Privacy Policy

Mijays Bar is the trading brand used on this website. The owner must confirm the person or legal entity acting as data controller, their postal address and whether the UK and Ghana services have the same controller. We have not supplied an unverified company name, registration number or address.

For privacy questions or rights requests, email info@mijaysbar.com. You can also call 07859 703 553 using the existing UK contact number. These contact routes also allow Ghana visitors to ask who is responsible for their information.

• Enquiries: name, email, telephone if supplied, preferred contact method, event date and type, venue, guest count, selected services or package, and your notes. Ghana enquiries can include country of residence. Fields differ between forms; some are optional.
• Enquiry context: UK or Ghana market, form/page source and campaign attribution. This can include bounded campaign tags, referring website hostname, landing path and whether an advertising click identifier was present, not its full value. Attribution may be kept in page memory and attached to an enquiry even without analytics cookies; session storage requires analytics consent.
• Follow-up: enquiry status, quoted amount, deposit and won amount if an administrator records them, currency, delivery and integration status. Amount fields are records, not card details. These website forms do not collect payment-card information.
• Consultations: an agreed consultation time and, where a calendar booking is created, its event reference/link and synchronisation status.
• Administrator access: email used for passwordless sign-in, authentication/session information and assigned access role. Visitors do not need an account to enquire.
• Chat and direct contact: messages, contact details and event information you choose to share. Chat lead handling can store a conversation transcript. Email, telephone and WhatsApp communications are also processed by the relevant communications provider.
• Technical information: hosting and service providers receive information needed to deliver requests, such as IP address and browser/request information. Enquiry abuse protection stores a hashed IP identifier and submission email/time. Delivery records contain recipient email, delivery status and technical error information.

Please do not include guests' names or unnecessary personal information in free-text notes. Allergy, health or religious dietary details can be sensitive personal data. Start with a general requirement and contact us to agree what is necessary; the owner must confirm an appropriate special-category legal basis and handling process before collecting identifiable sensitive details.

Under UK GDPR, a lawful basis must apply to each use of personal data. The following explains the intended purposes and bases; the owner still needs to confirm and document their application to the business.

• Answering enquiries, preparing quotes and arranging requested services: steps at your request before entering a contract, and performance of a contract where you are the customer. For representatives, planners or other contacts who are not the contracting party, legitimate interests in responding and organising the event may apply, subject to balancing your rights.
• Administration, delivery monitoring, access security and abuse prevention: legitimate interests in operating a reliable, secure service and following up enquiries, subject to a documented balancing assessment. Essential storage supports these functions, not optional tracking.
• Optional analytics, session insights, video embeds and chat loading: your category-specific consent. Using an optional chat to request a quote also involves handling the information you submit for that request; permission to load chat is not blanket consent to every subsequent use.
• Required business records or responding to legal requirements: legal obligation only where a specific applicable obligation exists. The owner must identify the relevant obligations and retention requirements; this notice does not invent them.

Information marked as required is needed to deal with the request; without sufficient contact/event details we may not be able to reply or quote. Optional cookie choices never prevent you from using enquiry forms. An enquiry is not consent to unrelated marketing.

Authorised Mijays Bar administrators can access enquiries for follow-up. The current website uses these services, depending on the feature you use:

• Lovable Cloud: website backend, enquiry database and administrator authentication. Enquiries are saved before notification or spreadsheet delivery is attempted. Administrator permissions restrict access; the underlying database/authentication technology is part of the hosted service.
• Lovable email delivery: enquiry notifications and related transactional emails, plus email delivery/status records. The actual configured administrator magic-link sender and underlying email providers need owner confirmation.
• Google Sheets: enquiry information is synchronised into the configured business spreadsheet for follow-up. Copies in spreadsheets and inboxes require their own access and deletion controls.
• Google Calendar, where used: consultation details are sent to the configured calendar to create an event. This is not an optional tracking cookie; it is part of a requested consultation workflow.
• Google Analytics 4: optional visit and enquiry-funnel events, such as form starts, submission outcomes and contact clicks. The website's event helper is not designed to send form names, email addresses, telephone numbers or notes. Google signals and advertising personalisation are disabled in the current loader.
• Microsoft Clarity: optional session insights, including interaction and scrolling information. Input masking is described by the consent panel, but masking and recording settings need live verification; do not submit sensitive details through recorded pages.
• TikTok: embedded videos load only if you allow that category. TikTok can receive request/browser information and use its own cookies.
• Chat provider: the optional assistant is loaded from ai.boafo.digital. The owner must confirm the provider's legal identity, any AI subprocessors, conversation retention and data-use terms.

Opening an external link, including WhatsApp, YouTube or TikTok profile links, takes you to another service whose privacy rules apply. Consent to an embed is not required to follow an ordinary external link.

The precise contracting providers, their roles, authorised recipients and processing agreements remain to be confirmed. We do not claim that every named service has an approved contract or verified safeguards in place.

The website serves UK and Ghana enquiries through a shared backend, with a market field used to distinguish them. Providers and anyone authorised to handle an enquiry may operate in different countries. Hosting locations, UK/Ghana access arrangements and onward processing countries have not been fully confirmed.

Where UK GDPR restricts an international transfer, a valid transfer mechanism and any necessary assessment must be established. We cannot state that adequacy decisions, UK transfer agreements, contractual clauses or other safeguards cover these flows until the owner verifies them. Ask our privacy contact for the confirmed position. Ghana-specific controller, registration, notice and cross-border requirements also require local review.

Enquiries, notification records and integration copies are stored to support the workflows above. A business-approved retention and deletion schedule has not yet been supplied. We therefore do not promise a specific number of months or years, or automatic deletion of these records. Retention for chat, authentication, hosting logs, analytics, backups, email and Google services also needs confirmation.

The owner must set periods based on the purpose, necessary follow-up, applicable record-keeping obligations and any dispute requirements, then apply deletion to the database, spreadsheets, calendars, inboxes and provider copies where appropriate. You can request deletion using the contact above; legal exceptions may apply.

The website uses administrator authentication and role-restricted enquiry access. These are safeguards, not a guarantee that no security incident can occur. Access to connected inboxes, Google accounts and other providers must be reviewed separately.

Our UK and Ghana booking forms include an optional box, unticked by default, to receive occasional event ideas, menus, packages and offers by email. Your enquiry is handled the same whether or not you tick it.

We rely on your consent for these emails. If you tick the box we record the time, the exact wording shown, its version, the page, the UK or Ghana market and the version of this notice. We do not treat past enquiries as consent, and we do not currently rely on the "soft opt-in" for existing customers.

You can withdraw at any time by replying to say so or emailing info@mijaysbar.com. Every marketing email will include an unsubscribe link. When you opt out we keep a minimal record of your email address so we do not contact you again.

No marketing emails are being sent yet. Before any are, we will name the email provider we use in this notice. Our enquiry notification service is used only for messages about your enquiry, not marketing.

Essential storage is used for site choices and administrator sessions. Google Analytics, Clarity, TikTok embeds and the chat assistant are off until you opt in to their categories. Accept and Reject are available with equal prominence, and optional categories are not pre-selected. This approach applies on UK and Ghana pages.

Do Not Track or Global Privacy Control keeps analytics and session insights off even if selected. Internal visits, bots and non-production visits are also filtered by the analytics loader. Rejecting optional cookies leaves booking and contact forms available.

Use Cookie settings in the footer or the button below to change or withdraw permission. Withdrawing an enabled category reloads the page so previously loaded tools stop running. The website attempts to remove its first-party analytics cookies and removes stored campaign attribution when analytics is disabled. It cannot delete cookies set on another provider's domain or erase information already received by a provider; those requests must follow the applicable rights process.

Depending on the circumstances and lawful basis, UK GDPR rights include access to your information, correction, erasure, restriction, portability and objection. You can object to processing based on legitimate interests, including explaining your particular situation. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Rights have conditions and exceptions.

Email info@mijaysbar.com with your request. We may need proportionate information to verify your identity, but please do not send identity documents unless requested through an agreed method. UK GDPR requests are generally due a response within one month, with permitted extensions in qualifying cases; this is a statutory framework, not a claim that the business process has been audited.

You can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. You do not have to contact us first. Ghana visitors may also have rights under applicable Ghanaian law and may contact Ghana's Data Protection Commission; the owner must confirm the relevant local arrangements.

The current website code does not show a solely automated decision that grants or refuses an event booking with legal or similarly significant effects. An optional chat reply is not a confirmed booking. Provider AI processing and any business processes outside the website need separate confirmation.

We will need to update this notice when the owner confirms controller details, retention, provider agreements, international arrangements and Ghana-specific obligations, or when data handling changes. The update date appears at the top. New optional vendors or changed consent categories require a fresh consent choice.

For the confirmed position on any unresolved item, contact info@mijaysbar.com. This notice does not replace a review of the business's actual practices and legal obligations.