PRIVACY POLICY

Last updated: July 2026

1. Introduction

Luna Restaurant ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lunarestaurant.co.uk (the "Website").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read alongside our Terms of Service and Acceptable Use Policy.

2. Data Controller

Luna Restaurant is the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your data protection rights, contact us at:

  • Email: info@lunarestaurant.co.uk
  • Phone: 020 3621 6350
  • Address: 19 Rosslyn Hill, Hampstead, London NW3 1ND

3. Information We Collect

Information You Provide

When you make a reservation, enquiry, or contact us, we may collect:

  • Name (first and last)
  • Email address
  • Phone number
  • Event type and date preferences
  • Special requests or dietary requirements
  • Any other information you choose to provide

Information Collected Automatically

When you visit our Website, certain information is collected automatically:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on pages
  • Referring website or source

4. How We Use Your Information

We use your personal data for the following purposes:

  • Reservation Processing: To confirm and manage your table bookings
  • Enquiry Responses: To respond to private dining and other enquiries
  • Communication: To send booking confirmations and important updates
  • Service Improvement: To improve our Website and customer experience
  • Legal Compliance: To comply with legal obligations
  • Security: To protect against fraud and ensure website security

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary to fulfil a reservation or enquiry
  • Legitimate Interests: For security, fraud prevention, and service improvement
  • Consent: Where you have given explicit consent (e.g., marketing)
  • Legal Obligation: Where required by law

6. Third-Party Services

We use trusted third-party services to operate our Website. These services may process your data as described below:

Vercel (Hosting)

Our Website is hosted on Vercel. Vercel may process technical data (IP addresses, request logs) to provide hosting services. See Vercel's Privacy Policy.

Cloudflare (DNS and Security)

We use Cloudflare for DNS services and security features. Cloudflare processes technical data to provide these services. See Cloudflare's Privacy Policy.

Cloudflare Turnstile (Bot Protection)

We use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile collects the following data to verify that visitors are human:

  • IP address
  • TLS cipher suite and fingerprint
  • User-Agent header
  • Browser characteristics

Cloudflare states that these signals do not directly identify individuals and are processed in accordance with their privacy practices. For more information, see Cloudflare's Privacy Policy and the Cloudflare Turnstile Privacy Addendum.

Resend (Email Service)

We use Resend to send reservation confirmations and respond to enquiries. Your email address and message content are processed by Resend to deliver these communications. See Resend's Privacy Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Reservation data: Up to 2 years after your visit
  • Enquiry data: Up to 1 year after the enquiry
  • Technical logs: Up to 90 days

Data may be retained longer if required by law or to protect our legal interests.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of processing
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@lunarestaurant.co.uk. We will respond within one month.

9. International Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

10. Cookies

Our Website uses essential cookies necessary for the Website to function properly. These cookies do not require consent under UK law as they are strictly necessary.

We do not currently use analytics or marketing cookies. If this changes, we will update this policy and seek appropriate consent.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all data transmission
  • Cloudflare security services for DDoS protection
  • Bot protection through Cloudflare Turnstile
  • Secure hosting infrastructure through Vercel

While we take reasonable precautions, no method of transmission over the internet is completely secure.

12. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

  • Email: info@lunarestaurant.co.uk
  • Phone: 020 3621 6350
  • Address: 19 Rosslyn Hill, Hampstead, London NW3 1ND