Privacy Policy

1. Who we are (Data Controller)

The Site is operated by Saidul Islam Khan Samir, trading as The Khan Digital.

Contact: info@mail.seafoodrestaurantlondon.co.uk or the contact form.

Operating location: Dhaka, Bangladesh.

Agency: thekhandigital.com

We operate outside the UK but offer this directory to UK users, so UK GDPR applies to the personal data of UK visitors, see Section 7 on international transfers.

2. What we collect

Information you give us directly

• Add Your Restaurant submissions: restaurant details and your contact information (name, email, phone) so we can review and publish the listing.
• Contact form messages: your name, email address and message, sent directly to our inbox by email so we can reply. We don't keep a separate copy in a database beyond that email.
• Accounts, reviews and listings: if you create an account, we store your email address, and any reviews you write (including uploaded photos) are stored under that account. If you claim or manage a restaurant listing, we collect the business email used to verify ownership.
• Newsletter: your email address, to send occasional notifications about new restaurant listings. Every email includes an unsubscribe link.

Information collected automatically

• Analytics: basic, session-based usage data (page visited, referring page, device type, which restaurants you view, outbound link clicks), tied to a random ID stored only for the length of your browser tab session, not to your name, email or account. This is currently a small in-house system built for this Site, not a third-party analytics service.
• Google Tag Manager / Google Analytics 4: standard web-analytics data (pages visited, referring site, device/browser type, approximate location from IP), only if you accept our cookie banner, see Section 6 and our Cookies Policy for exactly which cookies this sets.
• Cookies and similar technologies: see Section 6. This Site sets no cookies for a visitor who declines or hasn't chosen on the cookie banner; Google Tag Manager/Analytics cookies are set only after you accept.

Restaurant listing data

Restaurant information shown on this Site (name, address, hours, ratings, etc.) is sourced from publicly available Google Business Profile listings, and from direct submissions by restaurant owners. If you run a restaurant listed here and want information corrected or removed, contact us.

3. How we use your information

We do not sell your personal data.

4. Lawful bases (UK GDPR)

• Consent: newsletter emails, withdraw any time via the unsubscribe link in every email; and Google Tag Manager/Analytics 4 (see Section 2), which only loads after you accept our cookie banner and can be withdrawn there at any time.
• Contract: account, review and listing-management features you sign up to use.
• Legitimate interests: responding to enquiries you initiate, running our session-based analytics, publishing publicly available restaurant listing information, and keeping the Site secure, balanced against your rights.
• Legal obligation: where the law requires processing.

5. Third-party services

Each has its own privacy policy:

• Supabase: database, authentication and file storage for accounts, reviews and listings.
• Resend: sends the emails this Site generates (contact form, listing claim verification).
• Vercel: hosts this website and processes server logs needed to deliver it.
• Google Tag Manager / Google Analytics 4: see Section 2, only active if you accept our cookie banner. Google's Privacy Policy.

6. Cookies

This Site does not currently use cookies. Instead, a few features rely on your browser's own local storage, which stays on your device rather than being sent to a server the way a cookie is. See our Cookies Policy for exactly what's stored and why.

Google Tag Manager / Google Analytics 4 (see Section 2) does set real cookies, but only once you accept our cookie banner, if you decline or haven't chosen yet, no Google cookie is set. See our Cookies Policy for exactly which cookies this sets and how to withdraw consent.

7. International data transfers

The Site is operated from Dhaka, Bangladesh. Some of our service providers (Supabase, Resend, Vercel) may process data on servers outside Bangladesh and outside the UK, including in the EU or US, protected by each provider's own standard contractual safeguards. Data you submit is handled as described in this policy regardless of where it's processed.

8. Data retention

• Contact form messages: not stored in a database, kept only as an email in our inbox for as long as needed to handle your enquiry.
• Account, review and listing data: kept while your account remains active, deleted on request or account closure.
• Newsletter: kept until you unsubscribe.
• Analytics: the session ID is cleared automatically when you close your browser tab, nothing is retained beyond that.

9. Your rights

Under UK GDPR you may: access your data; request correction or erasure; restrict or object to processing; request portability; and withdraw consent at any time. Contact us to exercise these.

You may also complain to the Information Commissioner's Office (ICO): ico.org.uk.

10. Children's privacy

This Site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures, including HTTPS across the Site. No internet transmission is 100% secure, so we cannot guarantee absolute security.

12. Changes

We may update this policy, the "last updated" date reflects the current version, and material changes will be highlighted here.

13. Contact

Questions? Email info@mail.seafoodrestaurantlondon.co.uk or use our contact form.