This policy explains how Zufa Lebanese Cuisine (“Zufa”, “we”, “us”) collects, uses and protects personal data when you use zufa.co.uk (the “Site”), contact us or book with us. We are the data controller. Our address is 308 Uxbridge Road, Hatch End, London HA5 4HR and you can reach us at info@zufa.co.uk or 0208 421 6821.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Information we collect
- Enquiry forms. When you use our catering, private hire or contact forms we collect your name, email address, phone number (optional), event details and your message so that we can respond.
- Table bookings. Reservations are handled by SevenRooms, our booking provider. When you book, SevenRooms collects the details needed to hold your table (name, contact details, party size, date and any notes) and shares them with us. SevenRooms’ own privacy policy also applies.
- Technical data. Our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and to keep the Site running. These logs are retained for a short period only.
- Analytics (only with your consent). If you accept analytics cookies we use Google Analytics to understand how the Site is used — pages visited, device type, approximate location. IP addresses are not stored by Google Analytics 4 and we do not use this data for advertising.
How we use your information and our lawful bases
- To answer your enquiry and arrange catering, events or bookings — performance of a contract / steps prior to a contract.
- To keep the Site secure and reliable — legitimate interests.
- To measure and improve the Site with analytics — consent, which you can withdraw at any time.
- To meet legal and accounting obligations — legal obligation.
We do not sell your personal data and we do not send marketing emails unless you have explicitly opted in.
Who we share data with
We use a small number of trusted processors who act on our instructions: our website hosting provider, our transactional email provider (to deliver enquiry forms to our inbox), SevenRooms (reservations) and, if you consent, Google (analytics). Takeaway orders placed through Deliveroo, Uber Eats or Just Eat are governed by those companies’ privacy policies.
Some providers may process data outside the United Kingdom. Where they do, transfers are protected by UK-approved safeguards such as the International Data Transfer Agreement or adequacy regulations.
How long we keep it
Enquiry emails are kept for up to 24 months so we can follow up on repeat events, then deleted. Booking records are retained by SevenRooms according to their policy and by us for as long as needed for our accounting obligations. Analytics data is retained for 14 months.
Cookies
The Site uses as few cookies as possible:
- Strictly necessary. A single browser storage entry remembers your cookie choice so we don’t ask again. No consent is required for this.
- Analytics (optional). Google Analytics cookies (
_ga,_ga_*) are set only after you click “Accept analytics”. They expire after 13 months. - Third-party. The SevenRooms booking widget on our bookings page may set its own functional cookies when you interact with it.
You can change your mind at any time: . You can also block cookies in your browser settings; the Site will keep working.
We honour the Global Privacy Control signal — if your browser sends it, analytics is switched off automatically.
Your rights
Under UK GDPR you have the right to access, correct, erase or restrict the processing of your personal data, to object to processing based on legitimate interests, to data portability and to withdraw consent. To exercise any right, email info@zufa.co.uk. We will respond within one month.
If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.