Privacy & Cookie Policy

1. Who we are (data controller)

Dragon Palace Leeds Ltd, 47 New Briggate, Leeds LS2 8EZ, United Kingdom. Phone +44 113 242 8956, email hello@dragonpalaceleeds.co.uk. If you have a question about your data, contact our manager Sarah Chen using these details. (Owner note: confirm the registered company details and ICO registration number before publishing.)

2. What we collect from our forms

• Booking and contact form: your name, email address, phone number, party size, requested date and time, and any special requests you choose to share (which may include allergy or accessibility information).
• Marketing preference: whether you ticked the optional box to receive occasional news.
• Technical data: the page the form was submitted from, plus the date and time of submission.

Allergy and dietary details are classed as health data. We use them only to prepare your meal safely, and only our kitchen and front-of-house team see them.

3. Why we use it and our lawful basis

• To manage your reservation — necessary to take steps at your request before entering a contract.
• To answer your enquiry — our legitimate interest in responding to customers.
• To keep you safe around allergens — your explicit consent, given when you tell us about an allergy.
• To send marketing emails — only with your consent, which you can withdraw at any time.

4. Where your data is stored

Form submissions are stored in our booking database, hosted by our website and database provider (Totalum) on servers in the EU/UK. Access is limited to restaurant management. We do not sell your data, and we never share it for third-party marketing.

5. How long we keep it

Booking records are kept for 24 months so we can recognise returning guests and resolve disputes. Marketing consents are kept until you unsubscribe. Allergy notes attached to a booking are deleted with that booking.

6. Cookies and embedded content

We use a small number of cookies and similar technologies:

• Strictly necessary — keep the site working and remember your cookie choice (stored in your browser's local storage). These do not require consent.
• Analytics — if enabled and accepted, these help us understand which pages are useful. They are only set after you press “Accept all” in our cookie banner.
• Embedded Google Maps — our contact page embeds a Google map. When it loads, Google may set cookies and process your IP address under its own privacy policy.
• Third-party ordering platforms — links to Deliveroo, Just Eat, Uber Eats and OpenTable take you to their sites, where their own privacy policies and cookies apply.

You can change your choice at any time by clearing this site's data in your browser, which will make the cookie banner appear again.

7. Your rights

You have the right to access, correct, delete or restrict use of your personal data, to object to processing, to data portability, and to withdraw consent at any time. Email hello@dragonpalaceleeds.co.uk and we will respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

8. CCTV and in-restaurant data

CCTV operates in the restaurant for the safety of guests and staff. Footage is retained for 30 days and accessed only by management or, where legally required, the police. Card payments are processed by our payment provider; we never store full card numbers. (Owner note: confirm CCTV retention and payment provider details before publishing.)

9. Changes to this policy

We may update this policy as our services change. The date at the top shows when it was last revised.