Privacy Policy

We may collect and process the following personal data about you:

• Identity Data: First name, last name.
• Contact Data: Phone number, email address.
• Order Data: Items ordered, quantities, special instructions, and delivery preferences.
• Booking Data: Table reservation details, number of guests, date and time preferences, and special occasion notes.
• Technical Data: IP address, browser type, operating system, and website usage data collected via cookies.

We use your personal data for the following lawful purposes:

• To process and fulfil your table bookings and food orders.
• To contact you regarding your reservation or order (e.g., confirmation, updates).
• To improve our website and services through anonymised analytics.
• To comply with our legal obligations.
• To send you marketing communications, only where you have given explicit consent.

We process your personal data under the following legal bases:

• Contractual necessity: To fulfil your order or reservation.
• Legitimate interests: To improve our services and prevent fraud.
• Legal obligation: To comply with applicable laws and regulations.
• Consent: For marketing emails or cookies where required.

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: Required for the site to function (e.g., shopping cart, session).
• Analytics cookies: To understand how visitors use our site (e.g., Google Analytics).

You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of our website.

We do not sell or rent your personal data to any third party. We may share your information with trusted service providers who assist us in operating our website and business, subject to confidentiality obligations. These may include:

• Payment processors (e.g., Stripe, PayPal).
• Website hosting and technical infrastructure providers.
• Notification services used to manage order/booking alerts.

We may also disclose your information if required by law or to protect the rights, property, or safety of Butt Karahi, our customers, or others.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Booking and order data is typically retained for 3 years. You may request deletion at any time (subject to legal obligations).

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request limited processing of your data.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, contact us at privacy@buttkarahi.co. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Our website uses HTTPS encryption. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites (e.g., Google Maps, social media platforms). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO) at 0303 123 1113 or ico.org.uk.