Privacy policy
Last updated: 1 October 2026. This privacy policy explains how In-Excess UK Ltd ("In-Excess", "we", "us" or "our") collects and uses your personal information when you use the Charlotte's Restaurants & Tea Rooms app and booking website (the "Services"), for example to view our menus, book a table or check on your bookings. Charlotte's Restaurants & Tea Rooms are found inside In-Excess Garden Centres at Fair Oak, Landford, Ringwood and Salisbury.
In-Excess UK Ltd is the data controller of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Personal Information We Collect
We only collect the information we need to take and manage your table bookings:
•Booking details: your name, email address and phone number, the restaurant, date, time and number of guests, and any notes you add to your booking.
•Account details: if you create an account, your email address and password. Your password is stored in a secure, encrypted (hashed) form and we can never see it.
•Staff details: if you work for us, the email address we use to give you access to the staff booking tools.
•Technical information: the limited technical data needed to run the Services securely, such as the sign-in session stored on your device and server logs, which can include your IP address.
Notes you add to a booking may include health information, such as allergies or dietary needs. We only use this to prepare for your visit, so please only include what you are happy for our restaurant team to see.
We do not collect payment details, your location, your contacts or photos, or any other content from your device. The app does not use advertising, analytics or tracking tools, and we do not sell your personal information.
How We Use Your Personal Information
•Bookings. To take, manage and honour your table bookings, including contacting you about your booking if we need to. We do this to perform our contract with you, or to take steps you ask for before entering into one.
•Your account. To create and run your account, let you sign in and show you the status of your bookings (contract).
•Service emails. To send emails you need in order to use the Services, such as confirming your email address or resetting your password (contract).
•Running our restaurants. To let our restaurant staff view and manage the bookings for their restaurant (our legitimate interests in running our business).
•Security. To keep the Services secure, prevent misuse and fix problems (our legitimate interests).
•Legal reasons. To meet our legal obligations, such as keeping business records or responding to lawful requests from authorities (legal obligation).
We do not use the information you give us through the Services to send you marketing. If we ever want to, we will ask for your consent first.
Who We Share Personal Information With
•Our restaurant team. Staff can only see the bookings for the restaurants they work in.
•Our service providers. Lovable (which hosts our booking website and database through Lovable Cloud) and Supabase (which provides our database and sign-in systems) store and process information for us. They may only use it to provide their services to us.
•Authorities and others where the law requires it, or where it is needed to protect our rights, our customers or the public.
•A buyer or successor, if all or part of our business is sold or reorganised.
International Transfers
Our service providers may store or process your information outside the UK. When this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How Long We Keep Your Information
•Bookings are kept for as long as we need them to manage your visit and for our business and legal records. After that, they are deleted or anonymised.
•Accounts are kept until you delete them. When you delete your account, your sign-in details are deleted immediately.
•Bookings you made while signed in are unlinked from your account when you delete it, but the restaurant keeps them so that any upcoming table is still honoured. You can ask us to delete these as well (see Your Rights).
Deleting Your Account
You can delete your account at any time. In the app, open the Account tab and choose Delete account. You can also email customerservice@in-excess.co.uk and we will delete it for you.
Your Rights
Under UK data protection law, you have the right to:
•Access the personal information we hold about you and get a copy of it.
•Have inaccurate information corrected.
•Have your information deleted.
•Restrict or object to how we use your information.
•Receive your information in a portable format, or have it sent to another organisation.
•Withdraw your consent at any time, where we rely on consent.
To use any of these rights, contact us using the details below. We may need to confirm your identity first, and we will reply within one month.
Keeping Your Information Secure
Information sent between the Services and our servers is encrypted in transit. Access is restricted so that customers can only see their own bookings and staff can only see bookings for their restaurant. No system is completely secure, so please keep your password safe and do not share it with anyone.
Children's Data
The Services are not intended for children under 13, and we do not knowingly collect their personal information. If you think a child has given us their information, please contact us and we will delete it.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will post the new version in the app and on our website and change the "Last updated" date. If the changes are significant, we will let you know.
Contact and Complaints
If you have any questions about this privacy policy or how we handle your information, please email customerservice@in-excess.co.uk, call +44 1722 437471 or write to In-Excess UK Ltd, Anchor House, Netherhampton Road, Salisbury SP2 8RA, United Kingdom.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before you go to the ICO.