Privacy Notice

BOH Management Partners Ltd provides remote back-of-house operations support to hospitality businesses.

Email

[email protected]
[email protected]

Telephone

+44 7983 974962

Website

bohmanagementpartners.com

Company number

17476458

Registered office

The Executive Suites, No. 182‑184
High Street North
East Ham
London E6 2JA

For data protection purposes, BOH Management Partners Ltd is the controller of personal information collected through our website and in connection with our own business activities.

Depending on how you interact with us, we may collect:

• Your name, job title, business name and business contact details.
• Information you provide through contact forms, email, telephone or booking requests.
• Information needed to arrange or carry out an operational review. This may include supplier invoices, pricing information, review listings or other operational documents you choose to share.
• Information about our communications and business relationship with you.
• Technical information about your visit to our website, such as IP address, device and browser details, and cookie or usage data, where enabled.

Please do not send personal or confidential information about staff, customers or other individuals unless it is necessary for the service and you are authorised to share it.

We use personal information to:

• Respond to enquiries and arrange consultations or operational reviews.
• Provide and manage services requested by you or your business.
• Review the business information and documents you choose to provide.
• Send service-related communications, proposals, invoices and account information.
• Maintain business records and meet legal, accounting and tax obligations.
• Protect our website, systems and business from misuse or fraud.
• Improve our website and services, where permitted.

We rely on the lawful basis that applies to each use of your information:

• Contract or steps before a contract: to respond to your request, prepare a proposal or provide agreed services.
• Legitimate interests: to manage our business, communicate with business contacts, secure our systems and improve our services, where those interests do not override your rights.
• Legal obligation: to keep records or comply with applicable laws.
• Consent: where required, such as for non-essential cookies or certain marketing communications. You can withdraw consent at any time.

We may share relevant information with service providers who help us run our business. They may process information only as needed to provide their services to us. They are:

• GoHighLevel (USA): our website, booking, forms, contact records, platform emails and venue portals.
• Namecheap Private Email (USA): our mailboxes, including the address for invoices.
• Google (USA): calendar and Meet; Drive and Sheets for each venue’s invoices and figures; dashboards; our Business Profile.
• Make (Czech Republic): collects invoices from the invoice address.
• OpenAI (USA): reads invoices and drafts review replies.
• Meta (USA and Ireland): Facebook reviews and WhatsApp calls.
• Cloudflare (USA): website security.
• Crunch (UK): accounting.
• Stripe: card payments, once online payment is live.

We may also disclose information where required by law, to professional advisers, or in connection with the sale or restructuring of our business. We do not sell personal information.

If you provide client or venue documents for an operational review, we use them to provide the agreed service and do not disclose them to other clients. We may use third-party software providers to process or store those documents. Where required, we will put appropriate data-processing terms in place.

Only staff a venue has named can send in invoices; invoices from anyone else are not processed. Each one is read automatically and saved to that venue’s own spreadsheet and folder. Anything unclear waits for a person to check, and each venue’s data is kept separate.

Replies to guest reviews are drafted automatically and are never posted until they have been approved.

Some service providers may store or process information outside the UK, including in the United States. Where this happens, we will use an applicable legal safeguard or other transfer mechanism required by UK data protection law.

We keep personal information only for as long as necessary for the purpose it was collected, including to provide services, manage our relationship, meet legal obligations and resolve disputes. Retention periods depend on the type of information and the circumstances.

• Supplier invoices: 7 years (for corporate tax compliance).
• Staff rotas: 3 years.
• Guest reviews: 2 years.

Depending on the circumstances, you may have the right to request access to your personal information, ask for it to be corrected or erased, restrict or object to certain processing, or request a portable copy. Where we rely on consent, you can withdraw it.

To exercise a right, contact [email protected]. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Our website uses the following cookies and similar technologies:

• __cf_bm (Cloudflare): strictly necessary. It protects the site from automated abuse and expires after 30 minutes.
• msgsndr_id (GoHighLevel, our website platform): a visitor identifier used for the platform’s visitor analytics, kept for one year.
• ghl_analytics_user_id (GoHighLevel, stored in your browser): visitor analytics.
• Cloudflare Web Analytics: page statistics, without cookies.
• Google Fonts: the booking calendar loads fonts from Google, which receives your IP address.

You can block or delete cookies in your browser’s settings.

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, so please contact us promptly if you believe information you have shared with us has been exposed or misused.

We may update this notice to reflect changes to our services, website or legal obligations. The latest version will be published on our website with its revision date.