Skip to main content

LEGAL

Privacy Policy

Last updated: 15 April 2026

1. Who we are

Bombay 2 Goa (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a restaurant based at:

16 Headingley Lane
Headingley, Leeds
LS6 2AS
United Kingdom

Email: info@bombay2goa.co.uk
Telephone: 0113 513 5972

2. What data we collect and why

DataPurposeLegal basis
Name, phone number, email address, party size, date and timeProcessing table reservations via OpenTablePerformance of a contract
Name, email address, payment detailsProcessing gift voucher purchases via Giftup.ioPerformance of a contract
Name, email address, message contentResponding to enquiries submitted through our contact formLegitimate interests
IP address, browser type, pages visited, time on siteWebsite analytics via Google Analytics to improve our serviceConsent (via cookie banner)

We do not collect any special category data (such as health information) unless you voluntarily provide it in a special request field, for example to notify us of a food allergy.

3. How long we keep your data

We retain personal data only for as long as necessary:

  • Reservation data:retained for 12 months to handle any follow-up queries, then deleted.
  • Gift voucher purchase data:retained for 7 years to comply with HMRC accounting requirements.
  • Contact enquiries:retained for 6 months after the enquiry is resolved, then deleted.
  • Analytics data:retained in aggregated, anonymised form for up to 26 months in line with Google Analytics defaults.

4. Who we share your data with

We use the following third-party processors who may handle your personal data on our behalf:

We do not sell your personal data to any third party and we do not use it for marketing purposes without your explicit consent.

5. Cookies

We use the following types of cookies:

  • Strictly necessary:required for the website to function (e.g. session cookies). These cannot be disabled.
  • Analytics:Google Analytics cookies that help us understand how visitors use our site. These are only set with your consent.

You can manage or withdraw your cookie consent at any time by clearing your browser cookies and refreshing the page.

6. Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

  • Right of access:to request a copy of the personal data we hold about you.
  • Right to rectification:to ask us to correct inaccurate or incomplete data.
  • Right to erasure:to ask us to delete your personal data where there is no lawful reason for us to continue processing it.
  • Right to restrict processing:to ask us to pause processing your data in certain circumstances.
  • Right to data portability:to receive your data in a structured, commonly used format.
  • Right to object:to object to processing carried out on the basis of legitimate interests.
  • Rights related to automated decision-making:we do not carry out any automated decision-making or profiling.

To exercise any of these rights, please contact us at info@bombay2goa.co.uk. We will respond within one calendar month.

7. How to make a complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.