PRIVACY NOTICE
Last updated March 17, 2026
This Privacy Notice explains how Trillium Restaurant (Birmingham) Limited, trading as Trillium Restaurant, collects, uses, stores and shares your personal information when you use our services, including when you visit our website at https://www.trilliumrestaurant.co.uk/, make a booking, purchase gift cards or vouchers, create an account, sign up to our marketing, or otherwise interact with us.
Trillium Restaurant (Birmingham) Limited is the data controller responsible for your personal information for the purposes described in this Privacy Notice.
- Company number: 16476985
- Registered office: Part 4th & 5th Floor, One Centenary Way, Birmingham, West Midlands, United Kingdom, B3 3AY
- Restaurant address: 1 Snow Hill Queensway, Birmingham, B4 6GH, United Kingdom
- Email: restaurant@trilliumrestaurant.co.uk
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services.
SUMMARY OF KEY POINTS
This summary provides a short overview of our Privacy Notice. You can use the table of contents below to jump to any section.
What personal information do we process? We process personal information that you provide directly to us, as well as certain technical information collected automatically when you use our website.
Do we process special category data? In limited cases, yes. If you provide dietary requirements or allergy information in connection with a booking or event, this may include health-related information.
Do we collect information from third parties? In some cases, yes. We may receive limited information from third-party providers such as booking, payment, analytics, advertising and email marketing platforms.
How do we use your information? We use it to manage bookings, accounts, orders, gift cards, customer enquiries, marketing, website performance, analytics, fraud prevention and legal compliance.
Do we use cookies and similar technologies? Yes. We use essential cookies and, where required by law, we ask for your consent before using non-essential analytics and marketing cookies.
What are your rights? If you are in the UK, EEA or certain other jurisdictions, you may have rights to access, correct, erase, restrict or object to certain processing of your personal information.
How do you exercise your rights? You can contact us at restaurant@trilliumrestaurant.co.uk or submit a request using our data subject access request form.
TABLE OF CONTENTS
- 1. What information do we collect?
- 2. How do we process your information?
- 3. What legal bases do we rely on to process your personal information?
- 4. When and with whom do we share your personal information?
- 5. Do we use cookies and other tracking technologies?
- 6. Is your information transferred internationally?
- 7. How long do we keep your information?
- 8. How do we keep your information safe?
- 9. Do we collect information from minors?
- 10. What are your privacy rights?
- 11. Controls for do-not-track features
- 12. Do we make updates to this notice?
- 13. How can you contact us about this notice?
- 14. How can you review, update or delete the data we collect from you?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In short: We collect personal information that you provide to us directly.
We collect personal information that you voluntarily provide to us when you create an account, make a reservation, place an order, purchase a gift card or voucher, sign up to our newsletter, contact us, or otherwise interact with us.
The personal information we may collect includes:
- name
- email address
- phone number
- postal or billing address
- account login details, such as username and password
- contact preferences
- reservation and booking details
- gift card, voucher and order information
- payment-related information necessary to complete a transaction
- communications you send to us
- dietary requirements and allergy information where you choose to provide this
Special category data. We do not generally seek to collect special category personal data. However, where you provide dietary requirements, allergy information or similar health-related details in connection with a booking, event or order, we may process that information so we can provide our services safely and appropriately.
Payment data. We may collect data necessary to process your payment if you make a purchase. Payment card data is handled by our payment providers, including DNA Payments. You can read their privacy notice here: https://dnapayments.com/page/privacy-policy.
All personal information that you provide to us should be true, complete and accurate. Please let us know if any of your information changes.
Information collected automatically
In short: When you visit our website, we automatically collect certain technical and usage information.
This information does not usually identify you directly, but may include your IP address, browser type, device type, operating system, language preferences, referring URLs, pages viewed, actions taken on the site, date and time of visits and other technical information. We use this information to keep our website secure, make it work properly, understand usage and improve performance.
Like many businesses, we also collect information through cookies and similar technologies. Please see our Cookie Notice for more information: https://www.trilliumrestaurant.co.uk/cookies.
This information may include:
- Log and usage data, such as IP address, browser type, pages viewed, date and time stamps, clicks, searches and other activity on the website.
- Device data, such as hardware model, operating system, browser type, device identifiers and network information.
- Location data, such as general location based on IP address and, where enabled on your device, more precise location information.
Information from third parties. We may also receive limited information about you from third-party service providers we use to operate our services, including booking providers, payment providers, analytics providers, advertising platforms and email marketing providers.
2. HOW DO WE PROCESS YOUR INFORMATION?
In short: We process your information to run our restaurant and website, provide services to you, communicate with you, market to you where permitted, improve performance, protect our business and comply with legal obligations.
We may process your personal information for the following purposes:
- to create and manage your account
- to manage restaurant reservations through SevenRooms
- to process and fulfil orders, gift cards and vouchers
- to take and process payments
- to manage dietary requirements and allergy information linked to your booking or order
- to respond to enquiries, requests and customer support issues
- to send service and administrative messages
- to send marketing communications where you have signed up or where we are otherwise permitted to do so
- to personalise content, offers and advertising where consent has been given where required
- to analyse website usage and improve our website, services and marketing
- to prevent fraud, misuse and security issues
- to comply with legal and regulatory obligations
- to establish, exercise or defend legal claims
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
In short: Where UK GDPR or EU GDPR applies, we only process your personal information where we have a valid legal basis to do so.
If you are located in the UK or EEA, we may rely on the following legal bases:
- Performance of a contract where we need your information to manage bookings, process orders, provide gift cards or vouchers, operate your account, or otherwise provide services you have requested.
- Legitimate interests where it is reasonably necessary for us to operate and improve our business, manage customer relationships, respond to enquiries, maintain website security, prevent fraud and understand how our services are used, provided our interests are not overridden by your rights and freedoms.
- Consent where we rely on your permission, for example for certain email marketing activities, non-essential cookies, analytics and advertising technologies, or where you provide certain optional information.
- Legal obligation where we need to process your information to comply with applicable laws, regulations, tax or accounting requirements, or lawful requests from authorities.
- Vital interests where processing is necessary to protect someone’s life or safety.
Where we process health-related information such as allergy or dietary requirement details, we do so only where this is necessary and appropriate for providing our services safely, based on your disclosure of that information and, where required, your consent.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In short: We share personal information only where necessary with trusted service providers, business partners and in limited legal or business circumstances.
We may share your personal information with third-party service providers who process data on our behalf and help us operate our business. These may include providers in the following categories:
- restaurant reservation and guest management providers, including SevenRooms. You can view SevenRooms’ privacy policy here: https://sevenrooms.com/privacy-policy/
- payment processors, including DNA Payments
- email marketing providers, including Mailchimp and Brevo
- data analytics providers, including Google Analytics
- advertising and remarketing platforms, including Google Ads and, where used, Meta platforms
- website hosting and cloud service providers
- customer communication and support tools
- website performance, security and monitoring providers
- professional advisers, such as accountants, insurers, solicitors and auditors, where necessary
We may also share information in the following situations:
- Business transfers, such as a merger, sale, restructuring, financing or acquisition of all or part of our business.
- Legal reasons, where disclosure is necessary to comply with the law, enforce our terms, protect our rights or respond to lawful requests.
- With your consent, where you have asked us to share your information or clearly agreed to it.
We require our processors and service providers to handle personal information securely and only in accordance with our instructions and applicable law.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In short: Yes. We use cookies and similar technologies to operate, analyse and market our website and services.
We use cookies and similar technologies such as pixels, tags and web beacons on our website. Some are essential for the website to function properly. Others help us understand how visitors use the site, improve performance, remember preferences and show relevant advertising.
Where required by law, we will ask for your consent before placing non-essential cookies or using non-essential analytics and marketing technologies. You can manage your preferences through our cookie banner or cookie settings. You can also control cookies through your browser settings, although disabling certain cookies may affect website functionality.
We may use tools and services including Google Analytics, Google Ads remarketing, Mailchimp, Brevo and, where used, Meta advertising technologies. For more information, please see our Cookie Notice: https://www.trilliumrestaurant.co.uk/cookies.
Google Analytics
We use Google Analytics to help us understand how visitors use our website. Google Analytics may collect information such as your IP address, device details and browsing activity. You can learn more about how Google uses data here: https://policies.google.com/privacy. You can also opt out using the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout.
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In short: Your information may be stored or processed outside your country, including in the UK, Denmark and other countries where our service providers operate.
Our website hosting and related infrastructure may involve storage or processing in Denmark and the United Kingdom. Some of our service providers may also process personal information in other countries, including countries outside the UK or EEA.
Where we transfer personal information outside the UK or EEA, we take steps to ensure appropriate safeguards are in place. Depending on the destination and provider, this may include reliance on adequacy regulations or approved standard contractual clauses and similar lawful transfer mechanisms.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In short: We keep personal information for as long as necessary for the purposes described in this Privacy Notice, unless a longer period is required by law.
Retention periods vary depending on the type of information and the reason we hold it. In general:
- account information is kept while your account remains active and for a reasonable period afterwards where needed for administration, record-keeping, security or legal reasons
- reservation and guest history information may be retained to manage ongoing customer relationships, service preferences and repeat bookings
- marketing information may be retained until you unsubscribe or object, and in some cases afterwards on a suppression list so we know not to contact you again
- financial, payment and transaction records may be retained for as long as required by tax, accounting and legal obligations
- technical and analytics data is retained according to operational need, cookie settings and the settings of the relevant platform providers
Where you asked for marketing retention to continue indefinitely until you unsubscribe, we may keep your marketing preferences and related contact details unless and until you opt out, object or ask us to delete them, subject to any legal need to retain a record of your preferences.
When we no longer need your personal information, we will delete, anonymise or securely store it until deletion is possible.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In short: We use appropriate technical and organisational measures to protect personal information.
We take reasonable steps designed to protect personal information against accidental loss, unauthorised access, use, alteration or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
9. DO WE COLLECT INFORMATION FROM MINORS?
In short: We do not knowingly collect personal information from children under 18 through our website or market directly to them.
If you believe a child under 18 has provided personal information to us through our website, please contact us at restaurant@trilliumrestaurant.co.uk and we will take reasonable steps to investigate and, where appropriate, delete the information.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In short: Depending on where you are located, you may have rights in relation to your personal information.
If you are in the UK, EEA or certain other jurisdictions, your rights may include the right to:
- request access to the personal information we hold about you
- request correction of inaccurate or incomplete personal information
- request deletion of your personal information in certain circumstances
- request restriction of processing in certain circumstances
- object to processing based on legitimate interests
- withdraw consent where we rely on consent
- request portability of certain personal information
- complain to the relevant supervisory authority
If you are in the UK and believe we are handling your personal information unlawfully, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.
Withdrawing consent. If we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Marketing opt-out. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or by contacting us at restaurant@trilliumrestaurant.co.uk. We may still send non-marketing service messages where necessary.
Account information. If you have an account, you may be able to review or update certain information by logging into your account. You can also contact us if you would like your account to be closed or your information reviewed.
Cookies. You can manage non-essential cookies through our cookie settings and browser controls. For more information, please see our Cookie Notice: https://www.trilliumrestaurant.co.uk/cookies.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Some browsers offer a Do Not Track setting. Because there is currently no consistent industry standard for recognising and implementing Do Not Track signals, our website does not currently respond to them. If a recognised standard is adopted in the future and we are required to follow it, we will update this Privacy Notice.
12. DO WE MAKE UPDATES TO THIS NOTICE?
In short: Yes. We may update this Privacy Notice from time to time.
We may revise this Privacy Notice to reflect changes in our practices, legal requirements or operational needs. When we do, we will update the date shown at the top of this page. We encourage you to review this page regularly.
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have any questions or comments about this Privacy Notice, you can contact us at:
Trillium Restaurant (Birmingham) Limited
Company number 16476985
Registered office: Part 4th & 5th Floor, One Centenary Way, Birmingham, West Midlands, United Kingdom, B3 3AY
Restaurant address: 1 Snow Hill Queensway, Birmingham, B4 6GH, United Kingdom
Email: restaurant@trilliumrestaurant.co.uk
14. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?
You may request access to, correction of, or deletion of your personal information, or ask us questions about how we process it, by emailing restaurant@trilliumrestaurant.co.uk. We will consider and respond to requests in accordance with applicable data protection law.
This Privacy Notice was adapted from a template originally generated using Termly.
