enquiry also gives a link to our own admin page, and can give the day and time, how many are coming and, for the event space, the catering you picked from our list. A note about a message gives the topic you chose. Your name, contact details, dietary needs, the occasion and anything you wrote yourself stay in Rosa's email and our booking records. When you send an afternoon tea request, any dishes you picked from the menu go with it into Rosa's email only.

Some of these providers process data outside the UK. Where they do, the transfer relies on the UK's approved safeguards. If you want the current list of who holds what, ask us and we will tell you plainly.

Your rights

You can ask to see what we hold about you, correct it, delete it (where lawful), or ask us to stop processing it. Email rosa@teatimeyorkshire.co.uk and we'll come back to you within 30 days. If you're unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set the cookies needed to keep the site working (no consent needed). Anything optional — analytics, in particular — you opt into via the cookie banner: accepting sets three, one for Google Analytics and two for PostHog. Your choice is stored on your own device, not in a cookie, so clearing cookies does not reset it. Use the “Change cookie choices” link at the bottom of any page instead, which clears the choice and asks again.