McCarthys Bar and Restaurant Ltd
Trading as McCarthys Irish Bar & Deli
Last Updated: 9 October 2026
Introduction
McCarthys Bar and Restaurant Ltd ("McCarthys", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, place an order, make a table reservation, enquire about catering or private events, join our mailing list or loyalty programme, contact us, or otherwise interact with McCarthys Irish Bar & Deli.
McCarthys operates hospitality services in London, including locations at Tooting Broadway Market, Leicester Square Market Halls and Brixton.
For the purposes of this policy, McCarthys Bar and Restaurant Ltd is identified as the data controller responsible for the personal information covered by this policy, subject to confirmation of the legal entity operating each location and service.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ("PECR"), where applicable.
1. Information We Collect
Depending on how you interact with McCarthys, we may collect the following categories of personal information.
Personal and Contact Information
When you place an order, make a reservation, contact us or otherwise interact with our services, we may collect:
Your first and last name
Email address
Telephone number
Delivery address, where applicable
Billing information, where applicable
Order and reservation details
Special requests and dining preferences
Information submitted through contact, catering or event enquiry forms
Information contained in messages or enquiries you send to us
We only request personal information that is reasonably necessary for the relevant purpose.
Orders, Reservations and Events
When you use our online ordering, table reservation, catering or event services, we may collect:
Food and drink order details
Order history and transaction information
Reservation dates, times and party sizes
Collection or delivery preferences
Catering and private event requirements
Event booking and enquiry information
Special instructions, dietary requirements or allergy information you choose to provide
Certain dietary or allergy information may reveal health conditions, religious beliefs or other sensitive information. Where such information constitutes special category personal data, we will only process it where an appropriate lawful basis and additional condition under UK data protection law apply.
Payment Information
When you make a payment through our website or another online payment service, your payment may be processed by an authorised third-party payment provider.
We do not intentionally store your full payment card number or card security code on our own systems.
Payment providers may collect and process payment details, transaction information and other information required to complete purchases, prevent fraud and comply with legal obligations.
The relevant payment provider's own privacy policy may also apply to its processing activities.
Website and Device Information
When you visit our website, certain technical information may be collected automatically, including:
IP address
Browser type and version
Device type and operating system
Pages visited and website navigation
Date and time of visits
Referring websites
Interactions with menus, ordering tools and website features
Cookie identifiers and similar technical information
This information may be used to operate, maintain, secure, analyse and improve our website and services, subject to applicable consent requirements.
Customer Accounts, Reviews and Loyalty Programmes
Where available, we may collect information associated with customer accounts, guest reviews, promotional competitions and loyalty or rewards programmes, including the Snug Club.
This may include your contact details, communication preferences, account information, reviews, loyalty participation and relevant transaction history.
2. How We Collect Your Information
We may collect personal information when you:
Visit our website at www.mccarthysirishbar.co.uk
Place an online food or drink order
Make a table reservation or booking
Request catering services or enquire about private events
Contact us through our website, email, telephone or social media
Join the Snug Club or subscribe to marketing updates
Participate in promotions, competitions or loyalty programmes
Submit a review, rating or customer feedback
Visit or interact with one of our restaurant or bar locations
Create or use an online guest account, where available
Otherwise voluntarily provide information to us
We may also receive relevant information from service providers involved in delivering our services, including website providers, ordering platforms, reservation services and delivery partners.
3. Our Website and Popmenu
Our website, www.mccarthysirishbar.co.uk, is powered by Popmenu, a third-party restaurant website and digital hospitality platform.
When you use our website or its available services, personal information may be processed through Popmenu to support functions such as:
Website operation and maintenance
Online food and drink ordering
Table reservations and guest management
Customer contact and enquiry forms
Digital menus
Customer reviews and ratings
Marketing communications and customer engagement
Guest accounts and promotional features
Website analytics and performance monitoring
Information processed through Popmenu may include your name, contact information, order details, reservation information, preferences, account information and technical website usage information.
Popmenu may process information on our behalf as a service provider and may also process certain information for its own purposes, as explained in its privacy policy.
For further information, please review Popmenu's Privacy Policy:
https://my.popmenu.com/privacy
4. How We Use Your Personal Information
We use personal information only where we have an appropriate lawful basis and for legitimate business purposes.
Processing Food and Drink Orders
We may use your information to:
Receive and process orders
Confirm purchases
Prepare and provide food and drinks
Arrange collection or delivery
Contact you about your order
Process refunds, cancellations or complaints
Maintain appropriate transaction records
The lawful basis is generally performance of a contract or taking steps at your request before entering into a contract.
Table Reservations
We may use your information to:
Record and manage reservations
Confirm booking details
Contact you about changes or cancellations
Manage guest numbers and seating arrangements
Accommodate reasonable requests
The lawful basis is generally performance of a contract or taking steps at your request before entering into a contract.
Catering and Private Events
When you enquire about catering, group bookings or private events, we may use your information to:
Respond to your enquiry
Discuss event requirements
Prepare quotations
Arrange catering services
Confirm bookings and event details
Communicate about event arrangements
Manage payments and associated administration
The lawful basis may be performance of a contract, steps taken before entering into a contract, or our legitimate interests in responding to business enquiries.
Customer Service
We may use your information to respond to enquiries, complaints, feedback and other communications.
The lawful basis may be performance of a contract, compliance with a legal obligation or our legitimate interests in providing customer service.
Business Administration and Security
We may use personal information to:
Maintain business and financial records
Manage accounting and taxation
Prevent fraud and unauthorised transactions
Protect our website, systems, staff and customers
Resolve disputes
Enforce our terms and conditions
Comply with legal and regulatory requirements
Improve the operation of our business
The lawful basis may be our legitimate interests, performance of a contract or compliance with a legal obligation, depending on the circumstances.
5. Marketing and the Snug Club
McCarthys may offer customers the opportunity to receive marketing communications, restaurant news, event information and promotional offers, including through the Snug Club.
These communications may include:
Special offers and promotions
New menu items
Upcoming events and entertainment
Restaurant news and announcements
Loyalty rewards and customer benefits
New location announcements
Catering and private event information
Where required by law, we will obtain your consent before sending marketing communications.
In certain circumstances, UK law permits marketing to existing customers under the soft opt-in rules, provided the applicable conditions are met and customers are given an opportunity to opt out.
You can unsubscribe from marketing emails at any time using the unsubscribe link included in the communication or by contacting us.
Where marketing text messages are offered, we will comply with applicable consent and opt-out requirements.
We may retain limited information about your marketing preferences and unsubscribe requests to ensure that your choices are respected.
6. Legal Bases for Processing
Under UK GDPR, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on the following lawful bases.
Contract
Where processing is necessary to provide products or services you have requested, including food orders, table reservations, catering bookings or event arrangements.
Legal Obligation
Where we need to process information to comply with applicable legal requirements, including tax, accounting and regulatory obligations.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Examples may include responding to customer enquiries, improving our services, maintaining security, preventing fraud and managing business operations.
Consent
Where we ask for your consent, including for certain marketing communications, non-essential cookies or the processing of certain sensitive information.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where special category personal data is processed, we will also identify an appropriate additional condition under Article 9 of UK GDPR.
7. Who We Share Your Information With
We do not sell customer personal information.
We may share personal information with trusted third parties where necessary to provide our services, operate our business or meet legal obligations.
These may include:
Popmenu, our website and digital hospitality platform provider
Payment processing providers
Online ordering and delivery partners, where applicable
Reservation and booking service providers
IT, website hosting and technical support providers
Email and SMS communication providers
Marketing and customer engagement service providers
Accountants, legal advisers and insurers
Government, regulatory or law-enforcement authorities where required by law
Where third parties process information on our behalf, we seek to ensure appropriate contractual and data protection arrangements are in place.
Some third parties may act as independent data controllers for particular processing activities. Their own privacy policies may apply.
8. Payment Processing
Payments made through our website or associated ordering services may be processed using secure third-party payment infrastructure.
When you make a payment, the relevant payment provider may process:
Payment card or digital wallet information
Transaction amounts
Transaction dates and times
Payment confirmation details
Information required for fraud prevention and regulatory compliance
We do not intentionally store full payment card details or card security codes directly on our own systems.
Payment processing is subject to the relevant provider's privacy and security arrangements.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide functionality, remember preferences, support online ordering, analyse website performance and improve the customer experience.
Cookies may include:
Essential Cookies
These cookies support core website functions, including navigation, security, account access and ordering functionality.
Functional Cookies
These may remember settings, preferences or information needed to improve website usability.
Analytics Cookies
These may help us understand website traffic, visitor interactions and website performance.
Marketing Cookies
Where used, these may help measure advertising performance or support relevant promotional communications.
Some cookies and similar technologies may be provided by Popmenu or other third-party services.
Where required by UK law, we will obtain consent before placing or accessing non-essential cookies or similar technologies.
You may manage your cookie preferences through any available website cookie controls and through your browser settings.
Disabling certain cookies may affect website functionality.
10. Website Analytics
We may use website analytics and similar technologies to understand how customers interact with our website and services.
Analytics information may include:
IP address and approximate location
Browser and device information
Pages visited
Website navigation and interaction data
Time spent on pages
Interactions with menus, ordering tools and website features
Our website platform may also support session-replay or similar diagnostic technologies that record website interactions to identify technical issues and improve the customer experience.
Where these technologies involve non-essential storage or access to information on your device, we will obtain consent where required.
11. Customer Reviews and User-Submitted Content
Our website may allow customers to submit reviews, ratings, photographs or feedback about McCarthys and our menu items.
Where you voluntarily submit content intended for public display, that content may be visible to other website visitors.
Depending on the functionality used, your display name or other profile information may appear alongside your review.
Please avoid including personal or sensitive information in public reviews that you do not wish others to see.
Reviews and related content may be processed through Popmenu or another service provider supporting these features.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information, its purpose and applicable legal obligations.
For example:
Order and transaction records may be retained to meet accounting and tax requirements.
Reservation and event information may be retained as necessary to manage bookings and resolve enquiries.
Customer service communications may be retained for an appropriate period to manage complaints or disputes.
Marketing information may be retained while you remain subscribed, subject to applicable retention practices.
Certain information may be retained where necessary to establish, exercise or defend legal claims.
When personal information is no longer required, we will securely delete or anonymise it where appropriate.
13. Data Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
These measures may include appropriate access controls, secure systems, staff procedures and contractual safeguards with service providers.
Where payment information is processed by a third-party payment provider, payment security is managed through that provider's payment infrastructure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
14. International Data Transfers
Some of our third-party service providers, including website, hosting, payment or technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that the transfer complies with applicable UK data protection requirements.
Where required, this may involve relying on UK adequacy regulations or implementing appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses or another lawful transfer mechanism.
15. Your Data Protection Rights
Under UK data protection law, you may have the following rights in relation to your personal information:
Right of access: Request access to personal information we hold about you.
Right to rectification: Request correction of inaccurate or incomplete information.
Right to erasure: Request deletion of your personal information in certain circumstances.
Right to restriction: Request restriction of certain processing activities.
Right to object: Object to certain processing, including processing based on legitimate interests and processing for direct marketing.
Right to data portability: Request certain information in a structured, commonly used and machine-readable format.
Right to withdraw consent: Withdraw consent where processing relies on consent.
Rights relating to automated decision-making: Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are subject to conditions and exceptions under applicable law.
To exercise your rights, please contact us using the contact information provided below.
We may need to verify your identity before responding to certain requests.
We will normally respond to valid requests within one month, subject to permitted extensions under UK data protection law.
16. Direct Marketing Preferences
You can opt out of receiving direct marketing communications from McCarthys at any time.
You may do this by:
Clicking the unsubscribe link in a marketing email
Using the applicable opt-out instructions in a marketing text message
Updating your communication preferences, where available
Contacting us directly
Opting out of marketing communications will not prevent us from sending essential service messages, such as order confirmations, booking updates or information relating to an existing transaction.
17. Children's Privacy
Our website and services are intended primarily for customers seeking restaurant, hospitality and related services.
We do not knowingly collect personal information from children in circumstances where the required consent or other lawful basis is absent.
Where age-restricted products or services are involved, we may need to verify eligibility in accordance with applicable law.
If you believe that a child has provided us with personal information inappropriately, please contact us so that we can review the matter and take appropriate action.
18. Third-Party Websites and Services
Our website may contain links to third-party websites and services, including:
Social media platforms
Online delivery providers
Payment services
Event and booking services
Other external websites
We are not responsible for the privacy practices or content of independently operated third-party websites.
We recommend reviewing the privacy policies of any third-party services you use.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal obligations.
When we make changes, we will update the "Last Updated" date at the top of this policy.
Where required by law, we will provide additional notice of significant changes.
We recommend reviewing this page periodically to remain informed about how we protect your personal information.
20. Contact Us
If you have any questions about this Privacy Policy, would like to exercise your data protection rights or have concerns about how your personal information is handled, please contact:
McCarthys Bar and Restaurant Ltd
Trading as McCarthys Irish Bar & Deli
Website: https://www.mccarthysirishbar.co.uk/
Our restaurant locations include:
Tooting Broadway Market
Broadway Market
London, SW17 0RJ
Leicester Square Market Halls
20–21 Leicester Square
London, WC2H 7JX
Brixton
443 Coldharbour Lane
London, SW9 8LF
We aim to respond to privacy enquiries and valid data protection requests within the applicable legal timeframe.
21. Complaints
We take privacy concerns seriously and encourage you to contact us if you have any questions or complaints about how we handle your personal information.
We will endeavour to investigate and resolve your concerns appropriately.
You also have the right to lodge a complaint with the UK's independent data protection regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
The ICO provides information about your data protection rights and how to make a complaint.
You may contact the ICO if you believe that your personal information has not been handled in accordance with applicable data protection law.