1. Introduction
Marmaris Kebab House (the “Restaurant,” “we,” or “us”) provides this privacy policy with information on how we collect, use and disclose personal information. This Privacy Policy describes our practices in connection with information that we collect through:
The food ordering website from which you are accessing this Privacy Policy (the “Website”);
Email messages that we send to you that link to this Privacy Policy or other communications with you; and
Offline business interactions you have with us.
Collectively, we refer to the Website, email messages, and offline business interactions as the “Services.”
2. Personal information (PI)
The Services collect Personal Information, including:
Name & Contact Details such as first and last name, title, prefix, email address, telephone number, postal address;
Account Information such as username and password;
Order Information such as details of your orders, payment methods (excluding card details if processed online), delivery addresses;
Device and Usage Information such as IP address, browser type, device identifiers, geolocation (if enabled).
3. Collection of PI
We and our service providers collect Personal Information in a variety of ways, including through the Services. For example, we collect Personal Information through the Services when you sign up for an account, place an order, or contact customer services. We need to collect Personal Information in order to provide the requested Services, such as processing orders, delivering food, and communicating with you. If you do not provide certain Personal Information (e.g., name and address for delivery), we may not be able to fulfill your request.
4. Use of personal information
We and our service providers use Personal Information for the following purposes:
Providing the functionality of the Services and fulfilling your requests, including order processing and delivery;
Providing you with our newsletter and/or other (personalized) marketing materials, based on your consent or legitimate interests;
Analyzing Personal Information for business reporting and improving our Services;
Aggregating and/or anonymizing Personal Information for analytics;
Complying with legal obligations, such as tax and regulatory requirements.
5. Disclosure of personal information
We disclose Personal Information:
To our delivery service providers, payment processors, and other third parties necessary for order fulfillment and service provision;
To Oracle, the provider of the Oracle Restaurants eStore platform. We use the Oracle Restaurants eStore platform to manage order taking, our marketing campaigns, and to generate aggregated analytics information, as described above. Oracle processes this data as our processor under a data processing agreement that ensures compliance with applicable data protection laws.
To other recipients as required by law, such as government authorities for fraud prevention or legal claims;
In the event of a business reorganization, merger, or sale, to relevant third parties.
International Data Transfers
Personal Information may be transferred to and processed in countries outside the UK, including the United States (where Oracle is based). For such transfers to countries without an adequacy decision from the UK, we ensure appropriate safeguards are in place, such as the UK Addendum to the EU Standard Contractual Clauses or reliance on the UK Extension to the EU-US Data Privacy Framework (where the recipient is certified). Oracle’s transfers are governed by these mechanisms to protect your data.
6. Security
We seek to use reasonable organizational, technical and administrative measures to protect Personal Information within our organization, including encryption, access controls, and regular security audits. If you have questions about our security practices, please notify us in accordance with the “Contacting Us” section below.
7. Rights and access
Your rights regarding our use and disclosure of your Personal Information.
You have rights regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:
Receiving marketing-related emails from us. If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by: following the unsubscribe link provided in those emails or contacting us via the form on our Website.
Receiving marketing-related text messages from us. If you no longer want to receive marketing related text messages from us on a going-forward basis, you may opt out by: replying “STOP” to any such text message.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages, from which you cannot opt out.
How you can access, change, or delete your Personal Information.
If you would like to request to access, correct, update, suppress, restrict, or delete Personal Information, object to or opt out of the processing of Personal Information, or if you would like to request to receive a copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law, such as the UK GDPR), you may contact us in accordance with the “Contacting Us” section below. We will respond to your request consistent with applicable law. For deletion requests, note that we may retain certain data as required by law (e.g., for tax purposes).
8. Retention period
We retain your Personal Information for as long as necessary for the purposes listed above, such as fulfilling orders (typically 1 year for transactional data to comply with tax laws), marketing (until consent is withdrawn), or legal requirements (e.g., up to 6 years for financial records under UK law). After this, data is deleted or anonymized.
9. Sensitive information
We ask that you not send us, and you not disclose, any other sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, biometrics or genetic or health characteristics, criminal background, or trade union membership) on or through the Services.
10. Contacting Us
Marmaris Kebab House, located at 9 Clifton Road, Rugby, CV21 3PY, is the company responsible for collection, use, and disclosure of your Personal Information under this Privacy Policy.
If you have any questions about this Privacy Policy, please contact us via the contact form on our Website or by post at: 9 Clifton Road, Rugby, CV21 3PY.
Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.
11. Updates to this privacy policy
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. The most up-to-date version can be found on the Website. In case there is an important change that we want to highlight to you, we will also inform you in another appropriate way (for example, via a pop-up notice or statement of changes on our website).
Cookie Policy
Our Website may use cookies to enhance functionality, such as remembering preferences and analyzing usage. For details, see our separate Cookie Policy at https://www.marmariskebabrugby.co.uk/cookie-policy-uk/.
