Privacy Notice

Last updated: 11 November 2026

1. Who we are
By Other Means Ltd (trading as The Roses of Elagabalus) ("we", "us", or "our") is committed to protecting and respecting your privacy. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

  • Registered Company Name: By Other Means Ltd

  • Trading Name: The Roses of Elagabalus

  • Company Number: 15633509

  • Trading Address: 578 Kingsland Road, E8 4AH

  • Contact Email: Info@therosesofelagabalus.com

2. The data we collect about you
When you visit our website or interact with our services, we may collect and process the following personal data:

  • Identity and Contact Data: Your first name, last name, email address, and telephone number when you book a table, purchase a gift voucher, or submit an enquiry.

  • Booking and Transaction Data: Details of your table reservations, dietary requirements, private hire requests, and payment confirmations. (Note: Card payments are processed securely by our third-party payment providers; we do not store full payment card details).

  • Technical and Usage Data: Your internet protocol (IP) address, browser type and version, time zone setting, operating system, and information about how you use our website.

  • Marketing and Communications Data: Your preferences in receiving marketing emails and newsletters from us.

3. How and why we use your personal data
Under UK data protection law, we must have a valid lawful basis to process your personal data. We use your information for the following purposes:

  • To manage your bookings and orders (Performance of a Contract): To reserve your table, process gift voucher purchases, and accommodate event bookings.

  • To communicate with you (Performance of a Contract / Legitimate Interests): To send booking confirmations, reminders, and respond to your customer service enquiries.

  • To improve our website and services (Legitimate Interests): To analyse website traffic, troubleshoot technical issues, and enhance user experience.

  • To send you marketing updates (Consent): To send you news, seasonal menu updates, and event invitations, where you have actively opted in to receive them. You can withdraw your consent at any time by clicking "unsubscribe" in any email.

  • To comply with legal obligations (Legal Obligation): To maintain financial records for tax purposes and comply with licensing or health and safety regulations.

4. Sharing your personal data
We do not sell your personal data to third parties. We may share your data with trusted third-party service providers who perform functions on our behalf, including:

  • Table reservation and ticketing platforms ( e.g. Tebi B.V, SevenRooms, OpenTable, DesignMyNight])

  • Payment processors (e.g., Tebi B.V. Stripe, Square])

  • Email marketing providers (Coming Soon)

  • Website hosting and analytics providers

  • Professional advisers (such as accountants, lawyers, and insurers) and regulatory authorities where required by law.

All third-party providers are required to respect the security of your personal data and treat it in accordance with the law.

5. International transfers
Some of our external third-party service providers may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by using UK-approved international data transfer agreements or transferring to countries deemed to provide an adequate level of data protection.

6. How long we keep your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Booking and transaction records are typically kept for 6 years to comply with UK tax laws.

  • Marketing contact details are kept until you unsubscribe or request deletion.

7. Cookies
Our website uses cookies to distinguish you from other users and to ensure the site functions properly. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy [Insert Link to Cookie Policy].

8. Your legal rights
Under UK data protection laws, you have the right to:

  • Request access to your personal data (commonly known as a "data subject access request").

  • Request correction of any incomplete or inaccurate data we hold about you.

  • Request erasure of your personal data where there is no good reason for us to continue processing it.

  • Object to processing of your personal data where we are relying on a legitimate interest.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or to a third party.

  • Withdraw consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us at info@therosesofelagabalus.com

9. Complaints
If you have any concerns about how we handle your personal data, please contact us first so we can resolve the issue. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).