Privacy Policy – © Masooms Indian Kitchen & Bar

Privacy Notice

Last updated: 26th August 2026
Controller: MASOOM’S FUSION BODICOTE LTD
Trading as: Masoom’s Indian Kitchen & Bar
Address: Masoom’s Indian Kitchen & Bar, Church Street, Bodicote, Oxfordshire, United Kingdom, OX15 4DW
Email: info@masoomsbodicote.com
Phone: 01295 254 353

This notice explains how we collect, use and protect your personal data when you visit our website www.masoomsbodicote.com, place an order, make a reservation, sign up for marketing, visit our restaurant/bar, or otherwise interact with us.

1. Who we are

We are the data controller for your personal data. This means we decide how and why your data is processed.

Legal name: MASOOM’S FUSION BODICOTE LTD
Trading name: Masoom’s Indian Kitchen & Bar
Registered address: Masoom’s Indian Kitchen & Bar, Church Street, Bodicote, Oxfordshire, United Kingdom, OX15 4DW
Contact for privacy queries: info@masoomsbodicote.com

If we appoint a Data Protection Officer (DPO) in future, their contact details will be added here.

2. What personal data we collect

Depending on how you interact with us, we may collect:

a) When you use our website

Account / profile data: name, email address, password (hashed), phone number, delivery address, billing address.
Order data: items ordered, special dietary or allergy information, delivery instructions, order time and date, payment method.
Reservation data: name, contact details, number of guests, date/time of booking, special requests (e.g. high chair, accessibility needs).
Marketing data: email address and/or phone number if you sign up for newsletters or promotions; your marketing preferences.
Technical data: IP address, device type, browser type, operating system, pages visited, time and date of visit, referral URL, cookie identifiers.
Communication data: messages you send via contact forms, live chat, email or social media.

b) When you visit our restaurant or bar

Transaction data: what you ordered, time and date, table number (if applicable), payment method, amount paid.
Contact data: if you provide it for bookings, loyalty schemes, or complaints.
Dietary/allergy information: if you tell our staff.
CCTV images: if we operate CCTV on our premises for security and crime prevention.
Incident/complaint data: details of any complaint, accident or incident you report.

c) Special category data

We do not normally collect special category data (e.g. health data), except where you voluntarily tell us about allergies or dietary requirements so we can keep you safe. We treat this information carefully and only use it to manage your order or visit.

3. How and why we use your data (lawful bases)

We only use your data where we have a lawful basis under UK GDPR.

Purpose	Data used	Lawful basis (UK GDPR)
Process online orders and deliveries	Name, contact details, address, order details, payment info, dietary info	Contract (necessary to fulfil your order)
Take and manage table reservations	Name, contact details, party size, special requests	Contract (necessary to provide reservation)
Process payments and prevent fraud	Payment details, transaction data, IP address	Contract + legal obligation (financial regulations, fraud prevention)
Send order confirmations, booking confirmations and service messages	Email/phone, order/booking details	Contract
Handle customer service queries and complaints	Contact details, order/visit details, correspondence	Contract + legitimate interests (good customer service)
Send marketing (newsletters, offers) if you opt in	Email/phone, preferences, order history (for personalisation)	Consent (you can withdraw at any time)
Improve our website and understand usage (analytics)	Technical data, cookie IDs, pages visited	Legitimate interests (improving service) or consent where required by PECR
Comply with legal obligations (e.g. tax, food safety, licensing)	Transaction data, booking data, CCTV	Legal obligation
Protect security of our premises, staff and customers (CCTV, spam detection)	CCTV images, IP addresses, device data	Legitimate interests (security, crime prevention)
Defend or bring legal claims if needed	Relevant personal data	Legitimate interests (legal defence)

Where we rely on legitimate interests, we have assessed that your rights do not override those interests. You can object to certain processing; see “Your rights” below.

4. Who we share your data with

We do not sell your personal data. We may share it with:

Payment processors (e.g. Stripe, Square, Worldpay) to process card payments.
Delivery platforms and couriers (e.g. Deliveroo, Uber Eats, local couriers) where you order via them or we use them for delivery.
Booking/reservation systems (if we use a third-party platform).
Website hosting and IT providers who store and maintain our website and databases.
Email/SMS/Whatsapp/Facebook/Instagram marketing providers (if you opt in to marketing).
Accountants and auditors for tax and financial records.
Professional advisers (e.g. lawyers) where necessary.
Regulators and authorities where we are legally required (e.g. HMRC, local authority, police).

All third parties are required to protect your data and only use it for the purposes we specify.

5. International transfers

Some of our service providers (e.g. website hosting, email tools) may store or process data outside the UK. Where this happens, we ensure there are appropriate safeguards in place, such as:

Transfers to countries with an adequacy decision by the UK Government, or
Use of UK International Data Transfer Agreements or other approved mechanisms.

If you want more detail about specific transfers, contact us at info@masoomsbodicote.com.

6. How long we keep your data

We keep your data only as long as necessary.

Order and reservation records: typically [e.g. 6–7 years] for tax and accounting purposes.
Customer account data: while your account is active, plus a reasonable period afterwards for legal and security reasons.
Marketing data: until you unsubscribe or we stop using that provider, then deleted within a reasonable time.
CCTV footage: usually [e.g. 31 days], unless needed for an investigation.
Website logs and analytics: typically [e.g. 12–24 months], depending on the tool.
Complaints and incident records: for as long as needed to resolve the issue and meet legal/insurance requirements.

We regularly review retention periods and delete or anonymise data when no longer needed.

7. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances (“right to be forgotten”).
Restrict processing in certain cases.
Object to processing based on legitimate interests or direct marketing.
Data portability – receive your data in a structured, commonly used format.
Withdraw consent at any time where we rely on consent (e.g. marketing).
Complain to the Information Commissioner’s Office (ICO).

To exercise these rights, contact us at info@masoomsbodicote.com or Masoom’s Indian Kitchen & Bar, Church Street, Bodicote, Oxfordshire, United Kingdom, OX15 4DW. We will respond within one month, subject to any legal extensions.

8. How to make a data protection complaint

We take data protection complaints seriously. If you have a concern about how we handle your personal data:

Contact us first using info@masoomsbodicote.com or Masoom’s Indian Kitchen & Bar, Church Street, Bodicote, Oxfordshire, United Kingdom, OX15 4DW.
We will acknowledge your complaint within 30 days.
We will investigate without undue delay, keep you updated, and tell you the outcome.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk
Helpline: 0303 123 1113

You can also contact the ICO at any time, but we encourage you to contact us first so we can try to resolve the issue.

9. Cookies and similar technologies

Our website uses cookies and similar technologies for:

Essential functions (e.g. keeping you logged in, remembering your basket).
Analytics (to understand how the site is used).
Marketing (if you opt in).

Under UK privacy laws (PECR), we seek your consent for non-essential cookies via our cookie banner. You can manage or withdraw consent at any time via our cookie settings.

For full details, see our separate Cookie Notice.

10. Comments and user-generated content

If our website allows comments or reviews:

We collect the data you enter in the comment form, plus your IP address and browser user agent to help detect spam.
An anonymised string (hash) of your email may be sent to Gravatar to check if you use that service. Gravatar’s privacy policy is here: https://automattic.com/privacy/
Once approved, your comment and profile picture (if using Gravatar) are visible publicly.
Comments and their metadata are retained indefinitely so we can recognise and approve follow-up comments automatically. You can request deletion; see “Your rights”.

If you upload images to the site, avoid images with embedded location data (EXIF GPS). Visitors can download and extract such data from images.

11. Embedded content from other websites

Some pages may include embedded content (e.g. videos from YouTube, maps, social media posts). When you interact with these:

The third-party site may set cookies and collect data about you.
This happens even if you do not click the embedded content, depending on how it is implemented.

These third parties have their own privacy policies. We recommend reviewing them if you are concerned.

12. Security of your data

We use appropriate technical and organisational measures to protect your data, including:

Secure connections (HTTPS) on our website.
Access controls for staff and systems.
Regular software updates and security patches.
Staff training on data protection.

No system is 100% secure, but we take reasonable steps to protect your information.

13. Changes to this privacy notice

We may update this notice from time to time to reflect changes in our practices or the law. The “Last updated” date at the top will show when it was last changed. Significant changes will be highlighted on our website.

14. Contact us

If you have any questions about this privacy notice or how we use your data:

Email: info@masoomsbodicote.com
Post: Masoom’s Indian Kitchen & Bar, Church Street, Bodicote, Oxfordshire, United Kingdom, OX15 4DW
Phone: 01295 254 353