Privacy Policy

This privacy notice explains how Tsunami (Clapham) Ltd (“Tsunami”, “we”, “us”) collects, uses and protects the personal data you share with us. We are the data controller for the information we hold about you, and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Tsunami (Clapham) Ltd, 5–7 Voltaire Road, Clapham, London SW4 6DQ. Email reservations@tsunamiclapham.co.uk.

What data we collect

• Reservations: name, email, phone number, party size, date and time, occasion, dietary notes you choose to share.
• Contact form: name, email, phone (optional), message subject and content.
• Newsletter: email address and the date you subscribed.
• Careers: any details you include in your application (CV, cover note).
• Site analytics: if you accept cookies, anonymised information about how you use the site (pages viewed, device type, country). We do not link this back to your identity.

Why we collect it

• To take, confirm and manage your reservation (lawful basis: performance of contract).
• To respond to enquiries, press, careers and private dining requests (lawful basis: legitimate interest).
• To send you our newsletter, only if you have explicitly subscribed (lawful basis: consent — you can unsubscribe any time using the link in every email).
• To improve the site and understand how it’s used (lawful basis: consent, via the cookie banner).

How long we keep it

• Reservation records: three years, after which they are deleted.
• Contact and careers messages: two years, then deleted.
• Newsletter: until you unsubscribe.
• Analytics: retained for 14 months in aggregate.

Who we share it with

We share data only with the third parties needed to operate this site:

• Vercel (hosting), Supabase (database), Resend (transactional email and newsletter delivery).
• Each of these is contractually bound to use your data only as instructed by us, and to protect it appropriately.

We do not sell your data, and we do not share it with marketing brokers.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct any data that is inaccurate.
• Ask us to delete your data (the “right to be forgotten”).
• Restrict or object to how we process it.
• Receive your data in a portable format.
• Withdraw consent for any consent-based processing.

To exercise any of these rights, email reservations@tsunamiclapham.co.uk. We respond within one calendar month.

Complaints

If you’re unhappy with how we’ve handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this notice from time to time. The “last updated” date at the top will always reflect the most recent change.