Privacy Policy
Who We Are
This privacy policy explains how Viva Cuba Leeds (“Viva Cuba”, “we”, “us” or “our”) collects, uses and protects your personal data when you visit our restaurant, use our website at vivacubaleeds.co.uk, make a reservation, order food, buy a gift voucher, contact us, or otherwise interact with us.
We are the data controller responsible for your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Registered address / trading address: 342 Kirkstall Road, Leeds, LS4 2DS.
Contact email: info@vivacubaleeds.co.uk
Contact phone: 0113 275 0888
The personal data we collect
We collect personal data in the following ways:
Table reservations and gift vouchers
When you book a table or buy a gift voucher through our website, this is handled by our booking partner ResDiary. We (and ResDiary, acting on our behalf) collect your name, email address, phone number, and details of your booking such as date, time and party size. Gift voucher purchases also involve payment card details, which are collected and processed securely by ResDiary and its payment provider – we do not see or store your full card details.
Event and function enquiries
If you contact us about hosting a wedding, business function, birthday or other event, we collect your name, contact details, and any information you give us about your event so that we can respond to your enquiry and plan the event with you.
Takeaway and collection orders
If you place a collection or takeaway order through our website, we collect your name, contact details and order details in order to prepare and fulfil your order.
Orders through Uber Eats
If you order through Uber Eats, your order and payment are handled directly by Uber Eats under its own privacy policy – we only receive the order and contact details needed to prepare your food and fulfil the order.
General enquiries
If you contact us by phone, email or social media, we collect whatever information you provide (such as your name, contact details, and the content of your message) so that we can respond to you.
Job applications
If you apply for a job with us, whether by email, in person or through a job listing, we collect the personal data contained in your CV, application or covering message, such as your name, contact details and employment history, in order to consider your application.
CCTV
We operate CCTV at our premises for the safety and security of our customers, staff and property. CCTV footage may capture images of customers and visitors while on site. Footage is used only for security, crime prevention and staff/customer safety purposes, is kept for a limited period, and is only accessed by authorised staff or, where necessary, law enforcement.
Website and cookies
Our website may use cookies and similar technologies, including for embedded content such as Google Maps, our Instagram feed, and the ResDiary booking widget. See section 7 (Cookies) below for more detail.
How we use your personal data
We use your personal data to:
- Take, confirm and manage table reservations, event bookings and takeaway/collection orders
- Process gift voucher purchases
- Respond to enquiries, questions and feedback
- Communicate with you about your booking or order (for example, confirmations or changes)
- Maintain the safety and security of our premises, staff and customers (CCTV)
- Consider job applications
- Comply with our legal, tax and food hygiene obligations
- Improve our website and services
We do not use your personal data for automated decision-making or profiling, and we do not sell your personal data to third parties.
Our legal basis for using your data
Under UK GDPR, we rely on the following legal bases:
- Performance of a contract – to take and fulfil your booking, order or voucher purchase
- Legitimate interests – to respond to enquiries, keep our premises secure (CCTV), and improve our services, where this does not override your rights and interests
- Consent – where you have given specific consent, for example for optional marketing communications or non-essential cookies (you can withdraw this at any time)
- Legal obligation – to meet requirements such as food safety, tax and employment law
Who we share your data with
Under UK GDPR, we rely on the following legal bases:
- Performance of a contract – to take and fulfil your booking, order or voucher purchase
- Legitimate interests – to respond to enquiries, keep our premises secure (CCTV), and improve our services, where this does not override your rights and interests
- Consent – where you have given specific consent, for example for optional marketing communications or non-essential cookies (you can withdraw this at any time)
- Legal obligation – to meet requirements such as food safety, tax and employment law
How long we keep your data
We keep personal data only for as long as necessary for the purpose it was collected:
- Booking, order and enquiry details: typically up to 24 months, or as required to resolve any dispute or complaint
- Gift voucher records: for the life of the voucher plus a reasonable period afterwards for accounting purposes
- CCTV footage: typically 30 days, unless needed for longer as part of an investigation or legal process
- Job applications: up to 6 months if unsuccessful, unless you ask us to delete it sooner
- Records we must keep for legal, tax or food safety reasons: for as long as the law requires
Cookies
Our website may use cookies and similar technologies to make it work properly and to understand how it’s used. These may include:
- Essential cookies – needed for core website functionality, such as the ResDiary booking widget
- Analytics cookies – to help us understand how visitors use the site, if analytics tools such as Google Analytics are in use
- Third-party embed cookies – set by embedded content such as Google Maps or our Instagram feed
You can control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the website work, such as the booking widget.
Keeping your data secure
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure. Payment details for bookings and vouchers are handled directly by ResDiary and its payment provider under their own security measures – we do not store full card details ourselves.
Your rights
Under UK GDPR, you have the right to:
- Ask us what personal data we hold about you and get a copy of it (right of access)
- Ask us to correct inaccurate or incomplete data (right to rectification)
- Ask us to delete your data, where there is no good reason for us to keep it (right to erasure)
- Ask us to restrict how we use your data in certain circumstances (right to restriction)
- Object to us using your data for certain purposes, including direct marketing (right to object)
- Ask us to transfer your data to another organisation, where technically feasible (right to data portability)
- Withdraw consent at any time, where we rely on consent as our legal basis
To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by law.
If you are unhappy with how we have handled your personal data, you also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website: ico.org.uk. Helpline: 0303 123 1113.
Children's data
Our services are aimed at adults and families dining or booking events with us. We do not knowingly collect personal data directly from children without the involvement of a parent or guardian, for example as part of a family booking or event enquiry made by an adult.
Changes to this policy
We may update this privacy policy from time to time, for example if we start using a new booking system, payment provider or marketing tool. Any changes will be posted on this page with an updated “last updated” date at the top.
Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Viva Cuba Leeds, 342 Kirkstall Road, Leeds, LS4 2DS
Email: info@vivacubaleeds.co.uk Phone: 0113 275 0888