Privacy policy

1. Who we are

Karamay Uyghur Cuisine ("Karamay", "we", "us") operates the restaurant at 12 Great Castle Street, London W1W 8LR, United Kingdom, and this website, https://www.karamay.co.uk. We are the data controller for the personal data described in this policy. You can contact us about privacy at contact@karamay.co.uk or by writing to the address above.

2. The data we collect

• Contact details — your name, email address and, if you give it, phone number, when you send us a message, make a private dining enquiry or subscribe to our newsletter.
• Your message — what you write to us, including the occasion, date, guest numbers and any dietary requirements you share in an enquiry.
• Usage data — aggregated, anonymous statistics about how the website is used (pages viewed, device type, approximate region). Our analytics run on a first-party domain, set no cookies and do not build individual profiles.

Table bookings and online orders are handled by our booking and ordering partners on their own websites; their privacy notices apply to the data you give them.

3. How and why we use it

• To answer your enquiry or feedback (legal basis: our legitimate interest in running the restaurant).
• To plan and confirm a private dining booking you have asked for (legal basis: steps taken at your request before entering into a contract).
• To send our newsletter when you have opted in (legal basis: consent — you can withdraw it at any time).
• To keep the website secure and understand how it is used (legal basis: legitimate interest).

We do not sell your personal data and we do not use it for automated decision-making.

4. Who we share it with

Your data is stored on our secure guest-management platform (Sentrix, hosted on Supabase) and processed by the service providers that run this website and deliver our emails (Cloudflare, Amazon Web Services). They act on our instructions and may store data outside the UK under appropriate safeguards such as the UK International Data Transfer Addendum. We only disclose data where the law requires it.

5. How long we keep it

Enquiries and messages are kept for up to 24 months after our last contact with you, then deleted. Newsletter details are kept until you unsubscribe. Anonymous analytics are kept in aggregate only.

6. Your rights

Under UK GDPR you have the right to access, correct or erase your personal data, to restrict or object to our processing, to data portability, and to withdraw consent at any time. To exercise any of these, email contact@karamay.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

This website does not set tracking or advertising cookies. Essential functionality (such as remembering a form you have submitted) works without cookies. The embedded map on our contact page is provided by Google and may set cookies according to Google's own policy when you interact with it.

8. Children

Our website is not directed at children under 13 and we do not knowingly collect their data.

9. Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will be highlighted on the website.

See also our terms of use.