Legal
Privacy & cookies notice
How we handle your personal data, what cookies we use, and your rights under the UK GDPR and Data Protection Act 2018.
Last updated: 17 June 2026
Who we are
This site is operated by Poached Restaurants Ltd (“we”, “us”, “our”), the company behind Junto in Beckenham and Poached in Bromley. We are registered in England and Wales and are the data controller for the personal information collected through this site.
You can contact us by phone on 020 3719 7469, or by post at 12a High Street, Beckenham BR3 1AZ.
What we collect, and why
Most of the personal data on this site is data you give us directly.
- Contact form details — your name, email address, optional phone number, the café you’re asking about, and your message. We use this solely to reply to you. Lawful basis: consent (UK GDPR Article 6(1)(a)).
- Visit counting — when you open a page we record which page it was, which site linked you here, whether you used a phone or a computer, and the town and country your connection appears to be in. Your IP address is used to work that out and is then discarded, never stored. No cookies are involved. Visits within a day are grouped by a code scrambled with a secret that is thrown away and replaced every night, so it cannot be traced back to you or matched from one day to the next. Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — understanding how the site is used, without tracking anybody.
- Cookies and similar technologies — see the cookies section below. Lawful basis: consent for non-essential cookies (PECR), legitimate interests for strictly essential ones.
We don’t buy lists, we don’t track you across the web, and we don’t profile you for advertising.
How long we keep it
Contact-form messages are kept for up to 12 months from the last reply, then deleted. If your enquiry becomes an ongoing arrangement (e.g. private hire), we retain related correspondence for as long as we need it for that purpose, and no longer than 7 years for accounting and tax reasons.
Visit records are deleted automatically after 12 months.
Who sees it
Only our small team. We use the following processors, each bound by their own UK GDPR-compatible terms:
- Email provider — to receive form submissions and reply to you.
- Hosting provider — to serve this site to your browser.
- Google Maps — only if you choose to load the embedded maps on the Contact page (see Cookies below).
- Embargo — our online ordering and loyalty provider. If you follow our Order online link you leave this website, and your name, contact details, order and payment are handled by Embargo under their own terms. Card details are processed by their payment provider and never reach this website.
We don’t sell or share your data with anyone for marketing purposes.
Cookies on this site
A cookie is a small text file stored by your browser. We use them sparingly. You can change your choice at any time using the “Cookie settings” link in the footer.
| Cookie | Purpose | Lasts | Type |
|---|---|---|---|
poached_consent |
Remembers your cookie choice so we don’t ask again. | 12 months | Essential |
| Google Maps (third party) | Set by Google only after you accept — to show the café location on an interactive map. | Up to 6 months | Non-essential |
Until you choose “Accept all”, the embedded Google Maps on our Contact page are not loaded and no Google cookies are set.
Ordering is handled on Embargo’s own website. When you follow an Order online link you leave this site, so any cookies Embargo sets are covered by their notice rather than this one.
Your rights
Under the UK GDPR and Data Protection Act 2018 you can ask us to:
- tell you what data we hold about you (right of access);
- correct anything that’s wrong (rectification);
- delete it (erasure / “the right to be forgotten”);
- restrict how we use it;
- send you a copy in a portable format;
- object to a particular use;
- withdraw consent at any time.
Call us on 020 3719 7469 to make a data rights request. We respond within one month.
If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.
Security
We use HTTPS across the site and limit access to personal data to staff who need it. We don’t store payment details — card payments in the cafés are handled by our PCI-compliant terminal provider.
Children
This site isn’t aimed at children under 13 and we don’t knowingly collect their data. If you’re under 13, please ask a parent or guardian before getting in touch.
Changes to this notice
We’ll update this page if anything material changes and update the “Last updated” date at the top. Significant changes will be flagged on the homepage for a fortnight.