Privacy Policy

1. Who we are

This website is operated by:

VAT number: 60046699T

Trading name: Naamaste Authentic Desi Street Food

For the purposes of applicable data protection law, L&S Spice’N’Rice LTD is the data controller responsible for the personal data collected through this website.

You can contact us regarding privacy or personal data matters at:

Email: Email available — enable JavaScript to view
Telephone: Phone available — enable JavaScript to view

2. Information we collect

We may collect personal information when you use our website, contact us, or make a reservation.

This information may include:

• Your full name
• Your email address
• Your telephone number
• Your preferred reservation date and time
• The number of guests included in the reservation
• Any message, request, or information you voluntarily provide
• Technical information, such as your IP address, browser type, device type, and website activity
• Cookie preferences and consent records

Please do not include sensitive personal information in the reservation notes unless it is necessary.

Where you tell us about an allergy, dietary requirement, disability, or health related need, we will use that information only to manage your request and provide the requested service.

3. How we collect your information

We may collect information:

• When you complete a reservation form
• When you contact us by telephone, email, WhatsApp, or another communication channel
• When you visit and interact with our website
• When you accept or reject cookies
• When you communicate with a third party booking or reservation provider used by the restaurant

4. Why we use your personal information

We may use your information for the following purposes:

• To receive, manage, confirm, change, or cancel your reservation
• To contact you regarding your reservation
• To respond to questions, requests, or complaints
• To manage restaurant operations and customer service
• To maintain the security and functionality of the website
• To comply with accounting, tax, regulatory, and legal obligations
• To establish, exercise, or defend legal claims
• To understand how visitors use our website, where you have consented to analytics cookies
• To send promotional communications, only where you have specifically consented or where otherwise permitted by law

We will not use reservation information to send marketing messages unless there is a valid legal basis for doing so.

5. Legal bases for processing

We process your personal information under one or more of the following legal bases:

Contractual necessity, when processing is required to manage a reservation or provide a requested service

Legitimate interests, when processing is necessary to operate the restaurant, respond to customers, protect the website, prevent misuse, and improve our services, provided that these interests do not override your rights

Legal obligation, when we must retain or disclose information to comply with applicable law

Consent, when you choose to accept analytics or marketing cookies, receive promotional communications, or provide certain information voluntarily

Explicit consent, where required for information concerning allergies, health conditions, accessibility requirements, or other sensitive information you voluntarily provide

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

6. Reservation information

When you make a reservation, we collect your name, email address, and telephone number.

We use this information to:

• Identify your reservation
• Send or communicate a reservation confirmation
• Contact you if there is a change, question, or issue concerning the reservation
• Manage cancellations, amendments, delays, and special requests
• Prevent fraudulent or abusive bookings
• Maintain an appropriate reservation history for operational purposes

Providing the required booking information is necessary for us to process the reservation. Without it, we may not be able to accept or confirm your booking.

7. Sharing your information

We may share personal information only where necessary with service providers that help us operate the website and manage reservations.

These providers may include:

• Website hosting providers
• Reservation and booking system providers
• Email and communication providers
• Website maintenance and technical support providers
• Analytics providers, where you have provided consent
• Cloud storage and security providers
• Professional advisers, including accountants, legal advisers, and insurers
• Public authorities, regulators, or law enforcement bodies where legally required

Service providers may only process personal information according to our instructions and for the services they provide to us.

We do not sell or rent your personal information.

8. International data transfers

Some service providers may process or store information outside Cyprus or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we will use an appropriate legal safeguard where required, such as:

• An adequacy decision adopted by the European Commission
• Standard contractual clauses approved by the European Commission
• Another lawful transfer mechanism permitted under data protection law

9. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Reservation information will generally be retained for up to 24 months after the reservation, unless a longer period is reasonably necessary for customer service, dispute resolution, fraud prevention, or legal compliance.

Contact requests will generally be retained for up to 12 months after the request has been resolved.

Information required for accounting, taxation, legal, or regulatory purposes may be retained for the period required by applicable law.

Cookie consent records may be retained for as long as reasonably necessary to demonstrate compliance with consent requirements.

When information is no longer required, it will be deleted, anonymized, or securely disposed of.

10. Security

We use reasonable technical and organizational measures designed to protect personal information from:

• Unauthorized access
• Loss or destruction
• Improper disclosure
• Accidental alteration
• Misuse or unlawful processing

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.

11. Your data protection rights

Depending on the circumstances, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of your information
• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Request the transfer of information you provided to us
• Lodge a complaint with a supervisory authority
• Request information about safeguards used for international transfers

These rights are not absolute and may be limited where processing is required by law or where another lawful exception applies.

To exercise your rights, contact:

Email: Email available — enable JavaScript to view

We may ask you to provide information confirming your identity before completing your request.

12. Complaints

You have the right to submit a complaint to the Office of the Commissioner for Personal Data Protection in Cyprus if you believe that your personal information has been processed unlawfully.

We encourage you to contact us first so that we can try to resolve your concern directly.

13. Children’s privacy

The website is not intended to collect personal information directly from children.

Reservations should be made by an adult or by a person legally capable of making the reservation.

If we learn that personal information has been submitted by a child without appropriate authorization, we may delete it.

14. Third party websites

Our website may contain links to third party websites, services, maps, social networks, reservation platforms, or review platforms.

Those third parties operate independently and have their own privacy policies. We are not responsible for their privacy practices or website content.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, legal obligations, or data processing activities change.

The latest version will always be published on this page with the date of the most recent update.