Effective date: 8 September 2026
Privacy Policy
Introduction
This privacy policy explains how Supper Melor, located at Cranbourn Street, Leicester Square, London WC2H 7JH, United Kingdom, collects, uses, and protects your personal data when you visit our website or interact with our restaurant services.
- Supper Melor is the data controller for personal data collected through this website.
- This policy applies to all visitors to the website and customers who make reservations or contact us.
- We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data We Collect
Information You Provide Directly
We collect personal data that you voluntarily provide when you make a reservation, contact us, or otherwise interact with our website.
- Name, email address, phone number, and any details you include in reservation requests or messages.
- Dietary requirements or special requests you share with us.
- Any other information you choose to provide.
Information Collected Automatically
When you visit our website, we automatically collect certain technical information about your device and browsing activity.
- IP address, browser type, operating system, and device information.
- Pages visited, time spent on pages, and referring URLs.
- This information is collected via cookies and similar technologies; see our Cookie Policy for details.
Information from Third Parties
We may receive personal data about you from third-party services that you use to interact with us, such as reservation platforms or social media.
- If you book through a third-party reservation service, they may share your booking details with us.
- We only receive data that is necessary to fulfil your reservation or respond to your inquiry.
How We Use Your Data
Reservation Management
We use your personal data to process and manage your restaurant reservations.
- Confirming your booking and sending reminders.
- Accommodating dietary requirements or special requests.
- Contacting you if there are changes to your reservation.
Customer Service
We use your data to respond to your inquiries, feedback, or complaints.
- Replying to emails or phone calls.
- Improving our services based on your feedback.
Legal Obligations
We may process your data to comply with legal requirements, such as financial record-keeping or responding to lawful requests from authorities.
- Maintaining accurate business records.
- Complying with health and safety regulations.
Marketing Communications
With your explicit consent, we may send you promotional emails about Supper Melor, including special events or menu updates.
- You can opt out at any time by clicking the unsubscribe link in any email or contacting us.
- We do not sell or rent your personal data to third parties for marketing purposes.
Legal Bases for Processing
We process your personal data under one or more of the following legal bases:
- Contract: Processing is necessary to fulfil a reservation or provide services you have requested.
- Consent: You have given clear consent for us to process your data for specific purposes, such as marketing.
- Legal obligation: Processing is necessary to comply with the law.
- Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our website, provided these interests do not override your rights.
Data Sharing and Disclosure
Third-Party Service Providers
We may share your personal data with trusted third-party service providers who assist us in operating our website and providing our services.
- Reservation platforms and booking systems.
- Email and communication services.
- IT and hosting providers.
- These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Legal Requirements
We may disclose your personal data if required by law, such as in response to a court order or a request from a regulatory authority.
- We will only disclose data that is necessary and proportionate to the request.
- We will notify you of such disclosures unless prohibited by law.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of the transaction.
- We will ensure that any successor entity agrees to protect your data in accordance with this policy.
- You will be notified of any such change in ownership or control.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.
- Reservation data is typically retained for 12 months after your visit, unless a longer period is required by law.
- Marketing consent data is retained until you withdraw consent.
- Financial records are retained for 6 years as required by UK tax law.
- After the retention period, personal data is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can request that we delete your personal data in certain circumstances.
- Right to restrict processing: You can ask us to limit how we use your data.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: You can withdraw consent at any time where processing is based on consent.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided in the Contact section below.
- We will respond to your request within one month of receipt.
- We may need to verify your identity before processing your request.
- If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and analyse site traffic.
- Essential cookies are necessary for the website to function, such as remembering your age verification.
- Analytics cookies help us understand how visitors use the site, but do not identify you personally.
- You can manage your cookie preferences through our Cookie Policy or your browser settings.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
- Encryption of data in transit and at rest.
- Access controls to limit data access to authorised personnel only.
- Regular security reviews and updates to our systems.
- Staff training on data protection and confidentiality.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
- The latest version will always be available on this page.
- We will indicate the effective date at the top of the policy.
- If changes are significant, we will provide a more prominent notice on our website.
Effective date: 8 September 2026
Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us: