This Privacy Policy explains how BURNHAM RESTAURANT LTD (company number 13689984), trading as La Indika Indian Cuisine, collects, uses, stores and shares personal information when you visit this website, contact us, reserve a table, place or enquire about an order, or otherwise interact with us.
Registered office: La Indika Indian Cuisine, 21 High Street, Burnham, Slough, England, SL1 7JD
Data-protection contact: Rohel Miah
Email: bookings@laindika.com
1. Scope of this policy
This policy applies to personal information processed by BURNHAM RESTAURANT LTD in connection with this La Indika website and our restaurant services. It should be read together with our Cookie Policy. If you follow a link to a third-party ordering, payment, delivery, social-media or other service, that provider may process information under its own privacy notice.
2. Personal information we may collect
Depending on how you interact with us, we may collect your name, telephone number, email address, postal or delivery address, booking details, order details, dietary or accessibility information you choose to provide, correspondence and enquiry content, complaint or customer-service records, and technical information generated when you use the website such as device, browser, IP address, security logs and cookie or consent preferences.
If you make a payment through a third-party ordering or payment service, that provider may collect payment-card or account information directly. We do not intend this public website to store full payment-card details.
3. Special category information
Information about allergies, medical dietary requirements, religious dietary requirements or accessibility needs can sometimes reveal sensitive information. Please provide only what is reasonably necessary for us to meet your request. Where special category data is processed, we will do so only where a lawful condition applies, including where you have made the information manifestly public, provided explicit consent where appropriate, or processing is otherwise permitted by data-protection law.
4. How and why we use personal information
We may use personal information to manage table reservations and enquiries; process, prepare and fulfil orders; provide customer service; communicate changes to bookings or services; administer refunds or resolve complaints; protect our website, staff, customers and business from fraud, misuse or security threats; keep legally required business and tax records; improve our services; and, where permitted, send marketing communications.
5. Our lawful bases
Under the UK GDPR, we rely on one or more lawful bases depending on the activity. Contract and steps taken at your request before entering a contract may apply to bookings, orders and related customer service. Legal obligation may apply to accounting, tax, regulatory, food-safety or law-enforcement requirements. Legitimate interests may apply where reasonably necessary to operate and secure the restaurant and website, respond to enquiries, prevent fraud, establish or defend legal claims, and improve services, provided those interests are not overridden by your rights. Consent is used where the law requires it, including for non-essential cookies and certain electronic marketing.
6. Cookies and similar technologies
We use a consent mechanism for optional cookies and similar technologies. Optional technologies should not be activated unless you choose Accept Optional Cookies. You can choose Reject Optional Cookies without losing access to the core website. See our Cookie Policy for more detail and how to revisit your preference.
7. Who we may share information with
We may share personal information where necessary with service providers supporting website hosting, email, reservations, ordering, payments, delivery, IT, security, professional advice, accounting and business administration. We may also disclose information to regulators, courts, law-enforcement bodies, insurers, professional advisers, potential purchasers of the business, or other parties where required or permitted by law. Service providers acting on our behalf are expected to handle personal information only for authorised purposes and with appropriate safeguards.
8. International transfers
Some suppliers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will use an approved mechanism or rely on another lawful transfer basis, such as UK adequacy regulations or appropriate contractual safeguards. You may contact us for more information about safeguards relevant to your personal information.
9. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, food-safety, complaint-handling and dispute-resolution requirements. Retention periods vary by record type. Routine enquiries that do not lead to a transaction are normally deleted or anonymised when no longer required; transaction and accounting records may need to be kept for longer statutory periods. We periodically review information and delete or anonymise it when there is no continuing lawful need.
10. Security
We use reasonable technical and organisational measures intended to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet service is completely secure, so please avoid sending unnecessary sensitive information by ordinary email.
11. Your data-protection rights
Subject to the circumstances and exemptions in data-protection law, you may have rights to be informed; request access to your personal information; request correction of inaccurate information; request erasure; request restriction of processing; object to processing based on legitimate interests or direct marketing; receive certain information in a portable format; and withdraw consent where processing relies on consent. Withdrawing consent does not affect processing carried out lawfully before withdrawal.
Your right to object: where we process personal information on the basis of legitimate interests, you may object in circumstances provided by law. You have an absolute right to object to the use of your personal information for direct marketing.
12. Exercising your rights
To exercise a data-protection right, contact Rohel Miah at bookings@laindika.com. We may need to confirm your identity before acting on a request. We will respond within the time limits required by applicable law and will explain if an exemption or lawful restriction applies.
13. Marketing
We will send electronic direct marketing only where we have a lawful basis to do so. You can opt out of marketing at any time by using an unsubscribe method provided in the communication or by emailing us. Service communications about an order, reservation or enquiry are not marketing and may still be sent where necessary.
14. Children
Our restaurant website is intended for a general audience and is not designed to collect personal information directly from children for online profiling or behavioural advertising. A parent or guardian should make bookings or orders for children where appropriate.
15. Complaints
If you have concerns about how we use personal information, please contact us first so we can try to resolve them. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO). Current complaint and contact information is available at ico.org.uk.
16. Changes to this policy
We may update this Privacy Policy to reflect changes in law, guidance, technology or our services. The latest version will be published on this page and the “Last updated” date will be amended where appropriate.