What this website
knows about you.

Bookings are taken by DesignMyNight, in a booking window on our pages or on their own site. The window stays empty until you press one of our Book buttons, so nothing reaches DesignMyNight unless you ask for it. There you give your name, contact details and party size, which go to DesignMyNight and to us so we can hold your table, under their privacy policy and ours.

The site asks before it loads the Google map on the home page, because the map sets Google’s own cookies. The question comes from CookieYes, whose script loads from their servers on every page. Your answer is kept in a cookie on your device, cookieyes-consent, for a year, so you are not asked again, and a record of it is sent to CookieYes under a random number, so we can show what you agreed to. To change your answer, use Cookie settings at the foot of any page.

The home page carries a Google map of where we are. It stays empty until you allow it in the cookie question, because Google sets its own cookies and storage when it loads, under Google’s privacy policy. The address and the directions are written out beside it, so you do not need the map to find us.

The site counts no visits and runs no analytics. Our hosting company, 20i, holds the usual server logs, which include your IP address, to keep the site running and secure. We do not use them to count or follow visitors.

One small thing is kept on your device by the site itself. When the opening animation on the home page has played, that is noted in your browser’s session storage so it does not play again while the tab is open. It says nothing about who you are, and it is gone when you close the tab.

The table request on the home page and the enquiry forms on the private-hire and Christmas pages send what you type to us as an email so we can reply: your name and email, a phone number if you give one, the date and time, how many of you there are, the occasion, which space you have in mind, and anything you write in the notes. Anything you tell us about allergies or access is used only to plan your visit. The email leaves from our Gmail account, so Google carries it and keeps a copy in our sent mail. Google is based in the United States, so your message leaves the UK. UK law allows this because Google is signed up to the UK-US data bridge. On its way to our inbox it also passes through the companies that filter and host our email. The website keeps no copy.

If you enter our New Year’s Eve giveaway on Instagram or Facebook, we see your account name and your comment there. We use them only to run the giveaway: to draw the two winners on Tuesday 1 December, to message them, and to give the friends they name their 20%, as bar credit or off their tickets.

Booking, private-hire and other emails to us are kept for as long as we need them to look after you and then deleted. We never sell them, and the only other companies that handle them are the ones that carry and store our email and bookings for us.

Links to Instagram and Facebook take you to their own sites, where their own privacy policies apply.

Who we are, and what you can ask of us

Vault Bar + Kitchen, 41 King Street, Whalley, Clitheroe BB7 9SP, is responsible for what this page describes.

We use your details to take and look after your booking or your request, because that is what you asked us to do.

You can ask for a copy of what we hold about you, or for the details you gave us in a common digital file, and you can ask us to correct them, delete them or stop using them. It costs nothing, and we will answer within a month. Email bookings@vaultwhalley.co.uk, ring 01254 824 465 or write to us at 41 King Street, Whalley, Clitheroe BB7 9SP.

If you are unhappy with how we have handled your information, you have the right to complain to us, in any of those three ways, and we will confirm within 30 days that we have your complaint. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Last updated Monday 19 October 2026.