What we collect
When you make or manage a booking, we may collect:
- the lead guest’s name and email address;
- a mobile number where provided;
- the names of other guests included in the booking;
- event, ticket, payment and booking-reference information;
- menu preferences, dietary requirements and allergy information;
- messages you send to us; and
- marketing preferences where you actively choose to receive updates.
Your name and email address are required to process the booking and send the ticket. A mobile number is optional unless we tell you otherwise for a particular event.
Why and how we use your information
We use booking information because it is necessary to take steps at your request and perform our contract with you. This includes reserving seats, processing the booking, sending confirmations, providing event information and responding to booking changes.
We use payment, transaction and accounting information to comply with legal, tax and record-keeping obligations.
We may use limited contact and booking information where necessary for our legitimate interests in operating, protecting and improving Athaazham, provided those interests are not overridden by your rights.
We send marketing messages only where you have opted in or where another lawful basis applies. You can withdraw marketing consent at any time.
We do not sell your personal information.
Dietary and allergy information
Allergy information can reveal information about a person’s health and may be treated as special-category personal data. We ask you to provide it only so that we can assess requests and prepare and serve the meal as safely as reasonably possible.
When you submit dietary or allergy information, you confirm that you have permission to provide information about any other guest included in your booking and expressly consent to our processing it for this purpose. You may withdraw that consent, but doing so can affect whether we are able to accommodate the booking safely.
We cannot guarantee an entirely allergen-free environment. Guests with severe allergies should contact us before purchasing a ticket.
Payments
Payments are processed securely by Stripe. Athaazham receives payment status, amount, booking and transaction information but does not see or store your full card details.
Service providers and sharing
We share personal information only where necessary to operate the website, process bookings, deliver emails or meet legal obligations. Providers may include:
- Stripe, for payment processing;
- Cloudflare, for website hosting, security and booking-database services;
- Zoho Mail, for business email and customer communications;
- Resend, when used to send automatic booking confirmations and host notifications; and
- professional advisers, regulators, public authorities or insurers where disclosure is required or reasonably necessary.
These providers process information under their own terms and privacy arrangements or on our instructions, depending on the service.
International processing
Some service providers may process information outside the United Kingdom. Where this happens, we rely on the provider’s appropriate legal safeguards, such as adequacy regulations, contractual protections or other lawful transfer mechanisms.
How long we keep your information
We keep booking, payment and financial records for as long as reasonably necessary to administer the event and meet legal, tax, accounting and dispute-resolution obligations. This will commonly mean retaining core transaction records for up to six years after the relevant accounting period.
Dietary and allergy details are kept only for as long as reasonably necessary for the event, any immediate follow-up and the handling of a concern or claim, unless a longer period is required by law.
Marketing information is kept until you unsubscribe, withdraw consent or ask us to remove it, subject to maintaining a minimal suppression record where necessary to respect your request.
Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask for deletion or restriction of processing;
- object to certain processing;
- receive certain information in a portable format; and
- withdraw consent where processing relies on consent.
These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before responding.
Cookies and similar technologies
We currently use only technologies that are necessary to operate and secure the website and payment process. If we introduce analytics, advertising or other non-essential technologies, we will update this notice and request consent where required.
Contact and complaints
To ask a privacy question, exercise a right or withdraw consent, email [email protected].
We will try to resolve concerns directly. You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk.