Privacy Policy

Introduction

This notice is to inform you of our policy regarding information that we may record or hold about you. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.

We take the protection of your privacy and confidentiality seriously. We understand that all visitors to our website are entitled to know that their personal data will not be used for any unintended purposes and will not fall into the hands of a third party.

We undertake to preserve the confidentiality of any information you provide to us, and trust that you will reciprocate.

Our policy complies with UK law accordingly implemented, including the Data Protection Act 1998 (DPA), Privacy and Electronic Communications Regulations 2003 (PECR) and the EU General Data Protection Regulations 2018 (GDPR).

The law requires us to tell you about our rights and our obligations to you in regard to the processing and control of your personal data. For further information in this respect, we would direct you to http://knowyourprivacyrights.org

1. Who are we?

Paladar Limited (“we”, “us”, “our”) is a UK-based company trading as Paladar, a Latin American restaurant located at 4–5 London Road, London SE1 6JZ, United Kingdom.

We are the data controller for personal data we collect about our guests and website users.

If you have any questions about this notice, you can contact us at info@paladarlondon.com and 020 7186 5555.

2. What data do we collect?

We may collect and process the following information:

• Identity details: name, title
• Contact details: email address, telephone number, birthday
• Booking details: date and time of booking, party size, occasion, special requests.
• Dietary and accessibility information: allergies, intolerances, access needs (only where you choose to provide it).
• Payment information: limited payment details processed through our payment providers (we do not store card numbers).
• Marketing preferences: your choices about receiving news and offers from us.
• Technical data (if you use our website/Wi‑Fi): IP address, device/browser type, and cookie data.

3. How do we collect your data?

We collect data in the following ways:

• Directly from you: when you make a reservation (online, by phone, or in person), buy a gift voucher, dine with us, contact us by email or social media, sign up to our mailing list, or take part in surveys or competitions.
• Through The Access Group:
  • a) when you make an online booking using the Access-Collins/Design My Night reservation system on our website or via their platform.
  • b) If you buy a gift voucher using the Access-Soda system on our website. 
  • c) If you buy a ticket to one of our events using the Access-Tonic system on our website or via the Design My Night platform.
• Automatically: via our website (cookies and similar technologies) and, in‑venue Wi‑Fi logs or CCTV for security.

4. What do we use your data for and what are the legal bases?

We use your personal data for the following purposes:

• To manage your reservations, seat your party, and provide food and drink services (performance of a contract).
• To contact you about your booking (confirmations, changes, cancellations) (performance of a contract).
• To record allergies and dietary requirements so we can help you choose suitable menu options (your explicit consent; you can ask us to remove this at any time).
• To take payments, issue refunds, issue gift vouchers/tickets and prevent fraud (performance of a contract, legitimate interests).
• To send you news and offers where you have opted in, or where we rely on our legitimate interests in promoting our business. You can opt out at any time through an unsubscribe link at the end of any email (consent or legitimate interests).
• To operate and improve our website, services, and customer experience, including analytics and service quality monitoring (legitimate interests).
• To comply with legal and regulatory requirements, including health and safety and licensing obligations (legal obligation).

5. Who do we share your data with?

We may share your personal data with:

• Service providers who help us run our business, such as:
• Collins (The Access Group) for online reservations and booking management, gift vouchers and tickets for events.
• Payment processors and banks to handle card transactions securely.
• IT, hosting, and email providers.
• Professional advisers (accountants, insurers, legal advisers) where reasonably necessary.
• Law enforcement or regulatory authorities where we are legally required to do so.

We do not sell your personal data to any third parties.

If any transfers of personal data outside the UK occur, we will ensure appropriate safeguards are in place (such as UK‑approved standard contractual clauses).

6. How long do we keep your data?

We keep your personal data only for as long as necessary for the purposes described:

• Reservation records: normally up to 24 months after your last visit, unless we need them for longer to resolve disputes or meet legal obligations.
• Marketing records: until you unsubscribe or we detect that you are no longer engaging with our communications for a reasonable period.
• Allergy/incident records and CCTV: for periods required for health and safety, insurance, or security purposes (typically 12 months, unless required longer by law).

7. Cookies and website tracking

Our website may use cookies and similar technologies to:

• Make the site work properly and keep it secure.
• Understand how visitors use our site (for example, via analytics).
• Remember your preferences and improve your experience.

Where required by law, we will ask for your consent before setting non‑essential cookies, and you can manage your cookie preferences through your browser or our cookie banner.

8. Your rights

Under UK data protection law, you have the right to:

• Access a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data completely in certain circumstances.
• Object to our processing, or ask us to restrict it, in certain circumstances.
• Withdraw your consent at any time, where we rely on consent.
• Request that we transfer your data to you or another provider (data portability) where technically feasible.

To exercise your rights, please contact us using the details in section 1.

You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are unhappy with how we have used your data.

9. Changes to this notice

We may update this privacy notice from time to time to reflect changes in how we process personal data or legal requirements.

ADDITIONAL INFORMATION

Downloads & Media Files

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine

downloads are available users are advised to verify their authenticity using third party anti-virus software or similar applications.

Contact & Communication With us

Users contacting this us through this website or via email do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use.

Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in 'The policy' above.

Email Mailing List & Marketing Messages

We operate an email mailing list program, used to inform subscribers about products, services and/or news we supply/publish. Users can subscribe through an online automated process where they have given their explicit permission. Subscriber personal details are collected, processed, managed and stored in accordance with this policy (above). Subscribers can unsubscribe at any time through an automated online service, or by emailing us at info@paladarlondon.com

Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

Our email marketing service provider is Access-Acteol and you can read their privacy policy here:

https://www.theaccessgroup.com/en-gb/privacy-notice/

External Website Links & Third Parties

Although we only look to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. External links are clickable text / banner / image links to other websites.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.

Social Media Policy & Usage

We have official profiles on social media platforms; users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.

Our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own

discretion and accept that doing so may publish content to your social media profile feed or page.

You can find further information about the social media privacy and usage policies of the social media companies here:

• https://en-gb.facebook.com/policy.php
• https://help.instagram.com/155833707900388
• https://twitter.com/en/privacy
• https://tripadvisor.mediaroom.com/UK-privacy-policy