Privacy Policy

1. Who we are

SalaThong (“we”, “us”, “our”) operates Thai restaurants in Stevenage and Cambridge, United Kingdom, and the website at this domain. We are the data controller for the personal information described in this policy.

For any privacy question, contact us at the address shown on the Contact page of this website.

2. What we collect

• Contact form submissions: your name, email address, phone number (if provided), the branch you’re writing to, and the contents of your message.
• Reservations: if you book through our booking partner (e.g. ResDiary), they collect booking details (name, party size, date/time, contact details, dietary notes). We receive a copy to manage your booking.
• Technical data: IP address, browser type, device information, pages viewed, and approximate location, collected via cookies and similar technologies (see our Cookie Policy).

3. How we use your information

We process personal data for the following purposes:

• Responding to enquiries you send via the contact form.
• Managing table reservations and guest preferences.
• Operating, securing, and improving our website.
• Complying with our legal obligations (e.g. tax, food safety, allergen record-keeping).

4. Legal bases (UK GDPR)

• Consent — for non-essential cookies and any marketing communications.
• Contract — to fulfil a reservation you have made.
• Legitimate interests — to run our business, respond to enquiries, and keep our site secure.
• Legal obligation — where we are required by law to retain certain records.

5. Sharing your information

We do not sell your personal data. We share it only with trusted service providers who help us run the business, including:

• Our website and hosting providers.
• Our reservation platform (ResDiary or similar) for the Stevenage branch.
• Analytics providers (only if you accept analytics cookies).
• Professional advisers and authorities where required by law.

6. Cookies

Our website uses a small number of cookies. Strictly necessary cookies run by default; analytics cookies are only set if you opt in. Full detail is in our Cookie Policy.

7. How long we keep your information

Contact form messages are kept for up to 24 months after our last correspondence. Reservation records are kept for up to 24 months for operational and guest-experience reasons. Records required by law (e.g. financial records) are kept for the period required by law.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to erase your data, where applicable.
• Restrict or object to certain processing.
• Withdraw consent at any time (e.g. for cookies or marketing).
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details on our Contact page.

9. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is 100% secure, but we work to keep your data safe.

10. International transfers

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards approved under UK GDPR, such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Material changes will be highlighted on our website.