This privacy policy covers our use of your personal data. When we talk about “personal data” in this policy, we mean any information which could be used to identify you, either directly or indirectly, for example, in combination with any other information we may hold about you. This includes data via our wi-fi, newsletter sign-up, booking enquiries, and customer feedback. We strictly adhere to the requirements of the data protection legislation in the UK and the EU. The purpose of this statement is to explain to you what personal information we collect and how we may use it.
In this privacy policy, when we refer to “we”, “us” or “our”, we mean Busaba Eathai Limited, 27 Old Gloucester St, Holborn, London WC1N 3AX
You may provide us with information that identifies you, including but not limited to your name, phone number, email address or payment method details. This includes information you provide when you make a booking, sign up to our newsletter or WiFi connection, leave guest feedback or engage with one of our events.
We will collect and process your data for the purposes of:
We also retain data for statistical analysis for the purposes of monitoring sales, bookings, consumer demographics, guest feedback and website activity. These statistics however will not include information that can be used to identify and will never be passed on to third parties. Busaba Bangkok Thai is committed to protecting your privacy and maintaining the security of any personal information received from you. We do not sell, rent or exchange your personal information with any third party for commercial reasons. In certain circumstances, we are required to process your personal data. This applies, for example, where you register with us, or make a reservation or booking, or provide feedback, or place enquiries. We will need your personal data in order to provide our services to you, and if you do not provide your data, you may not have access to our services.
Where we process your personal data this will be justifiable on the basis that it is necessary for the performance of a contract under Article 6(1)(b). Where processing falls outside the scope of this basis, processing this data will be necessary for Busaba’s legal obligations under Article 6(1)(c). Where processing goes beyond the scope of both these bases, processing will be justified for Busaba’s legitimate interests under Article 6(1)(f), for example, to promote Busaba’s business aims.
Your data may, for the purposes outlined above, be disclosed for processing to our payment processors, our data management providers and any other affiliates that we work with in order to provide our business-related services as a restaurant group. Your anonymised data may also be provided to:
Analytics and search engine providers that assist us in the optimisation and continual improvement of our website and digital marketing.
Consultants or advisors to our business who require demographical statistics for analysis.
We will never sell your personal information to any third party for any reason.
We will use your personal information for the purpose in which you supplied it to us e.g. responding to an enquiry or guest feedback, a competition entry or booking request. We will use your information, only when you have given us permission, to keep you updated on new menu changes, offers and events, and any other information we feel would be relevant to you. Our newsletter and email campaigns will always facilitate an option to unsubscribe and you can check, update or remove your personal details by contacting marketing@busaba.com at any time. We will always observe your most recent preference with regards to contact preferences e.g. if you book online and do not opt in for our newsletter, then you will be removed from that listing, despite previously opting in.
We use your personal data in our central company database which allows us to analyse our customer transactions, demographics and behaviours. We use this information, mostly anonymised, to identify successful and unsuccessful campaigns, service teams, menu launches and events.
We follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access in accordance with the EU data protection legislation. We will not transfer your information outside the EEA (European Economic Area) without first obtaining your consent. We believe that we have the appropriate policies, rules and procedures in place to protect the personal data that we have under our control. Busaba stores and keeps your data on the emailing system if you are active, meaning interacting with our emails. If a user isn’t active for 12 months, the data is deleted from our system. Payment details must be kept for 6 years for tax purposes under the law. We are committed to keeping data safe and secure.
We will always request your permission before using your data for any of the purposes defined in this privacy policy. We will inform you before collecting your data if we intend to use your data for marketing purposes or if, for any reason, we intend to disclose your information to a third party, where we will clearly state the third party applicable. By opting in to any of our permission requests, or submitting any personal information to us, you are consenting to us processing your information within the boundaries defined in this privacy policy. It is your responsibility to check and agree terms and conditions in the privacy policy every time you submit your personal information to us or make a booking or contact request. We will not alter our privacy policy terms for processing information without contacting individuals whom any changes may affect. You can contact our Head Office at any time to obtain a copy of your information, either by email: marketing@busaba.com or postal address: 27 Old Gloucester St, Holborn, London WC1N 3AX. We are not responsible for the data protection and privacy policies/practices of alternative websites even in the case that you accessed the website via a link on our website. We strongly recommend that you check the privacy policy of each website you visit and challenge any concerns with them before proceeding to submit your personal information. Our customer database processor is Airship and you may reach their privacy policy as well through https://www.airship.com/legal/privacy/
You are entitled to access your personal data by way of a Subject Access Request and you have the right to obtain: 1) confirmation that your data is being held 2) a copy of your data and 3) other supplementary information that corresponds to the information in this privacy notice. Under the GDPR we will provide this information within one month, or failing this, we will provide reasons for the delay if an extension is required. We will provide this free of charge but if requests are manifestly unfounded or excessive, we may charge a reasonable fee, taking into account the administrative costs of dealing with any SAR. In order to protect your personal data, we will seek to verify your identity before providing any information.
You are entitled to have personal data rectified if it is inaccurate or incomplete. The Company will respond within one month of your request.
You may request that we delete or remove your data in certain circumstances which are relevant to Busaba such as:
1) when you withdraw your consent
2) if you object to processing and there is no overriding legitimate interest for continuing the processing
3) the personal data has been unlawfully processed
4) the personal data has to be erased in order to comply with a legal obligation.
You have the right to block processing of your personal data. Where this is requested, we are permitted to store the personal data but not process it further.
You can obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy or transfer personal data easily from one environment to another in a safe and secure way. This only applies to 1) personal data you have provided to us 2) where the processing is based on your consent or for the performance of a contract and 3) when processing is carried out by automated means.
Right to object: You have the right to object to 1) processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling) 2) direct marketing (including profiling) and 3) processing for purposes of scientific/historical research and statistics.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you, or significantly affects you.
We use a technology called “cookies” as part of a normal business procedure to track patterns of behaviour of visitors to our site. A cookie is an element of data that our website sends to your browser which is then stored on your system. You can set your browser to prevent this happening. Any information collected in this way can be used to identify you unless you change your browser settings.
If you have any questions about our privacy policy or compliance with the data protection act please contact us at marketing@busaba.com
Do you want to be kept up to date with our offers and events? Sign up to our newsletter!
