Legal
Privacy Policy
Last updated: 4 July 2026
This policy explains how Royâ(“we”, “us”, “our”) of 59 Elmbank Street, Glasgow G2 4PQ, collects and uses your personal data. We are the data controller for the information you provide to us.
Who to contact
For any privacy question or to exercise your rights, email hello@royarestaurant.co.uk or write to us at the address above.
What we collect
- Booking information — name, email, phone number, party size, date/time, dietary notes and requests (via our reservation provider, SevenRooms).
- Gift voucher purchases — name, email and payment details (via our voucher provider, ResDiary, and its payment processor).
- Enquiries & careers — anything you send us by email or contact form, including CVs.
- Newsletter — your email address, if you subscribe.
- Website usage — cookies and analytics data (see our Cookie Policy).
How we use it
- To take and manage your booking, voucher or order.
- To respond to enquiries and job applications.
- To send marketing emails only where you have opted in — you can unsubscribe at any time.
- To improve our website and understand how it's used (analytics, only with your consent).
- To meet our legal and accounting obligations.
Legal bases (UK GDPR)
We rely on: contract (to fulfil your booking/order), consent(marketing, non-essential cookies), legitimate interests (running and improving the restaurant), and legal obligation (e.g. tax records).
Sharing your data
We share data only with providers who help us operate: our reservation provider (SevenRooms), voucher provider (ResDiary), payment processors, email/newsletter and analytics tools, and IT hosting (Vercel). We do not sell your data. Some providers may process data outside the UK/EEA under appropriate safeguards.
How long we keep it
We keep personal data only as long as necessary for the purpose collected, then delete or anonymise it. Financial records are kept for the period required by law.
Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Contact us to exercise these. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes
We may update this policy; the latest version will always be on this page.