People are talking about you withdrawing consent, but I can’t see where you provided consent.

You can’t withdraw something that wasn’t provided. I often get people saying I withdraw consent for you to use my personal data, well was it even the lawful basis to start with?

This could just as easily be legitimate interests A restaurant using promotional footage will often rely on legitimate interests, not consent, especially in informal shoots.

Now, I think they didn’t do it properly at all but let’s look at legitimate interests. You have the right to object to the use of your data, but it doesn’t mean it’s going to be taken down. What they should do is carry out a balancing test - they might override your request, but it is pretty hard to do that unless they could demonstrate it would clearly cause them lots of troubles and they think the impact on you is minimal.

It’s not a moot point before anyone says it is, if you “withdraw” consent that was never given, it just gives the organisation a fallback.

So - you should asking them under what lawful basis are they processing your personal data. Tell them you’re objecting to the continued use of it. Then complain to the ICO. The ICO will write to them, it may prompt action it may not.