PRIVACY POLICY

Last Updated: 11/12/2025

INTRODUCTION

Royal China (“we”, “us”, “our”) is committed to protecting the privacy of visitors to our website (the “Site”).
This Privacy Policy explains how we collect, use, disclose and protect personal information provided to us through the Site.

By accessing or using the Site, you accept and consent to the collection, use and disclosure of your personal data in accordance with this Privacy Policy.
If you do not agree with any part of this Policy, please discontinue use of the Site.

This Privacy Policy does not apply to websites linked from our Site (“Third-Party Websites”). You should review their privacy statements separately.

WHO WE ARE AND HOW TO CONTACT US

Royal China
Address: [Insert Business Address]
Email: [Insert Email]
Phone: [Insert Phone]

You may contact us with questions, concerns, or to exercise your data rights under UK GDPR.

PERSONAL DATA WE COLLECT

We may collect the following personal data through the Site:

a. Information You Provide Directly

Name
Email address
Contact number
Billing or address details (if provided during an enquiry or booking)
Booking information
Messages submitted via forms, feedback, comments or enquiries
Marketing or newsletter sign-ups

b. Information You Provide Voluntarily

You may also choose to provide additional information, including:

Dietary preferences or restrictions
Allergy information
Special requests for bookings
Event, private dining, or group booking details
Feedback, survey responses, or comments

This information is collected solely for the purpose of fulfilling your request, improving our services, or delivering a personalised experience. We will not use it for unrelated purposes without your consent.

c. Automatically Collected Data

We may automatically collect aggregated or anonymous data through:

Cookies
Web beacons
Analytics tools (such as Google Analytics)
Server logs

This may include:

IP address
Browser type
Device information
Pages viewed and time spent on the Site
Referral source and clickstream data

HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

To manage reservations and provide services to you
To respond to enquiries, comments and feedback
To send confirmations, updates and necessary service communications
To provide marketing, promotions and special offers (where you have opted in)
To process registrations or sign-ups
To track and analyse website usage
To improve our Site content and user experience
To comply with applicable laws and regulations
To protect our rights, property and customers
To deliver customised content and recommendations

We do not sell or rent your personal data.

RESERVATIONS AND PAYMENT PROVIDERS

We may work with trusted third-party reservation platforms and payment processors to facilitate bookings or online transactions. When you make a reservation, place an order, or submit payment details through such providers, your personal data may be collected and processed directly by those third parties according to their own privacy policies.

These third parties may include (but are not limited to):

Online reservation platforms (e.g., OpenTable, Quandoo, ResDiary)
Online ordering or delivery partners
Payment processors or merchant service providers

We only engage reputable providers and require that they process your data securely and in accordance with applicable data protection laws.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, analytics tools and similar technologies:

To diagnose server or technical issues
To improve and personalise the Site
To customise content and emails to your interests
To track browsing activity for demographic research
To analyse aggregated website traffic and usage statistics

You may disable cookies in your browser settings, but some features of the Site may not function properly as a result.

HOW WE SHARE YOUR PERSONAL DATA

We may share your personal data with trusted third parties where necessary to operate our business, such as:

Website hosting providers
Reservation systems
Email and communication platforms
Analytics providers
IT and security services
Affiliated restaurants or group entities
Professional advisers (legal, compliance, etc.)

We may also disclose personal data:

If required by law, subpoena or regulatory request
If necessary to protect rights, safety, property or to prevent fraud
As part of a business transaction (e.g., merger, acquisition, restructuring)

We may disclose anonymised and aggregated data (which does not identify you) to third parties.

INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred outside the UK where required to provide services (e.g., cloud hosting or email providers).
Where such transfers occur, we implement appropriate safeguards such as:

UK adequacy regulations
Standard Contractual Clauses (SCCs)
Equivalent protections as required by UK GDPR

CCTV FOOTAGES

Our physical restaurant locations may use CCTV for security, safety, and crime prevention purposes.
CCTV footage is captured only within our premises and is not collected via the website.

Footage is retained only for a limited period unless required for investigations, legal claims, or regulatory purposes. Access to CCTV recordings is restricted to authorised personnel only.

SOCIAL MEDIA INTERACTIONS

If you engage with us on social media platforms (such as Instagram, Facebook, TikTok, or others), we may receive personal information that you choose to share publicly or send via direct message.

Please note:

Social media platforms operate under their own privacy policies, which we do not control.
Any content you make public on such platforms may be visible to others.

We recommend reviewing the privacy settings and policies of any social platform you use.

HOW WE PROTECT YOUR INFORMATION

We are committed to protecting the information we receive from you.
We adopt reasonable physical, technical and administrative measures designed to safeguard the confidentiality, integrity and security of personal data stored on our systems.

These measures aim to reduce security risks to a level appropriate for the nature of the data involved.

However, no online system or electronic storage method can be guaranteed as completely secure.
While we take reasonable steps to protect your information, we cannot guarantee absolute security of data transmitted to or from the Site.

RETENTION OF PERSONAL DATA

We retain personal data for as long as necessary to:

Provide our services
Fulfil the purposes set out in this Policy
Meet legal, regulatory, and accounting obligations

If you withdraw consent or request deletion, some data may still be retained where permitted by law.

YOUR RIGHTS UNDER UK GDPR

You have the following rights:

Access — to obtain a copy of your personal data
Rectification — to correct inaccurate or incomplete data
Erasure — to request deletion in certain circumstances
Restriction — to limit how your data is processed
Objection — to object to certain uses (including marketing)
Data Portability — to request data in a machine-readable format
Withdrawal of Consent — at any time, where processing is based on consent

To exercise these rights, contact us using the details in Section 2.

MARKETING COMMUNICATIONS

We will only send marketing messages where you have opted in or where otherwise permitted by law.

You may opt out at any time via:

The “unsubscribe” link in emails
Contacting us directly

THIRD PARTY LINKS

The Site may contain links to Third-Party Websites, including payment gateways or reservation systems whose practices differ from ours.

Once you leave the Site, we no longer control how your data is collected or used.
You access third-party sites at your own risk.

We encourage you to review the privacy policies of any external websites you visit.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with the updated “Last Updated” date.
Please check back periodically for updates.