Who we are
Bridge Bagels (“we”, “us”) is a trading name of Bridge Foods Limited (Company No. 17332968), a pre-launch bagel shop based in Cambridge, United Kingdom. For UK GDPR purposes Bridge Foods Limited is the data controller of personal data collected through bridgebagels.com.
Companies House: https://find-and-update.company-information.service.gov.uk/company/17332968
Contact the controller at hello@bridgebagels.com or 01223 857101.
What we collect
Depending on how you use the site, we may process:
- Email address — when you join the founding-member list, claim a flyer or other promotional credit, activate student pricing with a UK university email, leave an optional survey or order-feedback email, or apply for a role.
- Name and mobile number — when you claim promotional credit (for example via /flyer) or student 10% off (via /student, along with your graduation year) so we can attach loyalty / a Square customer profile and contact you about the offer.
- Survey answers — bagel preferences, visit habits, dietary notes, postcode area, and free-text comments you choose to share. We may publish selected free-text comments on our website attributed as first name + last initial (for example Alex M.), which is not readily personally identifiable.
- Order feedback — optional name and email, demographics (gender, age band, education, continent), star ratings, and free-text comments you leave at /feedback. Demographics are research-only; prefer-not-to-say is always available. We may publish 5-star comments on our website as first name + last initial. Completing an order-linked review may earn loyalty Stars, and confirming a Google review may earn an additional one-time Stars grant (see the feedback form).
- Careers applications — name, email, phone, work history, references, and any CV or documents you upload.
- Media / likeness releases — name, email, signature, and (if under 18) parent or guardian name, when you agree we may use photos or video of you in our marketing.
- Referral codes — if you join the list or take the survey, we generate a personal referral code/link for you, and record the email address of anyone who signs up through it so we can credit your £5 store credit.
- Attribution tag — a short first-party cookie value (for example which share link you used) when you arrive via a tagged URL.
- Basic visit data — page path, referrer, and attribution tag, stored so we can understand which channels bring people to the site.
- Technical data our hosting provider may log (IP address, user agent, timestamps) as part of operating the website.
Why we use it (purposes & lawful bases)
- Founding-member list & launch updates — consent (you opted in). Lawful basis: UK GDPR Art. 6(1)(a).
- Promotional / flyer credit — performance of that promotional arrangement and our legitimate interests in running and preventing abuse of the offer. Art. 6(1)(b) / 6(1)(f).
- Student discount — verifying you own a university email, keeping a sign-in so we can apply 10% off bagels in our shop (and at POS via the Students group); legitimate interests / performance of that offer. Art. 6(1)(f) / 6(1)(b).
- Survey & product research — legitimate interests in designing the shop, menu, and location; or consent where you give an email for follow-up. Publishing anonymised quotes (first name + last initial) is part of that research/marketing interest, disclosed on the survey form. Art. 6(1)(f) / 6(1)(a).
- Order feedback — legitimate interests in improving the product and service (including optional demographic research) and showing social proof. When a buyer submits feedback we can email the team so we can follow up, grant loyalty Stars once per order, and publish 5-star comments as first name + last initial as disclosed on the form. Art. 6(1)(f).
- Recruitment — steps prior to a contract / legitimate interests in hiring. Art. 6(1)(b) / 6(1)(f).
- Photo & video marketing releases — consent to use your image/likeness in our marketing. Art. 6(1)(a).
- Referral programme — running the £5 store-credit scheme you opt into by sharing your link; legitimate interests / performance of that arrangement. Art. 6(1)(f) / 6(1)(b).
- Site analytics & attribution — legitimate interests in measuring reach and improving the site. Art. 6(1)(f). Non-essential cookies are described in our Cookie Policy.
- Transactional messages (welcome, survey thank-you, application confirmation) — necessary to respond to your request. Art. 6(1)(b) / 6(1)(f).
We do not sell your personal data. We do not use your email for third-party advertising.
Email marketing
If you join the list, we may email you about opening news, founding-member perks, menu previews, and related Bridge Bagels updates. That is direct marketing under the Privacy and Electronic Communications Regulations (PECR).
Every marketing email includes a one-click unsubscribe link. Clicking it removes you from the list immediately and confirms on-page; you can optionally tell us why you left. You can also email us at any time to opt out. We keep a suppression record so we do not contact you again by mistake.
Transactional emails (for example confirming a signup or application) are not marketing, but we keep them to a minimum.
How long we keep it
- Founding-member emails — until you unsubscribe, or we close the list after launch and decide a shorter retention period; we will then delete or anonymise unused contacts.
- Survey responses — while useful for opening decisions, then anonymised or deleted (target: within 24 months of opening unless you ask sooner).
- Unsuccessful careers applications — normally deleted within 12 months unless you ask us to keep them for future roles.
- Media / likeness releases — kept while we may still use the related content, or until you withdraw consent and we no longer need the record to show what was agreed; then deleted or anonymised.
- Referral codes & credit records — kept while the credit programme runs and until redeemed at launch, then deleted or anonymised.
- Flyer / promotional claim records — kept while needed to enforce one-claim-per-person rules and run the loyalty programme, then deleted or anonymised.
- Student discount records (university email, mobile, graduation year, verification time) — kept while the offer runs and to prevent abuse, then deleted or anonymised.
- Visit / attribution logs — aggregated or deleted on a rolling basis (typically within 24 months).
- Suppression / unsubscribe records — kept as long as needed to honour your opt-out.
Your rights
Under UK GDPR you can ask us to: access your data, correct it, erase it, restrict processing, object to processing (including direct marketing), and receive a portable copy where applicable. Where we rely on consent, you can withdraw it at any time.
Email hello@bridgebagels.com with the subject “Data request”. We aim to respond within one month. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Security
We use access controls, HTTPS, and provider security features appropriate to a small pre-launch business. No method of transmission or storage is perfectly secure — if we become aware of a breach affecting your rights, we will notify you and the ICO where required.
Children
The site is aimed at adults interested in our shop and jobs. We do not knowingly collect children’s data for marketing. If you believe we have, contact us and we will delete it.
Changes
We may update this policy as the business opens or our tools change. The “Last updated” date at the top will change when we do. Material changes affecting how we use list emails will be called out by email or a notice on the site where practical.