Privacy Policy

A legal disclaimer

the Orange Bird Privacy Policy

Effective from 15 October 2026

About this policy

the Orange Bird takes your privacy seriously. This policy explains what personal information we collect, why we collect it, how we look after it and the choices you have. It applies when you:

- use our website, theorangebird.co.uk
- book a table, online or by phone, email or WhatsApp
- visit and dine with us
- buy from our online shop, including sauces, spice blends, recipes and gift vouchers
- join the Orange Bird Club
- sign up to our emails or get in touch with us
- apply to work with us

Who we are

the Orange Bird, 78 Middlewood Road, Hillsborough, Sheffield S6 4HA, is the data controller for the personal information described in this policy, which means we decide how and why it is used.

If you have any questions about this policy or your information, email us at reservations@theorangebird.co.uk or call 0114 234 9330.

The information we collect

When you book a table: your name, email address, mobile number, party size, date and time, any comments or special requests, and your marketing preferences. Where a deposit or card guarantee is required, card details are taken and held securely by our payment provider, not by us.

When you visit: details that help us look after you, such as dietary requirements, allergies you tell us about, seating preferences, past and upcoming reservations, and any feedback or survey responses.

When you shop with us: your name, billing and delivery address, email address, phone number, order history and any notes you add to your order. Payments are processed by our payment provider; we never see or store your full card number.

When you join the Orange Bird Club: your name, contact details, membership start and renewal dates, payment records and how you use your member benefits. If you use our WhatsApp booking line, we will also see your WhatsApp name, number and the messages you send us.

When you buy or redeem a gift voucher: the purchaser's name and contact details, the recipient's name and email or postal address (if the voucher is sent to them), and the voucher's value and redemption history.

When you sign up to our emails or contact us: your name, email address and whatever you choose to tell us in your message.

When you apply to work with us: your CV and the details in it, such as employment history, education and references.

When you use our website: technical information collected automatically, including your IP address, device type, browser, operating system, pages visited, time spent on the site, the site you came from and your general location (city or region). Some of this is collected through cookies (see Cookies below).

How we use your information

We only use your personal information where the law allows us to.

To take and manage table bookings, send confirmations and reminders, and contact you about your booking. Legal basis: contract.

To run the standby list and let you know when a table becomes available. Legal basis: contract.

To process, pack and deliver shop orders, and handle returns or queries. Legal basis: contract.

To run your Orange Bird Club membership, including member pricing, quarterly treats, early access and the WhatsApp booking line. Legal basis: contract.

To issue, send and redeem gift vouchers. Legal basis: contract.

To record allergies and dietary requirements so we can serve you safely. Legal basis: your explicit consent, and to protect your health.

To send news, offers, events and product launches by email or SMS. Legal basis: your consent.

To send post-visit feedback emails and improve our food, service and website. Legal basis: legitimate interests.

To understand how our website is used through analytics. Legal basis: your consent, through your cookie settings.

To keep business, tax and accounting records. Legal basis: legal obligation.

To prevent fraud and keep our website and systems secure. Legal basis: legitimate interests.

To review job applications. Legal basis: legitimate interests, and steps taken before entering a contract.

Where we rely on legitimate interests, we have weighed our interests against yours and only proceed where your rights are not overridden. Allergy and dietary information counts as health data, so we only record it with your agreement and use it solely to look after you when you dine with us.

Who we share it with

We will never sell, rent or trade your personal information. We only share it with trusted providers who help us run the restaurant, the shop and the club, and only as much as they need to do their job. They are required to keep it secure and use it only on our instructions. These include:

- ResDiary, for online table bookings, the standby list and booking emails
- our website and online shop platform, for hosting the site and processing orders
- our payment providers, for taking payments for orders, deposits, vouchers and memberships
- Flub, for Orange Bird Club sign-ups and membership payments
- WhatsApp (Meta), for our members' WhatsApp booking line
- our delivery partners, for delivering shop orders and posted vouchers
- our email marketing provider, for sending newsletters and offers
- Google Analytics, for helping us understand how people use our website
- our accountants and professional advisers, for keeping our records and meeting legal requirements

We may also share information if the law requires it, for example with HMRC, the police or a court, or if the business, or part of it, is ever sold. In that case we will tell you in advance and give you the chance to ask for your information to be deleted.

Payments

All payments on our website, for shop orders, gift vouchers, booking deposits and club memberships, are handled by secure, PCI-compliant payment providers. We never see or store your full card details. We only receive confirmation that a payment has been made, along with basic details such as the last four digits of the card and the transaction amount.

How long we keep it

We only keep your information for as long as we need it for the reasons above:

- Booking information: 3 years from your last booking
- Shop orders, payments and gift voucher records: 6 years, to meet tax and accounting rules
- Orange Bird Club membership records: for the length of your membership, then 6 years
- Allergy and dietary notes: until you ask us to remove them, or 3 years from your last visit
- Marketing preferences: 5 years from your last interaction, or until you unsubscribe
- Job applications: 2 years
- WhatsApp messages: 12 months

After that, we securely delete it or make it anonymous so it can no longer identify you.

Keeping it safe

We use appropriate technical and organisational measures to protect your information, including secure, encrypted connections on our website, access limited to staff who need it, and providers who meet recognised security standards. No system is completely secure, but we work hard to protect your information and will act quickly if anything goes wrong.

Transfers outside the UK

Some of our providers store or process data outside the UK, for example in the European Economic Area or the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement, so your information is protected to the same standard as in the UK.

Marketing

We will only send you news, offers, events and product launches by email or SMS if you have said yes. You can change your mind at any time by clicking unsubscribe in any email, replying STOP to any SMS, or emailing reservations@theorangebird.co.uk. Unsubscribing from marketing will not affect messages about your bookings, orders or membership.

Cookies are small text files stored on your device when you visit a website. We use:

- Essential cookies, which make the website work, including your basket, checkout and account. These are always on.
- Analytics cookies, such as Google Analytics, which tell us how people use the site so we can improve it. These are only set if you accept them.
- Third-party cookies from providers such as ResDiary and our payment providers, which help their tools work on our site.

You can accept or decline non-essential cookies through the banner when you first visit, change your choice at any time through the cookie settings link at the bottom of the page, or block cookies in your browser settings. Blocking some cookies may stop parts of the site working properly.

Your rights

Under UK data protection law, you have the right to:

- access a copy of the personal information we hold about you
- correct information that is wrong or incomplete
- have your information deleted in certain circumstances
- restrict how we use your information in certain circumstances
- object to us using your information, including for marketing
- receive information you gave us in a commonly used format, or have it sent to another organisation
- withdraw your consent at any time where we rely on it, without affecting anything we did before

To use any of these rights, email reservations@theorangebird.co.uk. We may need to check your identity first, and we will respond within one month. There is normally no charge.

Children

Our website, shop and club are not aimed at children under 18, and we do not knowingly collect information from them online. Bookings that include children are made by an adult, who provides the booking details.

Changes to this policy

We may update this policy from time to time, for example when we add new products or services. The latest version will always be on this page, with the date it takes effect at the top. If we make significant changes, we will let you know by email or on the website.

For any questions about this policy or how we use your information:

the Orange Bird
78 Middlewood Road, Hillsborough, Sheffield S6 4HA
reservations@theorangebird.co.uk
0114 234 9330

Complaints

If you are unhappy with how we have handled your information, please get in touch with us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.