Privacy Policy

Last Updated: December 2025

Effective Date: December 2025

1. Introduction

Yoru Umi Ramen Bar ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Data Controller

Data Controller: Yoru Umi Ramen Bar

Contact Email: info@yoruumi.com

Address: Broadway Market, Tooting, London, UK

For GDPR-related requests, please contact us at the email above with "GDPR Request" in the subject line.

3. Personal Data We Collect

We collect the following personal data when you make a booking:

• • Name: To identify you for your reservation
• • Email Address: To send booking confirmations and updates
• • Phone Number: To contact you regarding your booking if needed
• • Booking Details: Date, time, party size, and table preferences
• • Special Requests: Any dietary requirements or special requests (optional)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• • Contractual Necessity: To fulfill your booking request and provide restaurant services
• • Consent: You provide explicit consent when submitting the booking form
• • Legitimate Interest: To improve our services and manage reservations

5. How We Use Your Data

We use your personal data to:

• • Process and manage your table reservations
• • Send booking confirmations and updates via email
• • Contact you regarding your booking if necessary
• • Improve our booking system and customer service
• • Comply with legal obligations

We do NOT: Sell your data to third parties, use it for marketing without consent, or share it with external companies.

6. Data Storage and Security

Your personal data is stored securely using:

• • Google Cloud Firestore: Encrypted database with access controls
• • Input Sanitization: All user inputs are sanitized to prevent security vulnerabilities
• • Access Controls: Only authorised staff can access booking data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data for the following periods:

• • Active Bookings: Until the booking date has passed plus 30 days
• • Completed Bookings: 12 months after the booking date for record-keeping purposes
• • Cancelled Bookings: 90 days after cancellation

After these periods, your data is automatically deleted unless you request earlier deletion (see Your Rights below).

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• • Right to Access (Article 15): Request a copy of all personal data we hold about you
• • Right to Rectification (Article 16): Request correction of inaccurate data
• • Right to Erasure (Article 17): Request deletion of your personal data ("Right to be Forgotten")
• • Right to Restrict Processing (Article 18): Request limitation of how we process your data
• • Right to Data Portability (Article 20): Request your data in a machine-readable format
• • Right to Object (Article 21): Object to processing of your data
• • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at info@yoruumi.com with "GDPR Request" in the subject line, or use our GDPR Request Form.

9. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share data only with:

• • Service Providers: Google Cloud (Firestore) for data storage, under strict data processing agreements
• • Legal Requirements: If required by law or to protect our legal rights

10. Cookies and Analytics

We use cookies and analytics tools to improve website functionality. For detailed information, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent banner.

11. International Data Transfers

Your data may be processed and stored outside the UK/EEA by Google Cloud services. We ensure appropriate safeguards are in place through Google's Standard Contractual Clauses and data processing agreements.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

15. Contact Us

For any questions, concerns, or requests regarding your personal data and this Privacy Policy, please contact us:

Email: info@yoruumi.com
Subject Line: "GDPR Request" or "Privacy Policy Inquiry"
Address: Yoru Umi Ramen Bar, Broadway Market, Tooting, London, UK

You can also use our GDPR Request Form to exercise your rights.

16. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO Website: https://ico.org.uk
ICO Helpline: 0303 123 1113