Privacy Policy


In Brief:
This privacy policy tells you what we do with your information, what rights you have with regards to it, and anything else we think you should know. Last updated: 24th May 2018.


1. Information we collect
We collect personal information when you make a reservation or a payment, when you buy or redeem vouchers, and when you get in touch with the reservations and feedback team.

2. How we use your information
We may use this information to respond to and fulfil your requests, manage and promote our restaurants, comply with applicable law, and as otherwise permitted by applicable law.

3. How we share your information
We may share your information with our suppliers to provide reservation, wi-fi and payment services, or as otherwise permitted by applicable law.

4. What cookies we use
We may use cookies (and other technology) to improve the performance of our website and to personalise your experience.

5. How long we hold information
We may share your information with our suppliers to provide reservation, wi-fi and payment services, or as otherwise permitted by applicable law.

6. International transfers
We may need to transfer your information outside of your home country. To protect your information, any such international transfers will be made in accordance with applicable law.

7. Call monitoring
We record and monitor telephone calls to help us improve our service and train our team.

8. Third party links
Our website may contain links to other sites and platforms (such as our reservations provider) which are not owned or managed by us, and which have their own privacy policies.

9. Your rights
You have the right to opt out of receiving marketing communications, to receive a copy of the data we hold, and to update your personal data.

10. Changes to this policy
We will let you know about any material changes to this policy via an update on our website, and as otherwise required by applicable law.

Contact us
If you have any questions about your information and what we do with it, please send an email to


In Detail:

1. About Us
This policy describes the processing of your personal data in relation to your use of this website by Kashmir Restaurant UK ( (the “Site”)) (“we”, “us” or “our”), as the owner and operator of this website. It also applies to any personal information we collect when you visit our restaurants or otherwise interact with us. Our head office is located at 18 – 20 Lacy Road, Putney, London, United Kingdom, SW15 1NL.

For the purposes of applicable data protection law (including the General Data Protection Regulation 2016/ 679 (the “GDPR”), we are a ‘data controller’ of your personal data (“your information”). Where applicable, this policy should be read alongside our reservations or wi-fi terms of use which tell you about the basis on which you may book a table or sign up for wi-fi.

2. What personal information do we collect?
Kashmir Restaurant UK ( (the “Site”)) collects personal data when you visit one of our restaurants, sign in for our wi-fi, contact us, or visit our website. This information may include:

– The information you provide when you book a table (contact name, phone number, email address and any additional notes you may provide such as an anniversary or birthday details)
– Transaction and billing information when you purchase food and drink in our restaurants (e.g. your purchase and credit/debit card details used to process a payment)
– Records of your conversations with us over the phone, by email or on social media
– The information you provide if you attend an event (e.g. when buying a ticket)
– The information you provide if you enter a competition or complete a survey (e.g. providing feedback)
– The information you provide when you buy or redeem vouchers or loyalty cards

Automatically Collected Information from Google Analytics when you visit our website (such as web browser type and version, operating system, the website you came from and exit to, your IP (Internet Protocol) address, your browser settings, the date and time of your visits, and details regarding your interaction with the website (including which pages or resources on the website you access and whether you clicked on a link in one of our email newsletters or social media posts)

3. How do we use personal data?
Depending on how you use our restaurants and website and the permission you have given us, we process your personal data for the following purposes:
Contractual Necessity: As required to establish and fulfil a contract with you, for example: when you make a purchase from us (this includes taking payments in a restaurant or via the website, or making a reservation); communicating with you and providing customer services;

Legitimate Interests: Because it is in our legitimate interests in operating our business. In particular:

– managing, operating and improving online, email and phone reservations (including enabling you to manage your marketing preferences);
– managing, operating and improving our service whilst you are visiting our restaurants (including ensuring that we provide a personal service such as helping to celebrate birthdays or anniversaries if you have provided these details)
– managing access to wi-fi services whilst in the restaurant (including enabling you to manage your marketing preferences)
– monitoring our restaurants via CCTV cameras to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
communicating with you about any queries or complaints to our reservations or feedback team;
– investigating and handling any complaints received from you about our restaurants, or anything else;
– creating user/customer insights based on demographic segments to drive targeted email direct marketing and also carrying out market research and surveys;
– delivering tailored advertising to promote our restaurants (including via Facebook look-a-like and custom audiences);
– we will use data in connection with legal claims which concern our company, group or partners, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);

You can obtain further information on the legitimate interests balancing exercises.

Legal Compliance: To ensure compliance with applicable laws and legal processes including, but not limited to, use in connection with legal claims, compliance, regulatory, tax, investigative purposes (including disclosure of such information in connection with legal process or litigation and to law enforcement agencies).

Consent: Subject to the following, we will send you direct marketing by email about Kashmir Restaurant ( (the “Site”)) products and services that we think you might be interested in. This will only be sent where you have given us your consent during the reservation process, in person when you completed a voucher, via online wi-fi sign up, via email newsletter sign up or (where permissible) you have been given an opportunity to opt out. If you change your mind about receiving our emails you will be able to opt out of electronic direct marketing by clicking the unsubscribe link contained in the email itself.

4. Who will your personal data be shared with, and where?
We will share your personal data with third parties in the following circumstances:

– With our suppliers and service providers working for us such as payment providers, reservations service providers, communications providers, wi-fi service providers
– With our professional and legal advisors
– With third parties engaged in fraud protection and detection
– With government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our own legitimate interests in compliance with applicable laws; and
– In the event that we sell any business assets, purchasers or prospective purchasers of all or part of our assets or our business, and their professional advisers, in connection with the purchase.

Otherwise where we have your consent or are otherwise legally permitted to do so.

5. What cookies will be used on the website?
Like other websites, information and data on the Kashmir Restaurant UK ( (the “Site”)) website may be automatically collected through cookies and similar technologies. Cookies are small files placed on website users’ hard drive to distinguish you from other users of the website. This helps us to provide you with a high-quality experience when you browse the website and also allows us to improve the website. We use cookies to analyse the flow of information; customise the services and content; measure promotional effectiveness, and promote trust and safety.

Most browsers automatically accept cookies, but if you do not want information collected through the use of cookies, there is a simple process in most browsers to deny or accept cookies. More detail on how businesses use cookies is available here.

On our site we use the following types of cookies:

– Strictly Necessary Cookies: Some cookies are essential for the operation of the website. For example, some cookies allow us to identify users and ensure they can access the website. If a user opts to disable these cookies, the user may not be able to access certain content or features on the website.

– Performance Cookies: Other cookies may be used to analyse how users use the site and to monitor site performance. This allows us to provide a high-quality experience by customising the offering and quickly identifying and fixing any issues that arise. For example, performance cookies may be used to keep track of which pages are most popular and to determine why some pages are receiving error messages.

– Functionality Cookies: These are used to allow us to remember customer selections and preferences and tailor the website to provide enhanced features.

– Social Media Cookies: These cookies allow users to share what they’ve been doing on the website on social media such as Facebook and Instagram. These cookies are not within our control. Please refer to the respective social media providers’ privacy policies for how their cookies work.

– Google Analytics: Google Analytics is a web analysis service provided by Google, Inc. We use Google Analytics to monitor how visitors use our website, to compile reports and to help us improve the website. Please see Google’s privacy policy here for further information on the data Google collects and how it is processed. If you prefer to not have data reported by Google Analytics, you can install the Google Analytics Opt-Out Browser Add-On by following the instructions here.

6. How long will you hold my data?
Where we process personal data for marketing purposes or where you have given your consent, we process the data until you ask us to stop for a short period after this (to allow us to implement your requests), or for up to 24 months at which point we will contact you to check you still want to hear from us. We also keep a record of your email address if you have unsubscribed, or you have asked us not to send you direct marketing so that you do not receive marketing emails in future.

Where we process personal data for a reservation we retain it for 12 months after that our records are anonymised (personal data is deleted). The anonymised data may be used to provide management information and historical analysis.

Where we process personal data for any other purpose, including when you make a complaint, provide feedback or buy a voucher, we retain it for 24 months. After that, your data may be anonymised (personal data is deleted). The anonymised data may be used to provide management information and historical analysis.

We will also maintain records for invoicing, tax and warranty purposes.
We may keep a record of correspondence relating to queries and complaints for as long as necessary to protect us from legal claims.
Where we no longer have a need to keep your information we will delete it.

7. Where will you send my data?
Our servers are kept in the UK, however, Kashmir Restaurant ( (the “Site”)) uses service providers around the world. Consequently, your personal data may be processed in countries outside Europe (the “EEA”) (i.e. all 27 EU Member States plus Iceland, Liechtenstein and Norway) including in countries where the local laws do not provide the same level of data protection as those in Europe.

Where this is the case, and where the transfer is to a country or territory that is not subject to an adequacy decision by the EU Commission, personal data is adequately protected by EU Commission-approved standard contractual clauses (which have been implemented pursuant to Article 42 (2) of the GDPR) or the EU-US Privacy Shield.

8. Telephone call monitoring
If you contact us by telephone we may monitor or record the call for training purposes, and to improve the quality of services that we provide to you.

9. Third party links
Kashmir Restaurant ( (the “Site”)) may include links to websites operated by third parties (such as our reservations service). These linked sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content or activities of these linked sites. However, we welcome any feedback about these linked sites via the contact details given below.

10. Minors
We do not knowingly collect or store any personal information about children under the age of 13 and we do not offer any of our products or services directly to children under the age of 13.

11. What rights do you have regarding personal information?
You are entitled to ask us:

– for a copy of your personal data;
-to correct your personal data (if it is inaccurate, incomplete or not up-to-date);
– to ‘port’ your personal data (i.e. to transfer in a structured, commonly used and machine-readable format, to you or another data controller);
– to erase your personal data; or
– restrict its processing (i.e. processing will temporarily stop (save to the extent that personal data will continue to be stored)).

You also have rights to object to some processing that is based on our legitimate interests, and to processing for direct marketing purposes. Further, where we have asked for your consent to process your data, you are entitled to withdraw this consent as more fully described above.

These rights are limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your personal data. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

Where we require your personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship with you or to meet obligations placed on us.

If you have unresolved concerns you are entitled to contact the UK Information Commissioners Office if you have any concerns.

12. Facebook Ads
We may use Facebook advertising services to deliver content to you while you are using the Facebook platform. You can control how Facebook uses data to show you ads by turning off ads which may be based on interests and/or your relationship with specific advertisers, in your ad preference settings. For further information, please visit the various Facebook pages which allow you to learn more about Facebook ads and tracking technologies and to update your settings:

Further, by visiting Your Online Choices, you can opt out from seeing Facebook’s interest-based ads. You can also use your mobile device settings to configure your advertising preferences.
On your Facebook ad preferences, you will see that ads may be delivered to you according to ‘interests’ or specific advertisers and you can manage your ad preference settings for both of these.
Please note that where you have opted out of receiving our email marketing communications via the methods described above, you may still see our non-targeted adverts whilst you are online if your interests settings on Facebook are aligned to an audience segment (pre-defined by Facebook) which our business is also associated with. We do not control whether these ads are displayed to you. Please see the relevant links above for details on how to learn more and manage Facebook ad settings.
Users are always free to decline cookies if their browser permits, although doing so may interfere with their use of the website. Please find detailed information on how to disable cookies here.

13. Contact us
We are happy to respond to any queries you may have about the way we process your personal data. If you have any questions or concerns about this policy or the way we process your personal data, please contact us at

14. Changes to this policy
Any changes we may make to this policy in the future will be updated on our website and, where appropriate, notified to you by email or otherwise. The policy was last updated on 24th May 2018 to comply with GDPR. The previous/old policy may be invalid after 24th May 2018.


Previous/Old Policy:

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the Data Protection Act 1998 (the Act), the data controller is Captivate Hospitality, 22 Lisson Grove, London NW1 6TT.


We may collect and process the following data about you:

information that you provide by filling in forms on our site (the “Site”). This includes information provided at the time of registering to use the Site, subscribing to our newsletter, posting material or requesting further services, completing any surveys or reporting any problem with the Site; records of your correspondence (if any) with us; details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access; We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.


We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information. This is statistical data about our users browsing actions and patterns and does not identify any individual.


For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve the Site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate. They enable us:

  • to estimate our audience size and usage pattern;
  • to store information about your preferences, and so allow us to customise the Site according to aggregate preferences;
  • to speed up your searches; and
  • to recognise you when you return to the Site.

The main cookies that we use provide us with valuable data about our website.

Our website is built using technology by WordPress and this also uses cookies that help the site to work better for you and monitors the pages that you visit. Again, this is completely anonymous and is stored on your computer for a very short period of time.

We also link to other websites such as Twitter, YouTube and Facebook. We’re pretty sure that they use the same kind of cookies but as these sites are not controlled by us, we can not guarantee the cookies that they are using and suggest that you read their privacy policies to be absolutely sure.

We really hope that this is ok, but if you are really unhappy with cookies being used, the best way around this is to turn it off in your browser settings so that they are not used on any website. To do this, you can go to your privacy settings in either Tools or Options depending on your browser. If you want to clean out all tracking cookies from all your Web sites, here are links where you can download three programs that can clean out tracking cookies:


The data that we collect from you may be transferred to and stored at, a destination outside the European Economic Area (“EEA”). By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Site, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will use our best endeavours to protect your personal data, we cannot guarantee the security of your data transmitted to the Site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.


We use information held about you in the following ways:

  • to ensure that content from the Site is presented in the most effective manner for you and for your computer;
  • to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;
  • to carry out our obligations arising from any contracts entered into between you and us;
  • to allow you to participate in interactive features of our service when you choose to do so; and
  • to notify you about changes to our service.

We may also use your data to provide you with information about goods and services which may be of interest to you. We will not provide your data to third party advertisers or suppliers. We may use third-party service providers to help us operate our business and the Site or administer activities on our behalfs, such as sending out newsletter or surveys. We may share your information with those third parties for those limited purposes.
If you do not want us to use your data in this way, please notify us using our “Contact Us” form. If you have opted into our mailing list and wish at any time to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or you may unsubscribe via our “Contact Us” form.


We may disclose your personal information to third parties:

    • if Captivate Hospitality or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers and users of the Site will be one of the transferred assets;
    • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements;
    • or to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing at any time by contacting us using our “Contact Us” form.

The Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.


The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.


Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.


Questions, comments and requests regarding this privacy policy are welcomed and may be addressed to us via our “Contact Us” form.