Privacy notice

Who to contact

This notice covers the Yaowarat Leeds restaurant booking website. Bangkok Chinatown Ltd., trading as Yaowarat Leeds, is the data controller responsible for how restaurant booking information is used. Contact the restaurant at 57–59 New Briggate, Leeds LS2 8JD, email booking@yaowaratleeds.co.uk, or call 07380 737288. Please put “Privacy request” in the email subject.

Information we collect

When you book, we collect your name, email address, phone number, booking date and arrival time, group size and optional booking notes. Our records also contain a booking reference, booking status, applicable discount and any deposit status recorded by staff. We do not collect card details through the booking form.

Name and contact details are needed to arrange and contact you about your booking. Notes are optional. Please do not include medical information, payment details, passwords or sensitive information about another person. Speak to staff directly about allergies or access requirements before your visit and before ordering.

Why we use your information

• Arrange your booking: allocate tables, send confirmations, contact you about changes and manage group deposits. Our lawful basis is taking steps at your request before providing a restaurant service and performing that service (contract).
• Manage restaurant records: staff can see previous bookings, completed visit counts and the last completed visit. Records are matched by email, so a shared email represents a shared contact. Our legitimate interests are handling booking enquiries, avoiding duplicate records and providing consistent customer service. You can object to use of your information for visit history.
• Resolve enquiries and protect the service: investigate errors, disputes or misuse. Our lawful basis is our legitimate interest in operating a reliable booking service and resolving complaints, or a legal obligation where applicable.

Cancelled bookings and no-shows do not count as completed visits. Staff must mark a visit Complete for it to count. We do not currently operate a loyalty reward programme or use your booking details to subscribe you to promotional emails. Any future programme or marketing use will be explained separately before it starts.

Advance discounts are calculated from booking lead time, group size, arrival time and available discounted seats. These rules do not use customer visit history. Contact staff if you have a question about a booking result.

Where records are kept and who receives them

Bookings are stored in the website’s Cloudflare D1 database. Customer history is available through the staff login. The website is hosted through OpenAI Sites using Cloudflare infrastructure. Resend sends booking emails. Cloudflare Email Routing forwards restaurant email to our Apple iCloud inbox, so restaurant booking notifications and replies may also be held in that inbox. These are separate from the Lightspeed POS system.

Service providers process information needed to host the website or deliver messages. Their infrastructure may process data outside the UK. You can contact us for information about the providers and international-transfer arrangements. We do not sell customer booking details. Information may also be disclosed where required by law or necessary to handle a legal claim.

How long information is kept

We determine retention by whether information is still needed to fulfil a booking, answer a related enquiry or complaint, maintain necessary customer-service records, or meet an applicable legal obligation. Where a dispute or legal requirement applies, relevant information may need to be kept for that purpose. Contact us to ask about retention of your record or request deletion.

Booking and email records currently do not have an automatic expiry. A deletion request needs to consider both website records and restaurant email copies. We will assess requests against the purposes above and explain any reason we need to retain particular information. Anonymous aggregate traffic totals are separate from customer records.

Traffic counter and cookies

Our traffic counter stores only daily homepage-view totals. It does not store visitor identifiers, IP addresses or customer details, and does not set analytics cookies. Repeat visits and refreshes can count again, so these are not unique visitor totals. Staff pages are excluded. Known bots are filtered, but totals remain approximate.

Staff login uses a necessary session cookie lasting up to 30 days unless staff sign out sooner. This is separate from customer bookings. Hosting and email providers may handle technical connection or security logs under their own service arrangements; the anonymous counter is not a claim that those providers receive no technical data.

Your rights

Depending on the circumstances, you can request access to your information, correction, deletion, restriction or transfer of information. You can object to processing based on legitimate interests, including customer visit history. Some rights have exceptions, for example where a record is needed to meet a legal obligation or handle a claim.

Email booking@yaowaratleeds.co.uk with your request. We may need to verify your identity before releasing or changing information. Do not send identity documents unless we explain why they are needed and how to provide them securely. We normally respond within one month; where a lawful extension applies, we will tell you.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You can contact us first so we can try to resolve your concern.

Changes to this notice

We will update this notice if the website’s data use changes. New uses such as loyalty rewards or marketing will need their own information and any required permissions.