Version: 1.0
Effective date: 6 November 2026
Last updated: 6 November 2026
This combined policy applies to:
– tffhastings.co.uk: https://tffhastings.co.uk/ — main venue website, events and gallery;
– theforbiddenfruitbar.co.uk: https://theforbiddenfruitbar.co.uk/ — online store and related customer services; and
– booking-system.tffhastings.co.uk: https://booking-system.tffhastings.co.uk/ — booking and enquiry services.
Part A — Website terms of use and sale
1. Operator
The websites are operated by The Forbidden Fruit Bar Ltd trading as TFFHastings.
The Forbidden Fruit Bar Ltd trading as TFFHastings
Company number: 12772167
22 Grand Parade
St Leonards-on-Sea
East Sussex
TN37 6DN
United Kingdom
General enquiries: [email protected]
Data protection: [email protected]
Telephone: 01424 864160
2. Using the websites
You may use the sites for lawful personal purposes. You must not misuse them, attempt unauthorised access, introduce malicious code, scrape at a harmful rate, interfere with security, impersonate another person, submit unlawful content or infringe intellectual-property, privacy or other rights.
We may restrict access, remove content or suspend a service to protect users, systems or legal rights. We try to keep information accurate and services available, but maintenance, networks and third parties may cause interruption.
3. Accounts and security
Where an account is offered, provide accurate details, protect credentials and notify us of suspected misuse. You must not use another person’s account. Verification may be required before displaying orders, bookings or other personal records.
4. Venue information and events
Opening times, menus, line-ups, availability, accessibility and event details may change. Check current information before travelling. Admission and alcohol sales remain subject to licensing, capacity, age verification, venue rules and event-specific terms.
5. Online store orders
An order is an offer to buy. A contract is formed when we accept the order or dispatch the goods, depending on the checkout information. We may reject or cancel an order for stock, pricing, payment, fraud, licensing or delivery reasons and will refund sums taken where appropriate.
Prices include applicable UK VAT unless stated otherwise. Delivery, collection, product options and any restrictions are shown before checkout. You must supply accurate delivery and contact information.
WooPayments and Stripe process card payments. Their checks and terms may apply. We do not guarantee that every payment attempt will be authorised.
6. Cancellations, returns and refunds
Your statutory rights are not affected. For eligible distance purchases, cancellation rights and the process, return address, costs and deadlines are provided at checkout or in the store returns information. Legal exceptions may apply to personalised, perishable or sealed goods and to leisure services or event tickets for a specific date or period.
Faulty, misdescribed or unfit goods and services remain covered by UK consumer law. Contact us promptly with the order reference and relevant evidence. Do not return an item until you have checked the supplied instructions.
7. Tickets and dated services
Tickets and bookings for a particular date, period or live leisure activity may not carry a general 14-day cooling-off right. Event-specific cancellation, resale, transfer, admission and refund terms shown before purchase also apply. If we cancel or materially change a service sold directly by us, applicable refund and consumer rights will be honoured.
8. Bookings and private hire
The separate Booking Terms apply to booking requests. A private-hire enquiry does not reserve a date or create a contract. Specific hire terms, price and deposit must be separately confirmed.
9. Gallery uploads and public content
The main website may allow multiple photo submissions. The same ownership, permission, prohibited-content, moderation, licence, reporting and removal rules in the App Terms apply to website submissions. Public users confirm that they took the photos or have permission, every identifiable person has agreed, and TFFHastings may display approved content publicly.
Customer submissions are normally moderated. We may reject, edit a caption, resize, unpublish or remove content and may restrict abusive uploaders. Approved content can be viewed and downloaded by the public. Report concerns or request removal at [email protected] with the photo URL.
10. Intellectual property
Website software, branding, layout, text and original media are owned by or licensed to us. You may view pages and make normal personal copies but must not commercially reproduce, republish or exploit protected material without permission.
You retain ownership of uploaded content but grant the limited public-display licence described in the App Terms and at upload. Third-party marks and content remain their owners’ property.
11. Links and third parties
Links to payment, maps, social, ticketing or other services are provided for convenience. Their terms and privacy policies apply. We are not responsible for unrelated third-party acts, but this does not remove responsibility we have for products or services sold directly by us.
12. Liability
Nothing excludes liability for death or personal injury caused by negligence, fraud, mandatory consumer rights or liability that cannot legally be excluded. We are responsible for foreseeable loss caused by our breach or lack of reasonable care, but not unforeseeable loss or personal-use business losses. We are not responsible for events outside our reasonable control.
13. Changes, law and complaints
We may update the sites and these terms. Material changes affecting an existing order or booking will not be applied unfairly. The law of England and Wales applies, without removing mandatory rights and jurisdiction protections where you live. Contact us first to resolve a complaint.
Part B — Website privacy policy
14. Controller
The Forbidden Fruit Bar Ltd trading as TFFHastings is the controller for the processing described below. Data protection enquiries: [email protected].
15. Information collected
Depending on the service, we collect:
– name, email, telephone, address and account details;
– booking type, date, time, guest count, notes, amendments and cancellations;
– dietary categories, quantities and allergy or intolerance details;
– enquiry and private-hire messages and replies;
– store basket, order, delivery, product-option, payment-status and refund information;
– event or ticket information;
– gallery images, captions, descriptions, permission confirmation and moderation records;
– newsletter, cookie and marketing preferences;
– IP address, browser, device, security, analytics, cookie and diagnostic information; and
– communications, complaints, rights requests and privacy-safe audit records.
Full card details are processed by payment providers and are not supplied to us in readable form.
16. Purposes and lawful bases
We use information to provide accounts, orders, bookings, enquiries, gallery submissions and support; perform contracts and requested pre-contract steps; meet tax, accounting, licensing, safety, consumer and data-protection obligations; prevent fraud and secure services; maintain records and legal claims; and improve reliability.
We use consent for electronic marketing where required, non-essential cookies or analytics where required, public gallery publication where consent is appropriate, and explicit consent for special-category dietary data. We rely on legitimate interests only where proportionate and balanced against your rights.
17. Cookies and similar technologies
The sites use strictly necessary cookies for security, sessions, baskets, checkout, preferences and load management. With consent where required, they may use analytics, embedded content or marketing technologies.
Use the cookie banner or settings control to accept, reject or change non-essential cookies. Browser deletion does not withdraw a server-side marketing preference, so use the unsubscribe or preference control as well. A current cookie list should remain available through the website consent tool.
18. Gallery privacy
Approved gallery photos and captions are public. A photo may contain personal information about people shown. Upload only with their permission. Website security may process an IP address for rate limiting and create a one-way reference; raw IP addresses are not intentionally stored in the gallery audit.
Pending photos are retained until approved, rejected or withdrawn. Rejected images are deleted from active gallery storage. Published images remain until removed, permission is withdrawn where applicable, or they are no longer needed. Moderation records are normally retained up to 24 months after removal unless a complaint or claim requires longer.
19. Sharing and processors
Recipients may include authorised staff; WordPress and WooCommerce providers; our Plesk infrastructure and Cloudflare; Google/Firebase services; WooPayments, Stripe and banks; email, SMS and Microsoft 365 providers; EPOS Now where a connected service requires it; delivery and fulfilment providers; analytics, security and support providers; advisers, insurers and authorities.
We do not sell personal information. Providers must act under appropriate terms, though some payment, map, app-store and social providers act as independent controllers for their own services.
20. International transfers
Some providers process information outside the UK. Where no UK adequacy regulation applies, we use an appropriate safeguard such as the UK IDTA, UK Addendum to approved Standard Contractual Clauses or another lawful mechanism, with supplementary measures where appropriate.
21. Retention
– Customer accounts: while active, then deleted or anonymised after a valid request unless another lawful need applies.
– Orders, payments, refunds and accounting: normally 6 years from the end of the relevant accounting period.
– Booking contract records: up to 6 years where needed for contracts or claims.
– Dietary details: normally deleted or anonymised within 30 days after the booking unless an incident or law requires longer.
– Enquiries that do not proceed: normally up to 24 months after closure.
– Cookie and marketing consent records: for the life of the preference and a reasonable compliance period after change or withdrawal.
– Security and audit logs: normally up to 12 months unless an investigation or claim requires longer.
– Gallery content: as explained in section 18.
– Rights and complaint files: normally up to 6 years after closure where needed to demonstrate compliance.
22. Marketing
We send electronic marketing only where permitted by PECR and data-protection law. Consent requests are separate and optional where consent is relied upon. Every electronic marketing message will provide or be accompanied by an appropriate way to opt out. You may object to direct marketing at any time.
23. Security
Measures include HTTPS, Cloudflare edge protection, restricted WordPress and server administration, role controls, payment-provider tokenisation, file and input validation, rate limiting, monitoring, backups and privacy-minimised audit logging. No online service can guarantee absolute security.
24. Your rights and complaints
Depending on the circumstances, you may request access, correction, erasure, restriction or portability; object to legitimate-interest processing and direct marketing; and withdraw consent. Email [email protected]. We may verify identity and normally respond within one month.
You may complain to the Information Commissioner’s Office at ico.org.uk: https://ico.org.uk/, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
25. Children, changes and contact
Do not knowingly provide information about a child without appropriate authority. Website content is not permission to purchase alcohol or enter age-restricted events.
We may update this policy when services, providers or law change and will display the latest date. Contact information appears in section 1 and data-protection requests should be sent to [email protected].