1. Who We Are
Pomelo Cafe (trading as “Pomelo”) operates a modern Chinese restaurant at 27 Sciennes Road, Edinburgh, EH9 1NX. We can be contacted at:
- Email: pomelocafeedin@gmail.com
- Instagram: @cafe_pomelo
- Address: 27 Sciennes Road, Edinburgh, EH9 1NX
We are the data controller for the personal information we collect about you. This policy explains what data we collect, why we collect it, and your rights under UK GDPR and the Data Protection Act 2018.
2. What Information We Collect
2.1 Information You Provide Directly
When you make a reservation, contact us, or interact with our website, we may collect:
- Your name
- Email address
- Phone number
- Number of guests in your party
- Dietary requirements or allergy information you choose to share
- Any special requests or notes submitted at the time of booking
2.2 Information Collected Automatically
When you visit our website (pomelocafe.co.uk), we and third-party services may automatically collect:
- IP address and browser type
- Pages visited and time spent on our site
- Referring website or search terms
- Device and operating system information
This information is collected via cookies and similar tracking technologies. Please see Section 6 (Cookies) for more detail.
3. How We Use Your Information
We use your personal data for the following purposes:
- To process and manage your table reservations
- To contact you about your booking (confirmation, reminders, or changes)
- To enforce our cancellation and no-show policy
- To respond to enquiries submitted via email or social media
- To improve our website and user experience
- To comply with legal obligations
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract: Processing necessary to fulfil or manage your reservation
- Legitimate Interests: Website analytics to improve our service
- Legal Obligation: Where we are required to retain records by law
- Consent: Where you have opted in to receive marketing communications
5. How Long We Keep Your Data
We retain personal data only for as long as necessary:
- Reservation and booking records: at least 2 years
- Financial and cancellation fee records: up to 6 years (legal requirement)
- Website analytics data: as per third-party provider policies (typically 16 months for Google Analytics and Google Search Console)
When data is no longer needed, it is securely deleted or anonymised.
6. Cookies
Our website uses cookies — small text files stored on your device — to help us understand how visitors use our site. We use the following types of cookies:
6.1 Strictly Necessary Cookies
These cookies are required for the website to function and cannot be disabled. They do not collect any personally identifiable information.
6.2 Analytics Cookies
We use analytics tools (such as Google Analytics) to understand how visitors interact with our site. These cookies collect anonymised information such as pages visited, time on site, and how you arrived. This data helps us improve our content and user experience.
You can control cookie settings via the banner displayed when you first visit our site, or at any time through your browser settings.
7. Sharing Your Information
We do not sell or rent your personal data. We may share it with:
- Our reservation platform (Resos) to process and manage bookings
- Google LLC, for analytics and maps services embedded in our site
- Law enforcement or regulatory authorities if required by law
All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.
8. Transfers Outside the UK
Some of our third-party service providers (such as Google) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access – to request a copy of the data we hold about you
- Right to Rectification – to correct inaccurate or incomplete data
- Right to Erasure – to request deletion of your data in certain circumstances
- Right to Restrict Processing – to limit how we use your data
- Right to Object – to object to processing based on legitimate interests
- Right to Data Portability – to receive your data in a structured, machine-readable format
- Right to Withdraw Consent – where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at pomelocafeedin@gmail.com. We will respond within one month.
10. How to Complain
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
We would, however, appreciate the chance to address your concerns before you contact the ICO, so please get in touch with us first.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or how we use your personal data, please contact us:
Pomelo Cafe
- 27 Sciennes Road, Edinburgh, EH9 1NX
- Email: pomelocafeedin@gmail.com
- Instagram: @cafe_pomelo