Privacy Policy

Draft — please have this reviewed before launch. It describes how this website actually handles data, but your legal obligations depend on your business.

Who we are

34 Istanbul ("we", "us") is the data controller for personal data collected through this website. Contact: [contact email to be confirmed], 0151 394 1672, 9 Tarbock Road, Huyton, Liverpool L36 5XN.

What we collect

Table bookings: your name, email address, phone number, party size, date and time, and anything you choose to tell us in special requests (which may include dietary or accessibility needs).
Allergies, dietary needs and seating preferences you choose to give us when booking — used only to look after you at your visit and removed with the rest of the booking under our retention policy.
Deposits: if a deposit is required, card payments are processed by Stripe. We never see or store your card number; we keep a payment reference and amount.
Online orders: your name, email, phone, delivery address, what you ordered and any notes (which may include allergy information). Card payments are processed by Stripe; we keep a payment reference and amount.
Contact form: your name, email address, optional phone number and your message.
Newsletter: if you sign up, your email address (and name if you give it), the wording you agreed to, when you agreed, confirmed or unsubscribed, and a one-way hashed version of your IP address.
WhatsApp: if you choose to message us on WhatsApp, that conversation is handled by WhatsApp (Meta) under its own terms; the website only opens WhatsApp with a pre-filled message.
Security logs: a one-way hashed version of your IP address, used to prevent abuse and spam. We cannot turn it back into your IP address.

Why we use it (lawful basis)

To take and manage your booking or order, and send confirmations and updates — performance of a contract.
To respond to your enquiry — legitimate interests.
To keep the website secure — legitimate interests.
To send our newsletter — your consent, which you can withdraw at any time using the unsubscribe link in every email or by contacting us.
Special requests that reveal health information (such as allergies) are used only to look after you at your visit, with your explicit consent given by entering them.

Who we share it with

Our email provider (to send booking and order messages), Stripe (only if you pay by card) and our website host. We do not sell your data or use it for advertising.

How long we keep it

Booking, order and contact details are anonymised automatically 24 months after your visit, order or message, unless we need them longer for a legal reason such as a payment dispute. Newsletter subscriptions are kept until you unsubscribe. Unconfirmed sign-ups are deleted automatically after a short period, and unsubscribed addresses after 24 months.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for data portability. Email [contact email to be confirmed]. You can also complain to the Information Commissioner's Office (ico.org.uk).