Privacy Policy

Last updated: 1 July 2025

1. Introduction

Kinn Thai Restaurant ("Kinn Thai", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at kinthaiuk.com or place an order with us.

This policy applies to all customers, website visitors, and users of our online ordering service. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Kinn Thai is the data controller responsible for your personal data. If you have any questions, please see the Contact Us section below.

2. Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

Identity & Contact Data

• Full name and title
• Delivery address (including postcode)
• Billing address
• Email address
• Phone number

Order & Transaction Data

• Details of orders you place with us
• Order history and preferences
• Special dietary requirements or allergen notes you provide
• Delivery instructions

Technical Data

• Internet Protocol (IP) address
• Browser type and version
• Time zone setting and location data
• Browser plug-in types and versions
• Operating system and platform
• Device information

Usage & Marketing Data

• Information about how you use our website
• Your preferences in receiving marketing from us
• Communication preferences
• Feedback and survey responses

We do not collect or store any sensitive personal data (such as race, religion, or health information) except for dietary preferences and allergen notes that you voluntarily provide in connection with your food order.

3. How We Use Your Data

We use your personal data only for the following purposes:

• To process and deliver your orders — including taking payment, preparing your food, arranging delivery or collection, and communicating order status.
• To manage your account — including maintaining your order history and preferences.
• To communicate with you — responding to enquiries, providing order updates, and sending service-related messages.
• To improve our service — analysing website usage, customer feedback, and order patterns to enhance your experience.
• To comply with legal obligations — including tax, accounting, and regulatory requirements.
• Marketing — with your explicit consent, we may send you promotional offers, discounts, and news about Kinn Thai. You can opt out at any time.

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data on the following lawful bases:

• Performance of a contract — Processing your order, taking payment, and delivering your food (Article 6(1)(b)).
• Legitimate interests — Improving our website, customer service, and business operations, provided your rights do not override our interests (Article 6(1)(f)).
• Consent — Sending marketing communications and using non-essential cookies (Article 6(1)(a)).
• Legal obligation — Complying with UK tax, accounting, and food safety regulations (Article 6(1)(c)).

5. Payment Processing

All payments made through our website are processed securely by Stripe Payments Europe, Ltd. (Stripe Privacy Policy).

Stripe may retain your payment data in accordance with their own privacy policy. We receive only a payment confirmation (transaction ID, masked card details, and amount) from Stripe to complete your order.

6. Data Sharing & Third Parties

We may share your personal data with the following categories of third parties:

• Payment processors — Stripe (as detailed above).
• Delivery partners — Where applicable, we may share your name, phone number, and delivery address with our delivery team to fulfil your order.
• IT service providers — Our website hosting provider and email service provider who process data on our behalf.
• Legal and regulatory authorities — Where required by UK law or to protect our legal rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell, rent, or trade your personal data to any third parties for their own marketing purposes.

7. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and support our online ordering functionality.

The cookies we use include:

• Essential cookies — Required for the website to function, including session management and cart functionality.
• Functional cookies — Remember your preferences and settings for a better experience.
• Analytics cookies — Help us understand how visitors use our site so we can improve it.

You can control cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our online ordering system.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including any legal, accounting, or reporting requirements.

• Order data — Retained for 6 years after the last order for tax and accounting purposes (as required by UK law).
• Contact and marketing data — Retained until you withdraw consent or request erasure.
• Website usage data — Retained for 26 months in anonymised form.

When data is no longer required, it is securely deleted or anonymised.

9. Your Rights (Under UK GDPR)

As a UK data subject, you have the following rights regarding your personal data:

• Right to be informed — You have the right to be told how we collect and use your data (this Privacy Policy fulfils that right).
• Right of access — You can request a copy of the personal data we hold about you (a "subject access request").
• Right to rectification — You can ask us to correct any inaccurate or incomplete data.
• Right to erasure — You can ask us to delete your personal data where there is no good reason for us to continue processing it.
• Right to restrict processing — You can ask us to suspend the processing of your data in certain circumstances.
• Right to data portability — You can request a copy of your data in a structured, machine-readable format.
• Right to object — You can object to our processing of your data for direct marketing purposes at any time.
• Rights related to automated decision-making — You have rights relating to automated decision-making and profiling.

To exercise any of these rights, please contact us. We will respond to your request within 30 days, free of charge. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection regulator: ico.org.uk.

10. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. These include:

• Encryption of data in transit using TLS 1.3 (HTTPS).
• Secure, password-protected server environments.
• Regular security updates and patches.
• Access controls limiting data access to authorised personnel only.
• Use of PCI DSS-compliant payment processing partners.

11. International Transfers

Your personal data is primarily processed within the United Kingdom. Where we use third-party services (such as Stripe), your data may be transferred to and processed in countries outside the UK. When such transfers occur, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTA) or Adequacy Decisions as recognised by the UK Government.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated "Last updated" date. Where material changes are made, we will notify you by email or a prominent notice on our website.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Kinn Thai Restaurant
• 25A Oxford Street, Southampton SO14 3DJ
• +44 7345 010 447
• kinnthaiuk@gmail.com

Kinn Thai is committed to protecting your privacy. This policy was prepared with reference to the ICO's guidance and the UK GDPR.