Privacy Notice

Who we are

The Food & Drink Society ("the Society", "we", "us") is based in County Louth, Ireland, and is the controller of the personal data described in this notice. We run membership, events, An Táin Taste Tours and the One More Chair editorial site.

What we collect, why, and our lawful basis

Personal data we collect, purpose and lawful basis
Area	Data	Purpose	Lawful basis
Membership account	Name, email, phone, location, food interests, dietary requirements, bio, membership status and dates.	To create and run your membership and member benefits.	Contract
Event bookings and tickets	Name, email, ticket type and quantity, dietary notes, special requests, booking reference, payment status.	To confirm and manage your place, contact you about the event, and meet food-safety and access needs.	Contract; consent for health-related dietary information
Tour bookings	Name, email, tour, quantity, booking reference, payment status.	To deliver the tour you booked.	Contract
Payments	Payment amount and status. Card details are entered directly with our payment processor and never stored by us.	To take payment and keep financial records.	Contract; legal obligation
Newsletter	Email address, first name, sign-up source and date.	To send recipes, event news and producer stories.	Consent (you can withdraw at any time)
Contact form and emails	Name, email and your message.	To reply to your enquiry.	Legitimate interests
Recipe submissions	Name, email, location, recipe, story and photograph.	To review and, if approved, publish your recipe with your name.	Consent
Website usage	Essential cookies and basic, privacy-friendly usage analytics.	To keep the site working and understand what is useful.	Legitimate interests

Who we share data with (processors and third parties)

We use trusted service providers to run the Society. They only process data on our instructions:

• Base44 (website platform, database, hosting and email delivery).

• Stripe (card payments). Stripe is also an independent controller for fraud prevention and its own legal obligations.

• Revolut (only if you choose to pay by Revolut transfer).

• Eventbrite (only where an event is ticketed through Eventbrite).

• Meta (Facebook and Instagram) when you follow links to our social channels; we also display public photos from our own pages.

We do not sell your personal data. Some providers may process data outside the EEA; where they do, appropriate safeguards such as Standard Contractual Clauses apply.

How long we keep data

• Membership records: for the length of your membership plus 6 years for accounting and legal claims, then deleted or anonymised.

• Bookings, tickets and payment records: 6 years from the transaction, to meet Irish tax and accounting rules.

• Dietary and health-related notes: deleted within 90 days after the event.

• Newsletter: until you unsubscribe, then your address is kept only on a suppression list so we do not email you again.

• Contact enquiries: 24 months from our last reply.

• Recipe submissions: until you ask us to remove them.

• Account deletion: if you delete your account in the app, your membership profile is removed straight away, apart from records we must keep by law.

Your rights under GDPR

You have the right to access your data, correct it, have it erased, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. Email us at thefoodanddrinksociety@gmail.com and we will respond within one month.

If you are unhappy with how we handle your data you can complain to the Data Protection Commission (Ireland) at www.dataprotection.ie.

Cookies

We use essential cookies so you can sign in and book. We do not use advertising or cross-site tracking cookies.

Children

Our membership and events are intended for adults aged 18 and over. We do not knowingly collect data from children.

Last updated: 22 October 2026