Owner of St Canna's Alehouse James Karran issued a statement saying he was 'sorry for letting down the community' after abusing his position (Picture: Media Wales)

Owner of St Canna’s Alehouse James Karran issued a statement saying he was ‘sorry for letting down the community’ (Picture: Media Wales)

A pub landlord has apologised for stealing a customer’s phone number from the the Covid-19 Track and Trace system to send her a ‘creepy’ message.


James Karran, who owns St Canna’s Alehouse in Cardiff, has faced heavy criticism after it emerged he texted a woman who had shared her mobile with the pub like all other patrons.


In a text sent at 8.19pm on November 19, he said: ‘Just so you know you’ve got a super pretty face so you’re allowed to not wear a mask at the bar. Everyone else must wear one.’


But the following day, the customer’s partner sent the micropub owner a message accusing him of ‘absolutely awful behaviour’ and a data breach, Wales Online reports.


A post on Facebook said: ‘St. Canna’s Ale House thanks for deleting my review on your page. Last night my partner was a victim of GDPR breach.


‘She went into this establishment, filled out the Track and Trace without thinking anything of it.


‘She proceeded to order a drink at the bar, but the barman/owner James told her to remove the mask as he couldn’t hear her apparently, but only for this man to see what she looked like.




The woman got the unwanted text, which said she had a 'super pretty face' while she was still at the Cardiff pub (Picture: Media Wales)

The woman got the unwanted text, which said she had a ‘super pretty face’ while she was still inside the Cardiff pub (Picture: Media Wales)

‘Then [he] took her details from the Track and Trace sheet and messaged her illegally. My partner then left the establishment as soon as she had this creepy text from the owner/manager.’


Mr Karran then apologised to the couple and pleaded with them to not take their complaint further, adding: ‘I promise this will not happen again’.


His actions sparked backlash on social media but the pub did not issue a statement on the incident and its ‘tarnished reputation’ until Friday morning.


The landlord committed to a series of initiatives, including supporting the charity Women’s Aid in 2022 and implementing ‘safer spaces’ policies.






He then added: ‘I’m so unbelievably sorry. I’m sorry to the person I hurt directly by breaking their trust with GDPR and sorry to our community for letting you down.


‘I’m sorry too I didn’t say this earlier, I didn’t know what the best thing to do was. I feel so ashamed. I hope you can forgive me.’


But many people did not buy his apology and argued that Mr Karran should have taken responsibility for his actions weeks ago.


One user wrote: ‘Should have been written weeks ago, makes the situation worse that is only coming now, especially after the earlier statement as now sounds more as a “sorry I got caught” rather than a real heartfelt apology.


‘What your customers and your community need now is really change.’


Get in touch with our news team by emailing us at webnews@metro.co.uk.


For more stories like this, check our news page.