Privacy Policy

Site operator

This website is operated by Anaya Restaurants Limited, a company registered in England and Wales (company number 17269971), whose registered office is 20-22 Victoria Terrace, Leamington Spa CV31 3AB, United Kingdom. Anaya Restaurants Limited is the data controller for personal data collected through this website and the restaurant's services.

The restaurant premises are owned by Anaya Buildings Limited, a company registered in England and Wales (company number 17270047), whose registered office is 20-22 Victoria Terrace, Leamington Spa CV31 3AB, United Kingdom.

VAT registration number: GB 000 0000 00 (to be confirmed). Email: reserve@anaya.london. Telephone: +44 20 7900 0000.

Who we are

Anaya Restaurants Limited is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018. Where this policy says "we", "us" or "our", it refers to Anaya Restaurants Limited. The premises are held by Anaya Buildings Limited (company no. 17270047).

What we collect

• Enquiries and reservations: name, email address, telephone number, party size, date and time, and any message or dietary/allergy information you choose to give us.
• Technical data: IP address, device and browser type, and pages viewed, collected through cookies and similar technologies.
• Correspondence: records of emails, calls and feedback.

We do not knowingly collect data from children under 13 without parental involvement, and we do not use automated decision-making or profiling.

Why we use it and our lawful basis

• To answer enquiries and manage bookings — contract and legitimate interests.
• To record allergy and dietary requirements so we can serve you safely — legitimate interests and, for health data, your explicit consent given when you tell us.
• To send marketing emails, only where you have opted in — consent. You can withdraw at any time via the unsubscribe link or by emailing us.
• To keep accounting, food safety and health & safety records — legal obligation.
• To keep the site secure and improve it — legitimate interests and, for optional cookies, consent.

Who we share it with

We share data only with service providers acting on our instructions: our website and email hosting providers, our reservation and payment providers, and Google (for the embedded map, loaded only with your consent). We may disclose data where required by law or to protect the safety of our guests and staff. We never sell your data.

International transfers

Some providers process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

Enquiries and booking records: up to 24 months after your last contact. Marketing consents: until you withdraw, and up to 24 months of inactivity. Financial records: 6 years, as required by HMRC. Food safety and incident records: as required by our local authority, normally at least 3 years. CCTV, where operated, is retained for no more than 31 days.

Your rights

You have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. To exercise a right, email reserve@anaya.london — we respond within one month.

If you are unhappy with how we handle your data you may complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Security

We apply appropriate technical and organisational measures, including encrypted transport (HTTPS), access controls and staff training. No method of transmission is completely secure, and any transmission is at your own risk.

Changes

We may update this policy; the date above shows the current version. Material changes will be highlighted on this page.