Privacy Policy

1. Introduction

This Privacy & Cookies Policy explains how Tampopo Ltd. (we, our, us) collects, uses and protects your personal information when you visit tampopo.co.uk or interact with our restaurants, booking systems and marketing channels. We process personal data in accordance with the UK GDPR, the EU GDPR, and the Privacy and Electronic Communications Regulations (PECR).

By using our website or providing personal data, you acknowledge this policy.

2. Data Controller

Tampopo Ltd.
Fourth Floor, Unit 5b The Parklands, Bolton, United Kingdom, BL6 4SD

Privacy contact: info@tampopo.co.uk

We do not appoint a Data Protection Officer (DPO). Please direct all privacy enquiries to the contact above.

3. Personal Data We Collect

We may collect the following categories of data through our website and related services:

• Identity & Contact Data: name, email address, phone number, date of birth.
• Booking Data: reservation details (date, time, venue, group size), special requests.
• Payment Data: payment information processed by trusted third parties (ResDiary, GiftPro).
• Technical Data: IP address, device and browser information, and cookies/analytics signals.
• Marketing Preferences: newsletter opt-in status and communication choices.
• Feedback & Enquiries: messages and details submitted via contact/feedback forms and competitions.
• Job Applications: CVs and application details submitted via our careers page.

4. How We Collect Data

• Newsletter sign-up (Brevo) and marketing preferences forms.
• Online bookings via ResDiary.
• Contact & feedback forms, and competitions/promotions.
• Careers/job applications submitted online.
• Analytics & tracking (Google Analytics 4, Meta Pixel, TikTok Pixel, RankMath signals).

5. Purpose and Lawful Basis for Processing

We process personal data for the purposes and lawful bases below:

• Manage bookings and restaurant operations — Contract performance.
• Respond to enquiries and feedback — Legitimate interests (effective customer service).
• Send marketing emails — Consent (opt-in and double opt-in via Brevo).
• Recruitment & job applications — Consent / pre-contractual steps.
• Analytics and site improvement — Consent (via cookie banner).
• Legal and security compliance — Legal obligation.

6. Marketing Communications

We send marketing emails only if you have explicitly opted in. We use a double opt-in process managed by Brevo. You can withdraw consent at any time by clicking unsubscribe in our emails or contacting info@tampopo.co.uk. We do not send SMS marketing.

7. Cookies & Tracking Technologies

We use cookies and similar technologies, managed through Complianz with integrations from Cookiedatabase.org for up-to-date descriptions.

You can manage or withdraw consent at any time via Cookie Settings. A detailed, automatically generated cookie table is available within our cookie banner interface.

8. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this policy:

• Booking & transaction records: 3 years from last visit.
• Marketing list data: until you unsubscribe or withdraw consent.
• Job applications: 12 months after a recruitment round closes (unless we obtain consent to keep longer).
• Feedback/complaints: up to 3 years for quality assurance and legal reasons.
• Analytics data: as per each provider’s controls (e.g., Google Analytics default 26 months, configurable).

9. Data Sharing and Third Parties

We share data with trusted processors that help deliver our services under contracts that ensure confidentiality and GDPR compliance, including:

• Brevo — email marketing and automation.
• ResDiary — reservations and booking management.
• GiftPro — online gift voucher sales and payments.
• Google Analytics 4 / Google Ads — analytics and advertising.
• Meta & TikTok Pixels — advertising performance tracking.
• HostArmada (hosting) and, when enabled, Cloudflare (CDN/security).

10. International Data Transfers

Some partners (for example, Brevo, Google LLC, and Meta Platforms Inc.) may process data outside the UK/EEA. Where this occurs, transfers are protected by EU Standard Contractual Clauses together with the UK Addendum or other safeguards approved by the UK Information Commissioner’s Office.

11. Data Security

We apply appropriate technical and organisational measures to protect personal data, including encryption, secure servers and access controls. No internet transmission is completely secure; any transmission is at your own risk.

12. Your Rights

Under UK/EU data protection law you have the right to:

• Request access to your personal data.
• Request correction or deletion.
• Restrict or object to processing.
• Withdraw consent at any time.
• Request data portability.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, contact info@tampopo.co.uk. You can learn more or complain to the ICO at ico.org.uk/make-a-complaint/.

13. Children’s Data

Our website and services are not intended for children under 16, and we do not knowingly collect children’s data.

14. Links to Other Websites

Our website may link to external sites (for example, booking or social platforms). We are not responsible for their privacy practices. Please review their policies before submitting personal data.

15. Policy Updates

We may update this policy to reflect changes in law or how we operate. The latest version will always be available at tampopo.co.uk/privacy-policy. Where appropriate, we will notify significant changes via website notice or email.

16. Contact

Email: info@tampopo.co.uk
Post: Tampopo Ltd, Fourth Floor, Unit 5b The Parklands, Bolton, BL6 4SD, United Kingdom

17. Cookies Summary for Visitors

We use the following categories of cookies on tampopo.co.uk:

• Necessary — site functionality and security.
• Analytics — usage and traffic measurement (e.g., Google Analytics 4, RankMath signals).
• Marketing — personalised ads and measurement (e.g., Meta, Google Ads, TikTok).
• Preferences — remember your choices.

Manage your choices any time via Cookie Settings.

18. Legal Notice

This policy forms part of our website terms and applies to all visitors of tampopo.co.uk. It is governed by the laws of England and Wales.