1. Who we are
Gunes Restaurant ("we", "us", "our") operates this website and our restaurants in the United Kingdom. Our trading address is 204 Southbury Rd, Enfield EN1 1YQ, United Kingdom. For any privacy-related question you can reach us at info@gunes.co.uk.
We are the data controller for the personal data described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
We only collect personal data that is necessary to provide our services and to comply with our legal obligations. Depending on how you interact with us this can include:
- Identity & contact details: name, phone number, email address (when you make a reservation, contact us, or place an order through one of our delivery partners).
- Reservation details: party size, date, time, dietary or accessibility requirements you choose to share.
- Technical data: IP address, browser type, device information and pages visited (collected via cookies — see our Cookie Policy).
- Marketing preferences: whether you have opted in to receive updates from us.
3. How we use your data
We use your personal data only for the purposes set out below, and only where we have a lawful basis under UK GDPR.
- To take and confirm bookings (lawful basis: performance of a contract).
- To respond to enquiries you send us (lawful basis: legitimate interests).
- To improve and secure our website (lawful basis: legitimate interests).
- To send you marketing communications, where you have given consent (lawful basis: consent — you can withdraw at any time).
- To comply with legal, accounting and food-safety obligations (lawful basis: legal obligation).
4. Online ordering & delivery partners
Online orders are processed on the platforms of Uber Eats, Deliveroo and Just Eat. When you place an order on those platforms, the platform acts as the controller for the data you submit there. We receive only the information necessary to prepare and hand over your order (for example: name, items, allergens declared, and delivery instructions).
Please review the privacy policy of the platform you use to order. We are not responsible for their data-handling practices.
5. Sharing your data
We never sell your personal data. We share it only with parties who help us run our business and only to the extent necessary, including:
- Reservation provider (Dojo) — to process and confirm bookings.
- Hosting and analytics providers — to operate our website.
- Delivery partners (Uber Eats, Deliveroo, Just Eat) — to fulfil your order.
- Professional advisers, regulators and law-enforcement bodies — only where required by law.
6. How long we keep your data
We keep personal data only for as long as necessary for the purpose we collected it. Reservation records are retained for up to 24 months. Accounting records are retained for 6 years as required by HMRC. Marketing-consent records are kept until you withdraw consent.
7. Your rights
Under UK GDPR you have the right to: access your data, ask us to correct or delete it, object to or restrict processing, withdraw any consent you have given, and request that we transfer your data to another controller.
To exercise any of these rights, email us at info@gunes.co.uk. We will respond within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. International transfers
Some of our service providers process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or equivalent safeguards approved by the ICO.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent change. Material changes will be flagged on our website.