Introduction & Who We Are

Yaki Ya! Ltd ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our restaurants, use our website, or interact with our services.

Data Controller: Yaki Ya! Ltd (Company No: 12267307)
ICO Registration Number: ZB335931
Registered Office: 1 Stockwell Close, Edgware, HA8 0ZW
Contact Email: ac@yakiya.co.uk

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Data We Collect

We collect, use, store, and transfer the following types of personal data:

Identity Data: Name, username or similar identifier
Contact Data: Billing address, delivery address, email address, telephone number
Financial Data: Payment details (processed securely via PCI-DSS compliant third-party providers; we do not store full card details)
Transaction Data: Details about payments and orders you place
Technical Data: IP address, browser type, device information, and website usage data
Marketing & Communications Data: Your preferences in receiving marketing communications
Image Data: CCTV footage recorded at our premises for safety and crime prevention

We only collect data that is necessary for the purposes described in this policy.

How We Use Your Data & Legal Basis

We will only use your personal data where the law allows us to:

Performance of a Contract

To process and deliver your orders. To manage payments and customer service.

Legitimate Interests

To operate and improve our business. To prevent fraud and misuse. To ensure safety and security (including CCTV). To send relevant offers where permitted ("soft opt-in").

Legal Obligation

To comply with tax, legal, and regulatory requirements.

Consent

Where you actively subscribe to marketing, loyalty programmes, or newsletters.

Marketing Communications

You will only receive marketing communications from us if you have opted in, or you have previously purchased from us and have not opted out.

You can opt out at any time by clicking "unsubscribe" in emails or contacting us directly at ac@yakiya.co.uk.

CCTV and In-Store Privacy

We operate CCTV at our premises for the protection of staff, customers, and property.

Purpose: Crime prevention and detection
Retention: Typically retained for up to 30 days unless required for investigation
Access: Restricted to authorised personnel only

Sharing Your Personal Data

We may share your personal data with:

Service Providers

Payment processors (e.g., Stripe, Square). Delivery partners (e.g., Deliveroo, Just Eat). IT and system providers (EPOS, website platforms).

Professional Advisers

Lawyers, accountants, insurers.

Regulators & Authorities

Including HMRC and law enforcement where required.

Third-Party Platforms

If you order through third-party platforms, they act as independent data controllers. Please review their privacy policies separately.

International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including UK Adequacy Regulations and Standard Contractual Clauses (SCCs).

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including secure systems and encryption, restricted access on a "need-to-know" basis, and staff training on data protection.

Data Retention

We retain personal data only for as long as necessary:

Order and financial data: up to 6 years (legal/tax requirement)
Marketing data: until you opt out
CCTV footage: typically up to 30 days

Your Legal Rights

Under UK data protection law, you have the right to access your personal data, correct inaccurate data, request deletion (where applicable), object to processing (especially marketing), restrict processing, request data portability, and withdraw consent at any time.

To exercise your rights, contact: ac@yakiya.co.uk

You also have the right to complain to the Information Commissioner's Office.

Cookies

We use cookies and similar technologies on our website to enable essential website functionality, analyse website performance and usage, remember your preferences, and, where you agree, support marketing activities. Strictly necessary cookies help the website function properly, including security, page navigation, and ordering, booking, or checkout functions. These do not require consent.

Analytics cookies help us understand how visitors use our website and improve performance. These are only used if you accept them.

Functionality cookies remember your preferences and improve your experience. These are only used where appropriate and, where required, with your consent.

Marketing cookies help us deliver relevant advertising and measure campaign effectiveness. These are only used if you accept them.

Some cookies may be set by third-party providers. Where cookies are not strictly necessary, we will ask for your consent before placing them on your device. You can withdraw or change your cookie choices at any time through our cookie settings tool. You can also manage cookies through your browser settings, although disabling some cookies may affect how the website functions.

Failure to Provide Data

Where we need to collect personal data to fulfil an order or comply with legal requirements, failure to provide this data may result in us being unable to provide our services.

Automated Decision-Making

We do not carry out automated decision-making or profiling that has a legal or significant effect on you.

Children's Data

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about this Privacy Policy or your personal data:

Email: ac@yakiya.co.uk
Address: 1 Stockwell Close, Edgware, HA8 0ZW