Privacy Policy
1. About this policy
This Privacy Policy explains how Lost in Rio Restaurant & Cocktail Bar (“Lost in Rio”, “we”, “us” or “our”) may collect, use and protect personal information when you visit our website, contact us, make a table or event enquiry, or visit our restaurant at 8 The Parade, Barbican, Plymouth, PL1 2JL.
2. Who is responsible for your information?
The website identifies the business as Lost in Rio Restaurant & Cocktail Bar and describes it as an independent restaurant and cocktail bar in Plymouth. The full legal name of the operating entity and its registered address are not clearly stated on the website. Those details should be confirmed and published here before this policy is made live.
For privacy enquiries, contact us at bookings@lostinriorestaurant.co.uk or write to Lost in Rio Restaurant & Cocktail Bar, 8 The Parade, Barbican, Plymouth, PL1 2JL.
3. Information we may collect
Depending on how you interact with us, we may collect:
- Your name, email address and telephone number when you contact us or make an enquiry.
- Reservation details, such as the requested date and time, party size and any information you choose to include in a booking request.
- Event enquiry details, including guest numbers, event type and messages submitted through our private-hire form.
- Dietary requirements or allergy information that you choose to share so that we can consider your request. This may reveal information about your health and should be handled with particular care.
- Information relating to communications, feedback or customer service enquiries.
- Technical information about your use of the website, such as IP address, browser type, device information and pages visited, where collected by website systems or cookies.
4. How we use information
We may use personal information to respond to questions, handle table and private-hire enquiries, communicate about reservations and events, consider dietary or accessibility requests, provide customer service, administer our business, maintain website security and comply with legal obligations.
We may send marketing messages only where we have a lawful basis to do so. Where consent is required, you can withdraw it or unsubscribe at any time.
5. Lawful bases
Under UK data protection law, we must have a lawful basis for each use of personal information. Depending on the circumstances, this may include taking steps at your request before entering a contract, performing a contract, complying with a legal obligation, pursuing legitimate interests such as responding to enquiries and managing restaurant operations, or your consent.
Where you provide allergy or other health-related information, we will only process it where an appropriate condition under UK data protection law applies and the information is necessary for the relevant purpose. Please share only the information needed to help us consider your request.
6. Sharing information
We may share the information necessary with service providers who support our website and business, such as website hosting, email, reservation or enquiry systems, payment providers, IT support and professional advisers, where such providers are used. We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.
The website’s live booking and payment providers have not been confirmed for this draft. The operator should identify the actual providers, review their privacy terms and ensure appropriate data-processing arrangements before publication.
7. International transfers
If a service provider stores or accesses personal information outside the United Kingdom, we will ensure that any restricted transfer complies with UK data protection law and uses an appropriate transfer mechanism and safeguards where required.
8. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including handling enquiries and bookings, managing events, maintaining business records and meeting legal obligations. Retention periods may differ for reservation records, financial records, correspondence, marketing preferences and website logs. The operator should establish and apply documented retention periods for each category.
9. Your rights
Subject to the conditions and exemptions in UK data protection law, you may have the right to request access to your personal information, correction, erasure, restriction of processing, data portability or to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. No internet transmission or electronic storage system can be guaranteed to be completely secure.
11. Cookies
Our website may use cookies and similar technologies for essential operation, preferences, analytics or embedded content. Please see our Cookie Policy for further information. The actual cookie inventory and consent configuration should be checked against the live website before publication.
12. Changes and contact
We may update this policy to reflect changes to our services, website or legal requirements. The latest version will be published on this page. For privacy questions, contact bookings@lostinriorestaurant.co.uk.