Privacy & Cookie Policy

Last updated: 27 October 2026

1. Who we are

This policy says what The Anchor does with your personal information when you use this website, book with us, enquire about an event or apply for a job.

Orange Jelly Limited, a small business based in Stanwell Moor, is the business responsible for your personal information. Where this policy says "we", "us" or "our", it means The Anchor and Orange Jelly Limited.

To ask anything about your information, email [email protected] or call 01753 682707.

2. What we collect

What you give us

• When you book a table: your name, mobile number and email address, the date, time and how many of you there are, and anything you tell us about the booking: allergies, dietary needs, whether you need an accessible table, high chairs, a celebration, and any notes.
• When you book an event: your name, mobile number and email address, how many places you want, whether you'd like food, and any notes. Where tickets need them, we also ask for the name of each person coming and their answers to the event's questions, such as allergies, and you can add their own mobile number. Please only add people who are happy for you to share their details with us.
• When you book airport parking: your name, mobile number and email address, your dates, and your car's registration, make, model and colour.
• When you enquire about private hire or a Christmas party: your name, your contact details and what you tell us about your event.
• Your contact choices: what you've said about marketing by email, text and WhatsApp, when you said it, and which version of our wording you were shown.
• Messages: the texts and emails between you and us.

Job applications are covered in section 3.

What we collect automatically

Like every website, ours receives your IP address and details of your browser each time you load a page. We use the IP address to limit repeated requests and stop automated abuse.

When you book a table on our website, we record which of our web pages and adverts you came from. We take this from the web address of the page you book on, not from cookies, and we keep it with your booking.

When you book an event on our website, we record which of our web pages you booked from, and we keep it with your booking.

The links in our texts and emails are our own short links. When you tap one, our booking system records the tap: the time, your IP address, the town or city, region and country it points to, your browser and device, and the page you came from. Each link in a marketing email also carries a code that tells us which email it came from and who we sent it to, so a booking you make afterwards can be linked to that email.

The emails we send through Resend record whether they were opened.

Our car park is covered by CCTV. We keep the footage for 1 month. To ask about footage, email [email protected].

3. Job applications

When you apply through our Join Our Team page, we collect your name, email address and phone number, the role you want, your answers to the questions on the form, and your CV if you add one.

Your application and CV are kept in our booking and management system. If that system can't take your application, it's emailed to our manager instead, with your CV attached.

We use an AI service, OpenAI, to help us read applications. It's sent the text of your CV and your answers, and it gives us back a summary and a score. Your CV usually has your name and contact details in it, so those go too. It's there to help us, not to decide: a person reads every application and makes every decision.

We email you to say your application has arrived. We only text you about it if you tick the box for texts. If we invite you to an interview or a trial shift, it goes in our calendar with your name and contact details.

If you don't get the job, we delete your CV and your contact details 12 months after you apply. We keep a short record for good: your name, the role, the date, the outcome and the reason.

That's the same if you tick the box asking us to keep your details for future roles: we keep them for 12 months, then delete them.

4. How we use your information

We use it to:

• Take and look after your booking or enquiry
• Look after each guest at an event: their answers go on our kitchen and door lists, so the kitchen knows about any allergy. A guest's own mobile number is only used to reach them about that booking, and never for marketing
• Send booking confirmations, reminders, payment links, waitlist updates, and booking changes by phone, email, SMS, or WhatsApp where relevant
• Send you news about the pub: what is on, new menus, offers, and anything that is changing
• See how the website is used and fix what isn't working
• Answer your questions
• Stop automated abuse of our forms

If you have booked with us or given us your email address, we may email you news about the pub. Every email has an unsubscribe link, and using it stops the news straight away without affecting your booking confirmations or reminders. You can stop marketing texts by replying NOEVENTS, or STOP to stop texts altogether.

Guest communication consent is recorded against the wording version guest-comms-consent-v6, separately for email, SMS, and WhatsApp. WhatsApp marketing is only ever sent to people who have asked for it, and clicking a WhatsApp contact link does not by itself opt you in to WhatsApp messages or marketing.

5. Cookies and browser storage

Cookies are small files a website keeps in your browser. Browsers also have their own storage, which we use for a few things. This is all of it.

Always on

anchor-cookie-consent is a cookie of our own. It remembers your cookie choice for a year, so we don't ask you again on every page.

We also keep a few notes in your browser's storage so that a pop-up or banner you've closed stays closed, the Christmas page knows you've already sent an enquiry, and the private hire page remembers the room you picked. They stay in your browser, they aren't sent to us, and they say nothing about who you are. Their names are christmas_2026_lightbox_seen, christmas_enquiry_submitted, christmas_enquiry_lightbox_last, event_banner_dismissed_until, event_banner_session_show, promo_private_hire_2026_dismissed_until, promo_private_hire_2026_disabled, sunday_lunch_booking_prompt_dismissed, sunday_lunch_exit_intent_shown, plane_spotting_booking_prompt_shown and anchor-private-hire-selected-space.

Our forms have a security check run by Cloudflare, and payments are taken by PayPal. Each loads in your browser when it's needed and may set its own cookies to do its job.

Types of cookies you can choose

Analytics cookies

These are off unless you accept them. If you do, we load Google Tag Manager, which runs Google Analytics and Microsoft Clarity. They show us which pages people visit and how they use them, so we can make the website better.

• Google Analytics gives your browser an identifier in cookies named _ga and _ga_ followed by a code, which last up to 400 days. We also send it a record of what you do on the site, such as starting or finishing a booking, from your browser and from our own server. That record doesn't include your name, your contact details or your booking reference.
• Microsoft Clarity gives your browser an identifier in cookies named _clck, which lasts a year, and _clsk, which lasts a day. It records how you move around a page: where you scroll and what you click.

Until you accept, neither is loaded and we send nothing to Google Analytics or Clarity.

We measure how fast our pages load and whether they jump about while loading, so we can fix problems. This uses no cookie and isn't linked to you: we record the page address, whether the screen is phone, tablet or desktop size, the timings, and which part of the page moved. Our website host, Vercel, keeps those records for about 30 days. To stop it, switch analytics cookies off in Cookie settings at the bottom of any page.

Marketing cookies

If you accept marketing cookies, this is what we do so we can tell which of our adverts work:

• We remember the advert or link that brought you to our website for up to 90 days, in a cookie and in your browser's storage. This includes the advert's campaign tags and the click reference that Facebook, Instagram or Google added to the link.
• When you book a table or an event, we keep those campaign tags and the first page you arrived on with your booking.
• We tell Meta, the company behind Facebook and Instagram, about the booking so it can match it to an advert you saw or clicked. This goes from your browser and from our own systems. It includes Meta's cookie identifiers, your IP address and browser type, the page address, your booking reference, what you booked and its value. It also includes your email address and phone number in a scrambled form (called hashing), never as readable text. We never send Meta your name.
• Our marketing system deletes the click reference, Meta's identifiers, your IP address, your browser details and the scrambled contact details after 7 days. It deletes the rest of its record of the booking after 24 months.
• LinkedIn's advertising tag also loads on our pages, which tells LinkedIn you visited our website.
• If analytics cookies are on as well, Google Analytics passes what it collects about your visit to Google's advertising services.

These are off unless you accept them. The cookies are anchor-booking-attribution (ours), _fbp and _fbc (Meta), li_fat_id and others set by LinkedIn, and Google's advert click cookies, whose names start _gcl_. Meta's and LinkedIn's tags are loaded by Google Tag Manager, so they only run if you've accepted analytics cookies as well.

If you don't accept marketing cookies, we don't store the advert record in your browser and we send nothing about you to Meta or LinkedIn. You can change your mind at any time. Choose Cookie settings at the bottom of any page. If you switch marketing cookies off, we delete the advert record from your browser.

Maps and videos

The maps on our pages come from Google Maps, and the videos on some event pages come from YouTube. We only load one when you press the button to show it. When you do, Google receives your IP address and may set its own cookies.

Managing cookies

If you switch analytics or marketing cookies off, we delete them from your browser. We can't delete the cookies that Google, Microsoft, Meta and LinkedIn keep for their own websites. You can clear those in your browser settings.

We also clear what those tools keep in your browser's storage. You can block or clear cookies in your browser settings too, and the website still works without them.

6. Who else handles your information

These companies handle your information for us, each for the job listed:

• Cloudflare - Delivers our website and runs the security check on our forms. It sees your IP address and details of your browser.
• Vercel - Hosts our website and our booking system, and keeps the page speed records.
• Supabase - The database behind our booking system. Bookings, customer records, messages and job applications, CVs included, are kept there.
• Twilio - Sends our texts, and WhatsApp messages if you've asked for them. It gets your mobile number and the message.
• Resend - Sends our marketing emails, and tells us what happened to each one, such as delivered, opened or bounced. It can also send our booking emails.
• Microsoft - Sends our emails about job applications through Microsoft 365, and can send our booking emails. Microsoft Clarity runs only if you accept analytics cookies.
• PayPal - Takes payments for deposits, event tickets and airport parking. You pay PayPal directly, so your card details never reach us.
• Google - Our Google calendar holds private hire bookings and job interviews, with the name and contact details for each. Google Maps loads when you ask for a map. Google Analytics and Google Tag Manager run only if you accept analytics cookies.
• OpenAI - Reads job applications to summarise and score them. See section 3.
• Meta (Facebook and Instagram) - Advert measurement, only if you accept marketing cookies
• LinkedIn - Advertising tag, only if you accept marketing cookies
• Upstash - Counts requests to our booking system so we can block abuse. It sees your IP address.

Several of these companies are based outside the UK, mostly in the United States, so your information may be handled there.

7. How long we keep it

• Customer records and bookings: we don't delete these automatically. You can ask us to delete yours. See section 9.
• Texts and emails: we remove the content of a message after 24 months and keep a note that it was sent.
• Food pre-orders: two years after the date of the booking, we delete each person's name, what they ordered and any dietary note.
• Event guest answers and mobile numbers: 90 days after the event, we delete each guest's answers to the event's questions and their own mobile number. Their names stay with the booking.
• Your contact choices: we keep the choice. After 24 months we remove the web page and browser details we noted when you made it.
• Job applications: see section 3.
• CCTV footage: 1 month.
• Cookies, the advert record and page speed records: see section 5.

8. Keeping it safe

This website is only served over an encrypted connection. Payments are taken by PayPal, so we never see or store your card details.

9. Your rights

Under UK data protection law, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure of your data
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw email, SMS, or WhatsApp marketing consent at any time

To use any of them, email [email protected].

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

12. Complaints

If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/concerns