-
1
Data Controller Identification & Statutory Framework
Restorant Review UK Publishing, operating from Level 28, The Leadenhall Building, 122 Leadenhall Street, City of London, London EC3V 4AB, acts as the designated Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting the privacy, security, and fundamental data rights of every individual who accesses our critical guides, gastronomic evaluations, and concierge referral services.
-
2
Categories of Personal Data Collected
We collect personal information solely to the extent necessary to provide authoritative gastronomic critique and facilitate customer concierge inquiries. Collected data categories include:
- Identity Data: Full name, title, and voluntary demographic information submitted during reservation requests.
- Contact Data: Direct telephone numbers, electronic mail addresses, and correspondence records.
- Concierge Specifications: Date, seating party headcount, venue preference, and dining notes.
-
3
Lawful Bases for Processing under Section 8 DPA 2018
Every data processing operation conducted by Restorant Review rests upon defined lawful bases set forth in Article 6 of the UK GDPR. These include performance of a requested service (processing your table concierge transmission), legitimate interest in publishing independent culinary journalism, and compliance with statutory recordkeeping duties.
-
4
Anonymous Editorial Review Integrity
Our restaurant inspectors conduct assessments anonymously, financing all meals without commercial hospitality or sponsorship. To protect review objectivity, inspector identities and private dining records are segmented in an encrypted air-gapped system completely segregated from general public website telemetry and concierge forms.
-
5
Technical Telemetry, Server Logs & IP Anonymization
When navigating our publication, our secure London hosting servers capture essential operational metrics, including anonymized IP addresses, browser user-agent tokens, timestamp headers, and requested resource URIs. IP addresses are truncated at the network boundary, ensuring no raw identifier can be resolved to an individual household or workstation.
-
6
Data Retention Schedules & Automated Purging
Personal data is retained only for the duration required to satisfy the operational purpose for which it was gathered. Concierge table inquiries are archived for a maximum period of 90 calendar days following the requested reservation date, after which cryptographic shredding and automated database row deletion are executed permanently.
-
7
Third-Party Disclosures & Casino Operator Boundaries
We do not sell, license, lease, or monetize user data under any circumstances. When a user explicitly requests a VIP table reservation, relevant dining coordinates (name, contact number, party size, dining time) are transmitted directly to the head maƮtre d' and sommelier of the requested licensed casino dining room solely for reservation fulfillment.
-
8
International Data Transfers & Adequacy Standards
All core operational databases and web assets are hosted within secure ISO 27001-certified data centres located inside the United Kingdom. Where any cloud infrastructure components interface outside the UK, transfers are governed by UK International Data Transfer Agreements (IDTAs) ensuring equivalence with British data protection standards.
-
9
Information Commissioner's Office (ICO) Compliance
Restorant Review maintains active registration with the Information Commissioner's Office (ICO), the UK's independent regulatory body set up to uphold information rights. Users possess the unalienable right to escalate inquiries or file formal supervisory complaints via ico.org.uk or telephone 0303 123 1113.
-
10
Individual Rights of Data Subjects
Under UK GDPR Chapters 3 and 4, you are vested with enforceable data subject rights. You may submit requests to our Data Protection Officer at [email protected], which will be verified and resolved without charge within 30 calendar days:
- Right of Access: Obtain full copies of all personal records maintained regarding your identity.
- Right to Rectification: Correct inaccurate contact information, names, or reservation preferences.
- Right to Erasure: Mandate the immediate permanent deletion of all stored communications.
-
11
Cryptographic Security Standards & TLS Protocols
All data transmission between your browser client and our publishing platform is protected by Transport Layer Security (TLS 1.3) with 256-bit Advanced Encryption Standard (AES) cipher suites. Internal data stores operate with hardware-level encryption at rest, protected by strict role-based access management and audit trails.
-
12
Age Verification, Minors & 18+ Mandatory Protocol
Because our publication evaluates restaurants situated within licensed British casino premises, our editorial resources and concierge tools are exclusively aimed at individuals aged 18 and older. We do not knowingly process data relating to minors. Any inquiry identified as originating from an underage user is purged immediately.
-
13
Policy Amendments, Versioning & Data Protection Officer
This policy is subject to semi-annual regulatory audits to ensure sustained alignment with statutory updates. For all formal privacy inquiries, subject access requests, or regulatory questions, contact our Data Protection Officer at: Restorant Review UK Publishing, Level 28, The Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB; Email: [email protected].
Legal Protocol
Privacy Policy & Data Governance
Effective Date: October 2026. This Privacy Policy outlines how restorant-review.com collects, secures, and handles personal data in strict compliance with the UK GDPR and the Data Protection Act 2018.